Created in response to Bitcoin's perceived limitations, Zcash delivers transactional privacy through zk-SNARK technology—zero-knowledge succinct non-interactive arguments of knowledge, a cryptographic breakthrough that lets one party prove a statement is true without revealing the underlying data. Like Bitcoin, it relies on a proof-of-work consensus algorithm, but it allows transactions to be either transparent or shielded. Following the disclosure of a vulnerability in its Orchard shielded pool, Zcash activated the Ironwood upgrade in July 2026 to migrate to a new private pool.

For years, Bitcoin was used for online drug purchases under the assumption that it was anonymous. In reality, Bitcoin transactions are surprisingly easy to trace. Zcash emerged as a cryptocurrency that promised something Bitcoin could not: privacy.

How Zcash Works

Zcash is engineered to conceal key transaction details—namely the sender, recipient, and amount. Using cryptographic techniques, transfers can be executed in a way that cannot easily be traced on a public ledger while remaining verifiable by the network.

Zcash permits transactions to be either transparent, like Bitcoin, or private using zero-knowledge proofs known as zk-SNARKs. This cryptographic method confirms that a transaction is valid without revealing the sender, recipient, or transaction amount. When coins are fully shielded, Zcash functions as a fungible cryptocurrency, meaning tokens in the private pool carry no link to prior transaction history. However, the majority of Zcash coins currently reside in the transparent pool, which—like Bitcoin—maintains a publicly visible history.

This optional approach to privacy sets Zcash apart from other privacy coins such as Monero, which obscures sender, recipient, and amount by default on every transaction rather than offering it as a choice.

The network maintains two categories of addresses: transparent (t-addrs) and shielded (z-addrs). Wallets such as ECC's Zashi now default to shielding funds, encouraging broader adoption of privacy features.

Who Invented Zcash?

Zcash launched in October 2016 as a privacy-focused cryptocurrency developed by the Electric Coin Company (ECC), led by Zooko Wilcox-O'Hearn. The project drew on academic research from Johns Hopkins, MIT, Tel Aviv University, and other institutions. Like Bitcoin, Zcash (ZEC) has a maximum supply of 21 million coins and undergoes block reward halvings every four years.

Although ECC initiated the Zcash project, it does not own or control the blockchain. All upgrades require community approval, keeping development decentralized and open rather than directed by a single entity.

At launch, Zcash depended on a "trusted setup ceremony" in which six participants each generated and destroyed a portion of a private key. This process was designed to prevent anyone from counterfeiting ZEC. The trusted setup was widely recognized as a potential vulnerability—if all participants had colluded or failed to destroy their key fragments, the system's integrity could have been compromised—and subsequent upgrades were designed to reduce or eliminate this dependency.

In April 2022, Edward Snowden was revealed to have been one of the participants in the ceremony. "He did it as a service, as a public good, and believing in privacy," Josh Swihart, former CEO of the Electric Coin Company, told Decrypt.

Key Dates

• May 2013: The Zerocoin proposal at Johns Hopkins marks the beginning of privacy-focused crypto research that eventually leads to Zcash.
• January 2016: Zooko Wilcox formally announces the Zcash project as a privacy-oriented Bitcoin fork.
• October 2016: Zcash launches following its trusted setup ceremony, and the network goes live. Zcash reaches an all-time high of $5,941.80.
• October 2018: The Sapling upgrade activates, improving the speed and efficiency of shielded transactions.
• December 2019: The Blossom network upgrade takes place, increasing block frequency.
• November 2020: Zcash undergoes its first halving.
• April 2022: Edward Snowden is publicly revealed as "John Dobbertin," a participant in the original launch ceremony who contributed to the trusted setup but was not an architect.
• May 2022: Network Upgrade 5, including the Orchard upgrade, rolls out, reducing reliance on earlier complex setup "ceremonies" for new shielded pools and enabling Zcash users to make private digital cash payments on mobile phones using a new address format called unified addresses.
• November 2024: The second Zcash halving takes place.
• January 2026: The Zcash Foundation announces that the SEC has ended its investigation into the nonprofit without recommending enforcement action.
• January 2026: The CEO of the Electric Coin Company announces that his entire team was "constructively discharged" following a disagreement with its non-profit board members.
• May 2026: Security researcher Taylor Hornby discovers a "critical counterfeiting vulnerability" in Zcash's Orchard privacy pool using Anthropic's Claude Opus 4.8.
• June 2026: Zcash developers deploy an emergency fix after coordinating a confidential response across the ecosystem. Public disclosure of the four-year-old flaw triggers a sharp selloff in ZEC and renewed debate over the tradeoffs between privacy and auditability.
• June 2026: Zcash founder Zooko Wilcox proposes the Ironwood upgrade to enable users to independently verify the cryptocurrency's circulating supply.
• July 2026: The Ironwood upgrade is activated, replacing the Orchard shielded pool with a new private pool and introducing quantum-resistant transaction records.
• November 2028: Zcash's third halving is scheduled to take place.

