Zcash (ZEC) co-founder and lead developer, Zooko Wilcox, has revealed the details of an emergency strategy designed to preserve the coin’s mathematical integrity. The network is preparing for the Ironwood hard fork (NU6.3), which will activate on July 28, 2026, at block 3,428,143 to permanently isolate the vulnerable Orchard pool and lock up any potentially forged ZEC.
The “turnstile” strategy: How to lock up phantom coins
For those who missed it, a critical bug was discovered by Shielded Labs researcher Taylor Hornby that could theoretically have allowed hackers to mint ZEC undetected inside the private Orchard pool. By 2026, developers had quickly fixed the vulnerability at the protocol level and found no evidence that it had actually been exploited.
However, because the Orchard pool provides complete privacy, no one can guarantee that hidden issuance did not occur before the patch was deployed.
Zooko’s strategy eliminates the need for blind trust. On July 28, the original Orchard pool will be completely sealed and a new, clean Orchard pool with corrected cryptography will launch in its place.
Funds will be transferable from the old system to the new one only through a special turnstile gateway. This cryptographic mechanism strictly controls the balance: it will prevent more coins from leaving the old pool than legitimately entered throughout its entire history.
If hidden issuance did occur, the counterfeit ZEC will remain permanently frozen inside the old pool, becoming digital waste. At the same time, any user running a personal node will be able to independently verify the accuracy of the circulating supply.
Cryptocurrency exchanges, wallets, and swap services that have not completed their software testing may temporarily suspend ZEC deposits and withdrawals, but developers emphasize that such pauses are routine technical adjustments on the service providers’ side, not a threat to the security of users’ assets.
Private-wallet holders should also be prepared for their Orchard balances to temporarily appear unavailable.
As of now, ZEC holders only need to wait until July 28, when Ironwood’s cryptographic “turnstile” will demonstrate in practice Zcash’s ability to protect its economy under conditions of strong privacy guarantees.
