Zcash unveiled its proposed Ironwood shielded pool after fixing a critical vulnerability that briefly sent ZEC down over 50%.
Zcash News
One day after Zcash Open Development Lab (ZODL) confirmed a patch for a critical security flaw, the team published a proposal for a new shielded pool. Released on June 7, the proposal introduces a pool called Ironwood, co-developed with Tachyon, Valar Group, the Zcash Foundation, and Shielded Labs. It would be built on top of the existing Orchard architecture, with formal verification and multiple independent security audits required before any deployment.
The Ironwood announcement came as Zcash (ZEC) was still recovering from one of its steepest drops in recent history. ZEC fell more than 50% from approximately $630 to a low of $303 on June 5, after independent support group Shielded Labs disclosed a critical vulnerability in the Orchard shielded pool. By June 8, ZEC had clawed back 41.5% of that loss, trading at $427.67.
How the 2-Step Emergency Fix Worked
The Orchard pool is Zcash's primary shielded transaction layer. It uses zero-knowledge proof cryptography to allow users to send and receive ZEC without exposing transaction details on-chain. The vulnerability exposed the network to a scenario in which counterfeit ZEC could be minted without limit, threatening the integrity of the token's total supply. Shielded Labs confirmed the bug had been fixed before the public disclosure and said there was no evidence an actual exploit had taken place.
ZODL founder Josh Swihart detailed the two-step response in a post on X on June 8. The team deployed a soft fork first, disabling all Orchard transactions to contain the exploit risk before the full scope of the issue was made public. A hard fork labeled NU6.2 then activated on June 3, resolving the underlying flaw and restoring Orchard functionality. Mining pools ViaBTC and Foundry played a direct role in coordinating the response, and ZODL conducted code reviews for exchanges and mining pools on request to verify the patch.
Source: Josh Swihart
Market Fallout and What Comes Next
The market's reaction to the initial disclosure was severe. BitMEX co-founder Arthur Hayes announced that he had sold his entire ZEC position after the news broke. Other traders who had purchased ZEC for its zero-knowledge privacy features reassessed whether the protocol's security remained reliable, driving the sell-off past 50%.
Swihart wrote in his June 8 post that the team had resolved the issue and stress-tested its incident response processes. He said the episode ultimately strengthened relationships across the Zcash ecosystem and produced a more unified community of builders. The team described Ironwood as "the next step in hardening the Zcash protocol."
This article contains links to third-party websites or other content for information purposes only (“Third-Party Sites”). The Third-Party Sites are not under the control of CoinMarketCap, and CoinMarketCap is not responsible for the content of any Third-Party Site, including without limitation any link contained in a Third-Party Site, or any changes or updates to a Third-Party Site. CoinMarketCap is providing these links to you only as a convenience, and the inclusion of any link does not imply endorsement, approval or recommendation by CoinMarketCap of the site or any association with its operators. This article is intended to be used and must be used for informational purposes only. It is important to do your own research and analysis before making any material decisions related to any of the products or services described. This article is not intended as, and shall not be construed as, financial advice. The views and opinions expressed in this article are the author’s [company’s] own and do not necessarily reflect those of CoinMarketCap.