How Zcash Is Produced

Zcash, like Bitcoin, uses proof-of-work (PoW) to validate transactions, but it runs on the Equihash algorithm—a memory-hard hashing function designed to make mining fairer and more resistant to ASIC hardware. This is the consensus mechanism Zcash originally adopted to secure its network.

Currently, Zcash miners receive 80% of each block reward, while 20% goes to development funds supporting the Electric Coin Company (ECC), the Zcash Foundation, and community grants. This development funding structure—directing a share of block rewards to ongoing protocol development rather than to miners alone—is uncommon among proof-of-work cryptocurrencies and is governed by community decision. It is set for renewal or revision after the upcoming halving.

Zcash is a peer-to-peer cryptocurrency designed for everyday payments. Users can choose between transparent transactions that are regulator-friendly and shielded transactions that enhance privacy. This optionality has helped Zcash remain listed on more major exchanges than some other privacy coins, such as Monero, which certain platforms avoid due to regulatory constraints.

Bitcoin has heavily influenced Zcash. Like the largest cryptocurrency by market capitalization, Zcash is designed to be used for everyday purchases. Its various privacy features also enable it to send or receive transactions hidden from public view.

Zcash, Regulators, and Law Enforcement

Around the world, regulators and law enforcement agencies have intensified scrutiny of privacy coins, arguing that their anonymity features can be misused for money laundering or sanctions evasion. In the United States, the Treasury Department's Financial Crimes Enforcement Network has proposed tighter rules for "anonymity-enhanced cryptocurrencies."

"Several types of [anonymity-enhanced cryptocurrencies]—including Monero, Zcash, Dash, Komodo, and Beam—are growing in popularity and use technologies that make it difficult for investigators to trace blockchain transactions or connect them to individuals involved in illicit activity," regulators wrote in 2020.

As enforcement of the cryptocurrency market intensified, exchanges began delisting privacy coins. In November 2020, privacy-centric exchange ShapeShift delisted Monero, Dash, and Zcash to limit the company's regulatory risk, later reintroducing Zcash in December 2025 and officially integrating Zcash shielded transactions in February 2026. In 2023, OKX delisted Zcash, Monero, and Dash—only to relist Zcash in November 2025 during the cryptocurrency's price surge. As of 2026, Zcash remained listed on Binance, though in April 2025 it was added to the exchange's list of cryptocurrencies that the community could vote on to delist.

Orchard Vulnerability Disclosure

In May 2026, the disclosure of a "critical counterfeiting vulnerability" in Zcash's Orchard shielded pool raised questions over supply integrity, privacy tradeoffs, and the growing impact of artificial intelligence on the blockchain industry.

On May 29, 2026, independent security researcher Taylor Hornby discovered a critical vulnerability in Zcash's Orchard privacy pool using Anthropic's Claude Opus 4.8. The flaw could have allowed an attacker to create unlimited counterfeit ZEC within the network's shielded transaction system. After the exploit was identified, Zcash developers deployed an emergency fix following a confidential coordination effort involving protocol developers, miners, exchanges, and other ecosystem participants.

On June 3, 2026, the Zcash Foundation disclosed the vulnerability and completed a network upgrade that restored Orchard functionality using corrected cryptographic circuits. Developers stated there was no evidence the flaw had been exploited and that the overall ZEC supply remained intact.

