Zcash rolled out a new shielded pool called Ironwood this week, drawing $80 million in deposits on its first day. The launch comes after the privacy-focused cryptocurrency was forced to seal its original pool due to a counterfeiting bug.
The Ironwood launch
Ironwood went live on July 29, 2026, and within hours had attracted $80 million in deposits. The pool is designed to offer stronger privacy guarantees than its predecessor, though Zcash hasn't disclosed whether it underwent a third-party audit before going live. The rapid inflow suggests users are eager for a working shielded option after months of uncertainty.
Why the old pool was sealed
The previous shielded pool was shut down after developers discovered a counterfeiting vulnerability. The bug could have allowed an attacker to create Zcash out of thin air, undermining the entire supply cap. Zcash's team patched the issue and sealed the old pool, but the incident shook confidence in the protocol's cryptographic foundations.
Audit lessons
The episode highlights the need for robust cryptographic audits to maintain trust in privacy protocols. Shielded transactions rely on complex zero-knowledge proofs, and even a small flaw can have catastrophic consequences. For Zcash, Ironwood is a chance to rebuild that trust — but the pressure is on to prove the new code is bulletproof.
Zcash hasn't said when it will release a full post-mortem of the bug or whether Ironwood will be independently reviewed. Until then, the $80 million sitting in the pool is a vote of confidence — and a reminder of how much is at stake.
