Zcash's highly anticipated Ironwood network upgrade, initially slated for mainnet activation around July 21 following a testnet launch on July 4, may be postponed due to concerns that exchanges, mining pools, and wallets require more time to adapt their systems. Shielded Labs, a key development entity, has highlighted that the simultaneous migration from the legacy zcashd node software to the new Z3 stack—comprising Zebra, Zaino, and Zallet—is still under active development and not yet production-ready.
The urgency behind Ironwood stems from the discovery of a critical bug dubbed 'infinity' in the Orchard shielded transaction pool. The flaw theoretically allowed an attacker to mint unlimited fake ZEC tokens without detection, exploiting Orchard's inherent privacy. While no evidence suggests the bug was exploited, developers acknowledge that the privacy features make it impossible to definitively verify the supply's integrity. The disclosure of this vulnerability triggered a 40% price drop in ZEC.
Ironwood aims to neutralize this threat by creating a new replacement private pool and halting new activity in the existing Orchard. All withdrawals from Orchard would pass through an accounting checkpoint, ensuring no more ZEC exits than originally entered. Zcash founder Zooko Wilcox confirmed that additional security reviews have uncovered 'no additional critical bugs', but stressed that the development team is racing to validate the new system. Jason McGee, Executive Director of Shielded Labs, posted on the Zcash community forum that surveys of infrastructure providers show some expect readiness by late July, while others need more time. No official delay has been announced, but the uncertainty underscores the logistical hurdles facing privacy-focused blockchains during major upgrades.
