Zcash's Ironwood upgrade went live at block 3,428,143 on July 28, and it left roughly 3.66 million ZEC standing in line at a one-way exit. That is about $1.7 billion at today's $473 print, and more than a fifth of all ZEC in circulation. The turnstile is the protocol rule guarding that exit. It caps total withdrawals from the old Orchard shielded pool at the amount of ZEC that verifiably entered, so real coins walk out freely while any counterfeits minted during the four-year flaw window stay trapped inside forever.
That design turns the next few months into a live, public supply audit of a privacy coin. Activation was the easy part, and our activation-day coverage walked through what shipped. The count is where Zcash either proves its 21 million cap survived the worst bug in its history or learns exactly how much it did not.
What the Turnstile Actually Does
Think of the old Orchard pool as a country with sealed borders and a single customs desk on the way out. The desk does not open your bags, ask your name, or check where you are going. It keeps exactly one number, a running tally of how much value has ever legally entered the country, and it refuses to let cumulative departures exceed that figure. Every honest traveler clears the desk without friction. Only value that was never supposed to exist gets stopped, because by definition it was never stamped in.
This is the part most coverage gets wrong, so it is worth stating plainly. The 3.6 million coins are not frozen. Holders of legitimate ZEC pass through the checkpoint at will, keep full custody the entire time, and land in the new Ironwood shielded pool with privacy intact. The turnstile is a public accounting gate, not a freeze. The only supply that can ever get caught is supply with no verifiable deposit backing it, and that supply, if it exists at all, would be the counterfeit output of the old flaw.
Since activation, Orchard accepts no new deposits and permits withdrawals only, which means its balance can move in exactly one direction. Individual shielded balances stay invisible, but the pool's aggregate inflows and outflows have always been public numbers on the chain. Anyone can watch the tally in real time.
Why 3.6 Million ZEC Has to Be Counted at All
The problem the turnstile solves dates to May 2022, when the Orchard pool launched with a flawed zero-knowledge proof circuit. Shielded Labs researcher Taylor Hornby found the bug on May 29 this year. It would have let an attacker mint counterfeit ZEC inside the shielded pool while leaving no onchain trace, and it had sat undetected for four years.
The public disclosure in early June knocked 38% off ZEC within 24 hours. A hotfix replaced the flawed circuit on June 3, which stopped any new counterfeiting from that date forward. But a fix going forward cannot answer the backward-looking question. Did anyone quietly print ZEC during those four years? Because shielded transactions hide amounts by design, no scan of the blockchain can settle it directly.
The developers' answer was to propose closing the old pool entirely and forcing everything through the accounting gate, a plan the market liked enough to send ZEC up 45% on the proposal alone. Ironwood, formally NU6.3, is that plan activated. If the flaw was never exploited, the pool drains cleanly and the tally never hits its cap. If someone did print coins, the excess claims physically cannot exit, and the damage stays quarantined inside a dead pool.
The Timeline From Flaw to Final Count
The full arc runs four years from bug to gate, and the decisive stretch is only beginning.
|
Date
|
Event
|
What it means for the count
|
|
May 2022
|
Orchard pool launches with the flawed proof circuit
|
The exposure window opens
|
|
May 29, 2026
|
Taylor Hornby of Shielded Labs finds the counterfeiting flaw
|
The exposure window is measured for the first time
|
|
June 3, 2026
|
Hotfix replaces the flawed circuit
|
No new counterfeits possible from this date
|
|
Early June 2026
|
Public disclosure hits the market
|
The uncertainty gets priced instantly
|
|
July 28, 2026
|
Ironwood (NU6.3) activates
|
Orchard closes to deposits, the turnstile goes live
|
|
July 29, 2026
|
First wave of coins crosses into the new pool
|
The pool balance starts falling for the first time
|
|
Coming months
|
Voluntary migration, no published deadline
|
The final tally becomes the supply audit
|
One row deserves emphasis. Migration is voluntary, so the calendar has no end date. The audit finishes when holders decide it does, and that makes the pace itself a signal worth trading on.
