ZEC has gained 26% over the past 30 days, ran to roughly $508 into activation eve while most of the market wobbled, and enters today as July's standout large cap. The catalyst is concrete. Ironwood is a Zcash network upgrade that permanently seals the counterfeiting flaw found in the Orchard shielded pool this spring, and it is expected to activate today, July 28, at block 3,428,143, around 8am ET. As of 2:35 UTC this morning, ZEC trades at $473.64 on CoinGecko, down about 5.6% in 24 hours as the pre-FOMC risk-off pulled the pre-activation pop back overnight.
That combination, a month of outperformance into a hard fix event followed by a give-back hours before the block, is the whole story of activation day, and the next few hours decide which half of it wins.
What Happens at Block 3,428,143
Ironwood, formally designated NU6.3, activates when the Zcash network mines its target block, which node operators expect this morning US time. Sean Bowe, one of Zcash's core cryptographers, wrote on X that "all of the major organizations are committed to activation," and the date was locked on July 10 after being pushed back one week from the original schedule, a delay first reported by crypto.news. As of the time of writing, the block had not yet been reached, so treat every "Ironwood is live" headline you see this morning with a timestamp check.
Once the block passes, the network stops accepting new activity in the existing Orchard shielded pool and opens a fresh one in its place. Roughly 3.76 million ZEC sitting in the old pool will have to move through a public accounting checkpoint, called the turnstile, before entering the new pool, per figures reported by TechTimes. Official upgrade documentation lives on the Zcash project site if you want the protocol-level detail.
Think of the turnstile as a customs desk between two countries. Nobody can see what travelers did inside the old country, but every coin crossing the border gets counted, and if more ZEC ever tries to exit the old pool than verifiably went in, the network will have hard evidence that counterfeits exist and can quarantine them.
How Zcash Got Here in Eight Weeks
The bug behind all of this sat in the Orchard proof circuit for four years before anyone noticed. Independent security researcher Taylor Hornby found it during a protocol audit for Shielded Labs, working with Anthropic's newest Claude model within a day of that model's public release. The flaw could have let an attacker forge zero-knowledge proofs and mint effectively unlimited counterfeit ZEC inside the shielded pool, invisible to everyone because shielded balances are encrypted by design.
|
Date
|
Event
|
ZEC reaction
|
|
Late May 2026
|
Four-year-old "infinity" flaw found in the Orchard circuit during a Shielded Labs audit assisted by Anthropic's Claude model
|
Not yet public
|
|
June 5
|
Public disclosure of the counterfeiting risk
|
Roughly 30% sell-off in the days that followed
|
|
Early June
|
Emergency soft fork at block 3,363,426 disables Orchard, then the NU6.2 hard fork at block 3,364,600 re-enables it with a corrected circuit
|
Price bases near $376 by late June
|
|
Mid-June
|
Ironwood proposed as the permanent, structural fix
|
ZEC jumps 45% on the proposal
|
|
July 10
|
Activation date confirmed for July 28
|
ZEC pushes toward $500
|
|
July 28
|
Activation expected at block 3,428,143
|
Pre-activation pop fading overnight
|
The crash phase is documented in our coverage of the Orchard sell-off, and the turn came almost exactly when the roadmap did, as our report on the 45% proposal pop showed. No evidence has surfaced that the flaw was ever exploited. The turnstile exists to convert that "no evidence" into proof.
What Ironwood Actually Changes
Three things, and none of them require you to read a cryptography paper.
A new shielded pool replaces the old one. The vulnerable-era Orchard pool gets phased out, and everything going forward happens in a pool built on the corrected circuit, so the four-year exposure window is walled off for good.
The turnstile makes the supply auditable. For a privacy coin, this is the part that matters most. Zcash's pitch has always been encrypted balances on a verifiable monetary base, and the bug attacked exactly that second half. The checkpoint restores that base with hard math the whole network can check.
