Zcash's push toward quantum preparedness has moved from theory into the way shielded funds are recorded on the network. The Ironwood upgrade, activated on July 28, 2026, at block 3,428,143, opened a new shielded pool containing notes designed to support recovery if current cryptographic protections ever fail. The change does not, however, make transactions quantum-resistant today. For holders, the practical significance is where balances reside: the recovery design applies to the new pool, not to older ones.

An October 25 technical update drew attention to ZIP 2005, which reserves hexadecimal marker 0x0A — equal to decimal 10 — for a specific cryptographic operation. The marker's role is precise but narrower than a wholesale security replacement: it separates one calculation from another. Reserving identifiers ahead of deployment leaves room for new functions to be specified without colliding with values already in use. The specification forms part of a broader effort the project describes as future-proofing against possible quantum threats.

Ironwood introduced quantum recoverable shielded notes to Zcash. ZIP 2005 reserves 0x0A (decimal 10) as a pseudorandom function domain separator. A small cryptographic detail in a much larger effort to future proof against possible quantum threats. pic.twitter.com/5A3c0cUBS

— Zcash (@Zcash) October 24, 2026

Taken together, the specification and the new note design show how Zcash is preparing a path for legitimate holders to recover their funds. Major pieces of that path, including authorization and proof systems, remain unfinished.

How Ironwood Shielded Notes Prepare Zcash for Quantum Recovery

ZIP 2005 assigns 0x0A to PRF-expand, a pseudorandom function used in the split-note functionality described by ZIP 226. Acting as a domain separator, the marker keeps values created for different purposes from being interpreted interchangeably. Reserving this identifier by itself provides no quantum resistance.

Ironwood separately introduces a note plaintext format marked 0x03, compared with 0x02 for earlier Orchard notes. The new format's commitment-randomness calculation uses transaction details, including recipient public keys, note values and other cryptographic parameters. Those inputs help link a recovered note to a valid commitment recorded onchain.

Zcash's network activated its NU6.3 upgrade at block 3,428,143. The activation established the Ironwood shielded pool while restricting the original Orchard pool and applying additional safeguards to transfers. That distinction matters because the recovery design requires funds to reside in the newer pool, where notes are explicitly built to be quantum recoverable.

Why Quantum Recovery Still Needs Further Cryptographic Upgrades

The security gap is serious. Sufficiently powerful quantum computers could undermine the elliptic-curve cryptography that supports existing shielded protocols, and successful attacks could enable forged transactions, unauthorized transfers or manipulation of shielded balances. Zcash therefore draws a line between protection against theft and the ability to reclaim legitimate funds after the fact.

Under the proposed model, an eventual recovery mechanism would let valid owners reclaim Ironwood funds once vulnerable systems are disabled. Zcash developers, however, have not finalized the recovery protocol, the post-quantum proof system or the commitment-tree architecture. Those three components are the milestones that would turn Ironwood's preparatory groundwork into a working recovery capability.

That leaves a practical divide between balances. Older Sprout, Sapling and Orchard funds would not carry the same planned recovery protection. The specification recommends moving eligible funds into Ironwood, although migration alone cannot replace the missing security components.

Privacy remains a separate concern as well. Encrypted transaction data could become readable to a future attacker who already knows the recipient's address. For Zcash, quantum readiness therefore remains a staged transition rather than a completed defense: Ironwood establishes one recovery foundation, while work on transaction-level security continues.