Zcash's Ironwood pitch: an auditable turnstile for a pool that can't prove its own door count 🚪

Zcash developers are advancing a proposal for a new shielded pool called Ironwood, designed to restore publicly verifiable supply accounting weeks after a disclosed flaw in the existing Orchard pool raised fresh concerns about hidden inflation risk. The June 6 proposal from the Zcash Open Development Lab (ZODL) follows the June 5 disclosure of a critical vulnerability in Orchard that developers said could have theoretically enabled unlimited undetectable counterfeit ZEC before an emergency patch was deployed. ZODL and the Zcash ecosystem have stated there is no evidence the flaw was ever exploited and that circulating supply has not changed.

The proposed Ironwood upgrade introduces a "turnstile" accounting mechanism intended to make Zcash's circulating supply publicly auditable again. Under the plan, the existing Orchard pool would stop accepting new deposits and internal transfers, with funds only able to move forward through the turnstile before entering Ironwood. The mechanism is designed to reject any attempt to withdraw more ZEC than was originally deposited into the migration process, which ZODL says would provide a trustless guarantee that circulating supply remains accurate. "The total supply moved from Orchard to Ironwood will be verified by a turnstile, allowing anyone to audit Zcash's circulating supply," ZODL wrote in the proposal. The ecosystem added that Ironwood would undergo additional independent audits and formal verification reviews to address future soundness issues, with activation currently targeted for late July 2026 following the planned deprecation of zcashd support.

Attention around Orchard intensified again on June 11 after Arkham flagged a withdrawal representing roughly 1% of all ZEC held inside the shielded pool. Arkham said Orchard still theoretically holds around 3.88 million ZEC, worth approximately $1.65 billion, while acknowledging that shielded balances cannot be independently verified. The transaction itself does not prove counterfeit ZEC entered circulation or that the Orchard flaw was exploited before remediation, but the movement drew focus because the original disclosure acknowledged there is no way to determine whether inflation occurred before the patch.

ZEC price action has shifted notably since the initial Orchard disclosure, with a sharp selloff immediately following the June 5 announcement followed by stabilization as traders reassessed the long-term implications of the flaw and the ecosystem's proposed response. The rebound has been read by market participants as a signal that the issue is being treated as a contained technical vulnerability rather than an active supply breach.