A control flag goes into the proof circuit. Ironwood adds a switch that lets developers turn specific proving behavior off in a future upgrade without another emergency fork. It works like a circuit breaker installed in advance, and it exists because the June scramble showed what responding without one costs.
If you want a refresher on how shielded pools and zk-proofs work in the first place, our Zcash explainer covers the architecture without the math.
Why Holders Bid a Fix Event
A 26% month for ZEC against a 5.9% month for BTC over the same CoinGecko window is unusual relative strength, and it maps cleanly onto the upgrade timeline. July's peak prints ranged widely by feed, with aggregators marking a $462 to $501 band for much of the month and CoinGecko tagging $523 on July 17.
The logic of the bid is straightforward. The June disclosure priced in a tail risk, the possibility that Zcash's supply could be silently inflated, which for a privacy coin is an existential defect rather than an ordinary bug. Every step toward Ironwood removed a slice of that risk, so the market paid back a slice of the discount. Traders who watched the token base near $376 in late June were effectively buying the fix before it shipped, and anyone entering now can start from our how-to-buy Zcash guide.
And the pattern is not unique to Zcash. Markets reward removed uncertainty more reliably than they reward good news, because a sealed flaw changes the floor of the valuation rather than the ceiling.
The Sell-the-News Risk Is Already Showing
The honest read of the last 24 hours is that the fade may have started early. ZEC printed its ~$508 local high late Sunday into Monday's Asia session, up about 7% on its 24-hour window at the time, while BTC was still grinding sideways near $65,000. It then gave the entire pop back through Monday's US session and overnight, falling harder than BTC's roughly 3% slide as the whole tape de-risked into tomorrow's Fed decision, which our FOMC preview covers in detail.
That is exactly the shape event-driven rallies tend to take. The catalyst has a delivery date, the delivery date arrives, and the reason to front-run it expires at the block height. Ironwood activating cleanly is arguably already in the price after a 26% month. What is not yet in the price is the turnstile's output over the coming weeks, because a checkpoint that shows no counterfeit ZEC ever existed would close the June episode with a verified clean bill.
Watch the $462 area, the floor of July's aggregator range, as the line between a normal post-event digestion and a full unwind of the fix trade.
Frequently Asked Questions
What is the Zcash Ironwood upgrade?
Ironwood, or NU6.3, is a Zcash network upgrade that permanently resolves the Orchard shielded-pool counterfeiting flaw disclosed in June 2026. It retires the vulnerable pool, opens a corrected replacement, routes exiting funds through a public accounting checkpoint, and adds a proof-circuit control flag so future fixes will not need emergency forks.
Why is Zcash going up?
ZEC outperformed nearly every large cap in July because the market was pricing out the counterfeiting tail risk as the Ironwood fix approached. Fix events attract buyers because they take a known negative out of the price. Note that ZEC pulled back alongside the broader market in the 24 hours before activation.
Was the Zcash Orchard bug ever exploited?
No evidence of exploitation has been found, but until Ironwood, that conclusion rested on inference, with no way to prove it. The turnstile checkpoint changes this, because counting all funds that exit the old pool against what verifiably entered will produce mathematical evidence one way or the other over time.
What happens to ZEC after Ironwood activates?
Shielded funds in the old Orchard pool remain spendable but must pass through the accounting checkpoint to reach the new pool. Regular transparent and shielded transactions continue as normal for users, with wallets updated by the major providers ahead of the July 28 activation. Exchanges did not need to halt ZEC trading for the upgrade.
Bottom Line
If block 3,428,143 passes cleanly today and the turnstile begins producing evidence of an intact supply, the June crash becomes a closed chapter and ZEC's premium versus the market rests on verified ground. If the block passes and the price keeps bleeding through the $462 range floor, you are watching the textbook version of a rumor that was bought for eight weeks getting sold at delivery. Either way, the block height is the least interesting number from here. The checkpoint's count is the one that decides what the fix was worth, and our long-range ZEC forecast lays out the scenarios past this week.
This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency trading involves substantial risk. Always conduct your own research before making trading decisions.
