NewsCryptoGrayscale Launches Zcash ETF After Critical Privacy Flaw Was Patched

Grayscale Launches Zcash ETF After Critical Privacy Flaw Was Patched

Author: Decrypt·

Key Takeaways

  • Grayscale’s Zcash product began trading on NYSE Arca as ZCSH, offering spot ZEC exposure through an exchange-traded structure.
  • The fund originated as the Grayscale Zcash Trust in October 2017 and was later filed for conversion into an ETF with the SEC.
  • A critical vulnerability in Zcash’s shielded transaction system was disclosed and patched before the listing, and privacy features made exploitation difficult to confirm.
  • Zcash’s July Ironwood upgrade replaced the vulnerable Orchard shielded pool and added accounting rules intended to prevent counterfeit coins from circulating.
  • Grayscale said it expects the product to appeal to investors seeking brokerage-account access to ZEC and will watch adoption, network security, exchange support and regulation.
Grayscale Launches Zcash ETF After Critical Privacy Flaw Was Patched

Grayscale’s Zcash fund began trading Tuesday on NYSE Arca under the ticker ZCSH.

The product began as a private placement in October 2017.

Its listing follows the disclosure and patching of a critical vulnerability in Zcash’s shielded transaction system, a reminder that privacy-focused assets can draw interest for their features while also facing close scrutiny over security and operational integrity.

Grayscale’s Zcash Exchange Traded Fund, better known as an ETF, began trading Tuesday on NYSE Arca, listing a nine-year-old investment product months after developers disclosed and patched a critical vulnerability in the privacy coin’s shielded transaction system.

Trading under the ticker ZCSH, the world’s first exchange-traded product offering spot Zcash exposure allows investors to track the price of ZEC through brokerage accounts without having to buy or store the token themselves.

“Grayscale has a long history of identifying emerging technologies and investment themes early, and our nine-year history operating this fund is the clearest signal of demand,” Grayscale Head of Index Steve Vanourny told Decrypt.

ZCSH began as the Grayscale Zcash Trust in October 2017. Grayscale filed with the Securities and Exchange Commission in November to convert the trust into an exchange-traded fund. As an exchange-traded product, shareholders do not own ZEC directly but instead own shares intended to track the value of the fund’s ZEC holdings.

Vanourny said Zcash’s maturity, privacy features and investor demand for assets beyond Bitcoin and Ethereum made this the right time to list the nine-year-old fund.

“Investors increasingly want exposure to digital assets beyond Bitcoin and Ether through the brokerage accounts they already use, and Zcash occupies a distinctive place in that landscape,” Vanourny said. “With its nearly decade-long network history, monetary design derived from Bitcoin, including proof of work and a 21 million coin limit, in addition to optional privacy technology that Bitcoin does not have.”

According to Vanourny, Grayscale expects ZCSH to appeal primarily to self-directed and advised investors seeking ZEC exposure through a brokerage account.

“We view ZCSH as a focused, higher-risk satellite position within a broader digital-asset allocation that is complementary to, but not a replacement for, Bitcoin,” he said. “It offers a distinct thesis: Bitcoin-like scarcity and proof-of-work economics, plus optional privacy, for investors who see privacy as the next major theme for the industry to address as it scales.”

While Vanourny pointed to Zcash’s fixed supply and proof-of-work model as similarities to Bitcoin, its optional privacy complicated the response to a critical security flaw. Because shielded transactions are designed to hide sender, recipient and amount details, confirming whether the vulnerability was ever exploited was not possible in the same way it would be for a more transparent blockchain.

Zcash's Ironwood upgrade

In May, security researcher Taylor Hornby used Anthropic’s Claude Opus 4.8 to discover a four-year-old vulnerability in Zcash’s Orchard shielded pool that could have allowed an attacker to create counterfeit ZEC. Developers deployed an emergency patch on June 1, but the network’s privacy features made it impossible to determine cryptographically whether the flaw had been exploited.

In July, Zcash activated the Ironwood upgrade, replacing Orchard with a new shielded pool. The upgrade added accounting rules that prevent more ZEC from leaving the retired pool than entered it, trapping any counterfeit coins that may exist.

For users and institutions evaluating privacy assets, those fixes matter because they speak directly to the reliability of the token’s supply rules and the infrastructure needed for exchange and brokerage access. Grayscale’s listing also arrives as the market for crypto funds continues to broaden beyond the largest assets, with product design, custody and network security all part of how these offerings are assessed.

Looking ahead, Vanourny said Grayscale will judge Zcash’s progress by its adoption, utility and network security rather than the token’s price.

“On the security and infrastructure side, we will be watching the continued rollout and adoption of the Ironwood upgrade, which closed the vulnerable shielded pool from the June 2026 incident and added independently audited, formally verified supply guarantees,” he said. “Grayscale will also be monitoring exchange support and regulatory treatment of Zcash and privacy assets more broadly.”