Josh Swihart, the founder of Zcash Open Development Lab (ZODL), has disclosed the emergency measures taken to address a severe vulnerability discovered in the Orchard shielded pool, which is a central component of Zcash’s privacy architecture. The flaw could have allowed attackers to generate unlimited counterfeit ZEC, threatening the integrity of the entire network.
Swihart explained that the response involved two sequential network upgrades. Initially, a soft fork was implemented to temporarily disable Orchard transactions, reducing the risk of exploitation while the team worked on a permanent fix. This cautious approach prevented public disclosure of details that could have been used to attack the network. Subsequently, the NU6.2 hard fork went live, fully repairing the underlying security issue and allowing Orchard transactions to resume.
The vulnerability was initially brought to light by Shielded Labs, an independent organization supporting Zcash. They highlighted that the bug in the Orchard circuit could enable unlimited creation of counterfeit coins, though they noted there is no evidence it was ever exploited. While they consider prior exploitation unlikely, they acknowledged the absence of cryptographic proof that the flaw remained dormant.
Orchard serves as the main shielded pool in Zcash, facilitating private transactions using zero-knowledge proofs that hide transaction details while ensuring validity. The rapid response to this critical vulnerability was coordinated with key ecosystem participants, including mining pools and exchanges. Swihart credited ViaBTC and Foundry for their crucial roles in reviewing the emergency code changes and helping to orchestrate the network’s response.
In addition to the immediate fix, discussions have emerged about longer-term protective measures. Shielded Labs has proposed a plan called Ironwood, which would isolate the current Orchard pool, track outflows through turnstile accounting, and eventually transition users to a new, more resilient shielded pool with enhanced supply verification. Meanwhile, David Schwartz, former CTO of Ripple, addressed concerns about funds left in Orchard, stating that passive holders would retain ownership of their coins if no exploit occurred before a migration, as consensus rules could still recognize those balances.
The market reacted sharply to the news, with ZEC dropping from approximately $630 to $303. However, the token has since rebounded, recovering over 41% from its June 5 low. According to recent data, ZEC rose 13.5% in the last 24 hours to $428.67. Despite the turmoil, BitMEX co-founder Arthur Hayes revealed he had sold his entire ZEC position following the disclosure. Summarizing the incident, Swihart emphasized that the network successfully addressed the vulnerability, tested its incident response, strengthened relationships with partners, and united developers around a clear recovery path for the project.