Despite assurances that the exploit was fixed and had not been used by an attacker, public disclosure of the four-year-old vulnerability wiped billions of dollars from the privacy coin's market capitalization.

Because Orchard transactions are shielded, developers acknowledged that there is no definitive cryptographic method to determine whether counterfeit coins were created before the bug was patched. This limitation underscores a core tension in privacy-coin design: the same shielding that protects user confidentiality also makes it harder to fully audit the chain's supply. To address those concerns, a week after the exploit came to light, Zcash founder Zooko Wilcox proposed an upgrade called Ironwood that would allow users to independently verify the cryptocurrency's circulating supply.

The Zcash exploit revelation also became part of a broader discussion about frontier AI models as vulnerability-discovery tools, with security researchers warning that increasingly capable systems could accelerate both defensive security research and the discovery of exploitable software flaws.

The Ironwood Upgrade

In July 2026, Zcash activated Ironwood, which retires the Orchard pool. Approximately 3.7 million ZEC, worth $1.7 billion, sat in Orchard when the upgrade went live, requiring holders to migrate those funds into a new shielded pool.

At the center of the upgrade is a "turnstile"—an accounting rule that caps withdrawals from the retired pool at the amount verifiably deposited into it. Any counterfeit ZEC created through the Orchard flaw is permanently trapped, whether or not it actually exists. This mechanism provides the network with a way to guarantee supply integrity without compromising the privacy of individual transactions, resolving the problem developers had conceded in June when they acknowledged there was no cryptographic way to prove the vulnerability had never been exploited.

Ironwood also introduces quantum-resistant transaction records and a formally verified proof circuit, intended to reduce the likelihood of similar flaws going undetected. Following the plan's announcement in early June, developers spent the subsequent weeks testing it while exchanges, wallets, and mining pools prepared for the transition.

The migration carries some risks for privacy-focused users. Decentralized VPN provider Nym warned that because every holder must move funds into the new pool, anyone migrating without additional protection could expose information linking their IP address to their wallet balance. Wilcox advised users not to rush the migration and to use tools such as Tor or a VPN while moving funds.

The Future of Zcash

With regulators tightening surveillance of digital assets and privacy coins facing mounting scrutiny, Zcash is entering what may be its most pivotal period. A halving, a major funding overhaul, and a migration to new software are converging to test whether a privacy-focused cryptocurrency can endure under sustained pressure.

Nearly a decade after its launch, Zcash returned to the spotlight for market reasons. In November 2025, the token surged to a high of $698.87, according to CoinGecko data. Its rise was fueled in part by prominent figures on social media highlighting Zcash's community, privacy design, and technical improvements.

By December 2025, Zcash was again drawing attention and seeing renewed institutional interest, including founder Zooko Wilcox taking an advisory role at a firm building a large ZEC treasury.

In January 2026, Zcash entered a turbulent stretch marked by sharp price swings, internal conflict, and regulatory developments. The Zcash Foundation announced that the U.S. Securities and Exchange Commission had closed a long-running investigation without recommending enforcement action.

Any optimism generated by the SEC decision proved short-lived. In early January, the entire team at Electric Coin Company—the organization that had built and maintained Zcash since its inception—stated it had been "constructively discharged" following a disagreement with the majority of Bootstrap's board members—a 501(c)(3) nonprofit created to support Zcash.

Following their departure, former ECC CEO Josh Swihart announced that he and his former colleagues would launch a new project called cashZ, focused on full-stack Zcash development including a new Zcash-focused wallet.

Elsewhere, independent Zcash development group Shielded Labs—whose contributors include Zooko Wilcox—received approximately $1.16 million in funding from Gemini and Facebook founders Tyler and Cameron Winklevoss, with the stated goal of "strengthening the long-term security, sustainability, and scalability of the Zcash network."

Zcash's next halving is scheduled for November 2028. The current development fund concludes at the same time, and the community is actively debating new funding mechanisms. ECC is deprecating the C++ full node "zcashd" in favor of the Rust-based "zebrad," with a new wallet called Zallet also in development.

These changes will shape Zcash's cryptography, funding model, and user experience for years to come.

This article was updated in July 2026 to reflect recent developments.