The Migration Scoreboard After Two Days
CoinDesk's day-one tracking put roughly 176,000 ZEC, about $81 million, through the turnstile in the first 24 hours, close to 5% of the pool's balance at activation. The following day slowed to around 46,000 ZEC. Early movers are typically the technically fluent minority, and the long tail belongs to exchanges, custodians, and dormant holders who may take months.
The remaining shielded map looks like this. About 12.5 million ZEC sits in the fully transparent pool, roughly 582,000 in the older Sapling pool, and approximately 3.5 million still inside Orchard as of July 30. Every coin that crosses shrinks the uncertain zone, because migrated coins have, by construction, passed the backing check.
A steady drain with no incident is exactly what bulls want to see. A sudden rush of exits bunched together would be worth investigating, and an eventual standoff, where withdrawals approach the deposit cap while balances still claim to exist inside, would be the chain telling everyone the flaw was exploited after all.
Price Context and What to Watch
ZEC trades at $473.50 as of the morning of July 30, 2026, up 4.0% in 24 hours with a $451.53 to $473.69 range, per CoinGecko's live ZEC page. FXStreet had flagged a roughly 20% slide over the ten days into July 29 as the event premium bled out, so today's bounce reads as stabilization rather than a new trend, even as the broader tape digests Wednesday's 9-3 Fed hold. The sell-the-news dynamic behind that slide was the subject of our aftermath piece yesterday, and this article picks up the thread that piece flagged as the long-term bull case.
Migration pace. Watch how fast the Orchard balance falls week over week. Acceleration means confidence, a stall means indifference, and neither is priced yet.
Anomaly reports. The Electric Coin Company and Zcash Foundation publish protocol updates through the official Zcash site. Any notice of irregular turnstile behavior would be the single most important headline in this asset.
The balance trajectory near zero. The endgame number matters more than any single weekly print along the way. A pool that drains toward empty without ever hitting the withdrawal cap is a completed audit with a passing grade.
For newcomers who want the protocol basics before trading the event, our Zcash explainer covers the shielded pool architecture, and the how-to-buy guide covers execution.
Frequently Asked Questions
What is the Zcash turnstile?
The turnstile is a protocol rule that caps total withdrawals from a closed shielded pool at the amount of ZEC verifiably deposited into it. Backed coins exit freely into the new pool, while any counterfeit coins created inside can never leave. Zcash used the same mechanism when it retired its older Sprout pool, so Ironwood applies a proven tool, at much larger scale.
Is Zcash supply verifiable?
The transparent pool always was, and shielded pools are verifiable in aggregate because total inflows and outflows are public even though individual balances are hidden. The turnstile strengthens this by forcing the old pool's books to balance before value escapes. A clean drain would make ZEC's 21 million cap one of the most rigorously audited supplies in crypto.
What happens to ZEC that never leaves the Orchard pool?
Nothing forces it out. There is no published deadline, and legitimate coins remain spendable through migration whenever the holder chooses. The practical risk of waiting is reputational rather than personal, since a large stagnant balance keeps the uncertainty discount alive for everyone.
Was the Zcash counterfeiting bug actually exploited?
No evidence of exploitation has surfaced, but shielded transactions leave no trace, so absence of evidence was all anyone could claim until now. The turnstile converts that open question into a measurable one. The final count is the only instrument that can answer it definitively, which is precisely why it exists.
Bottom Line
If the Orchard balance drains steadily and total withdrawals never press against the deposit cap, Zcash walks away with something no other privacy asset has, a cryptographic proof that its supply survived a four-year exploitable flaw untouched. If withdrawals ever do hit the cap with claims left inside, the counterfeit total gets quantified and quarantined rather than dumped on the market, which is still a better outcome than the unbounded fear of early June. Near term, hold above the $451 area that marked this week's low and the stabilization case stays intact, while the migration tracker, not the chart, is where the real signal prints. Few assets ever schedule their own supply audit in public, and ZEC's began this week.
This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency trading involves substantial risk. Always conduct your own research before making trading decisions.
