Zcash is a privacy-focused cryptocurrency built to do something Bitcoin never fully delivered: keep transaction details hidden while still letting a public blockchain verify that transfers are valid.
For years, Bitcoin was widely used for online drug purchases because many users believed it was anonymous. In practice, Bitcoin transactions are often traceable. Zcash was designed as an alternative, offering a stronger privacy model through cryptography.
How Zcash works
Zcash hides key transaction details such as the sender, the recipient, and the amount. Its cryptographic design allows transfers to be difficult to trace on a public ledger while still remaining verifiable by the network.
The network supports two types of transactions. One is transparent, similar to Bitcoin. The other is private, using zero-knowledge proofs called zk-SNARKs. Those proofs let the network confirm that a transaction is valid without revealing who sent it, who received it, or how much was moved.
When coins are fully shielded, Zcash becomes fungible in the sense that tokens inside the private pool are not linked to prior transaction history. At the same time, most Zcash coins still sit in the transparent pool, where history remains visible, much like Bitcoin.
Zcash maintains two address pools: transparent addresses, or t-addrs, and shielded addresses, or z-addrs. Wallets including ECC’s Zashi now default to shielding funds, a change meant to push users toward stronger privacy.
Who created Zcash
Zcash launched in October 2016 as a privacy-focused cryptocurrency developed by the Electric Coin Company, or ECC, under the leadership of Zooko Wilcox-O’Hearn. The project drew on research from Johns Hopkins, MIT, Tel Aviv University, and other institutions.
Like Bitcoin, Zcash has a maximum supply of 21 million coins and block reward halvings every four years. ECC started the project, but it does not own or control the blockchain. Protocol upgrades require community approval, which keeps development open and decentralized rather than directed by one company.
At launch, Zcash depended on a trusted setup ceremony. Six participants each generated and destroyed part of a private key so that no one person could counterfeit ZEC.
In April 2022, Edward Snowden was revealed as one of those participants. "He did it as a service, as a public good, and believing in privacy," former Electric Coin Company CEO Josh Swihart told Decrypt.
Key dates in Zcash history
- May 2013: A Zerocoin proposal at Johns Hopkins marks the beginning of privacy-focused crypto research that later leads to Zcash.
- January 2016: Zooko Wilcox formally announces the Zcash project as a privacy-oriented Bitcoin fork.
- October 2016: Zcash launches after its trusted setup ceremony. The token reaches an all-time high of $5,941.80.
- October 2018: The Sapling upgrade activates, improving the speed and efficiency of shielded transactions.
- December 2019: The Blossom network upgrade increases block frequency.
- November 2020: Zcash completes its first halving.
- May 2022: Network Upgrade 5, including Orchard, goes live. It reduces reliance on earlier complex setup ceremonies for new shielded pools and introduces unified addresses, enabling private digital cash payments on mobile phones.
- April 2022: Edward Snowden is publicly identified as "John Dobbertin," a participant in the original launch ceremony who contributed to the trusted setup but was not an architect of the protocol.
- November 2024: The second Zcash halving takes place.
- January 2026: The Zcash Foundation says the U.S. Securities and Exchange Commission has ended its investigation into the nonprofit without recommending enforcement action.
- January 2026: The CEO of the Electric Coin Company says his entire team was "constructively discharged" after a disagreement with nonprofit board members.
- May 2026: Security researcher Taylor Hornby discovers a "critical counterfeiting vulnerability" in Zcash’s Orchard privacy pool using Anthropic’s Claude Opus 4.8.
- June 2026: Developers deploy an emergency fix after a confidential ecosystem-wide response. Public disclosure of the four-year-old bug triggers a sharp selloff in ZEC and revives debate over privacy and auditability.
- June 2026: Zcash founder Zooko Wilcox proposes the Ironwood upgrade so users can independently verify circulating supply.
- July 2026: Ironwood activates, replacing the Orchard shielded pool with a new private pool and adding quantum-resistant transaction records.
- November 2028: The third Zcash halving is scheduled.
How Zcash is produced
Zcash uses proof-of-work, just like Bitcoin, to validate transactions. Its mining algorithm is Equihash, a memory-hard hashing function intended to make mining fairer and more resistant to ASIC hardware. That is the consensus mechanism Zcash originally adopted to secure the network.
Miners currently receive 80% of each block reward. The remaining 20% goes to development funds that support the Electric Coin Company, the Zcash Foundation, and community grants. The community governs that funding structure, and it is due for renewal or revision after the next halving.
Privacy coin design and exchange access
Zcash is a peer-to-peer cryptocurrency meant for everyday payments. Users can choose transparent transactions, which are easier for regulators to work with, or shielded transactions, which add privacy.
That optional design has helped Zcash remain listed on more major exchanges than some other privacy coins. Decrypt notes that coins such as Monero have been avoided by some platforms because of regulatory constraints, while Zcash has kept broader exchange access.
Bitcoin strongly influenced the project. Zcash was also built for daily spending, but with added privacy tools that let users send and receive payments away from public view.
Zcash, regulators, and law enforcement
Regulators and law enforcement agencies around the world have increased scrutiny of privacy coins, arguing that anonymity features can be used for money laundering or sanctions evasion. In the United States, the Treasury Department’s Financial Crimes Enforcement Network has proposed tighter rules for what it calls anonymity-enhanced cryptocurrencies.
Regulators wrote in 2020: "Several types of [anonymity-enhanced cryptocurrencies]—including Monero, Zcash, Dash, Komodo, and Beam—are growing in popularity and use technologies that make it difficult for investigators to trace blockchain transactions or connect them to individuals involved in illicit activity."
As enforcement across the crypto market increased, exchanges started delisting privacy coins. In November 2020, ShapeShift removed Monero, Dash, and Zcash to limit regulatory risk, then relisted Zcash in December 2025 and officially integrated shielded Zcash transactions in February 2026.
In 2023, OKX delisted Zcash, Monero, and Dash, then relisted Zcash in November 2025 during the token’s price surge. As of 2026, Zcash remained listed on Binance, though it was added in April 2025 to a list of tokens that the exchange community could vote to delist.
The Orchard vulnerability disclosure
In May 2026, disclosure of a critical counterfeiting vulnerability in Zcash’s Orchard shielded pool raised fresh concerns about supply integrity, privacy tradeoffs, and the growing role of artificial intelligence in blockchain security research.
On May 29, 2026, independent security researcher Taylor Hornby discovered the flaw using Anthropic’s Claude Opus 4.8. The bug could have allowed an attacker to create unlimited counterfeit ZEC inside the network’s shielded transaction system.
After the issue was identified, Zcash developers coordinated a confidential response with protocol developers, miners, exchanges, and other ecosystem participants before deploying an emergency fix.
On June 3, 2026, the Zcash Foundation disclosed the vulnerability and completed a network upgrade that restored Orchard functionality with corrected cryptographic circuits. Developers said there was no evidence the bug had been exploited and that the overall ZEC supply remained intact.
Even with those assurances, public disclosure of the four-year-old vulnerability wiped billions of dollars from Zcash’s market capitalization.
Because Orchard transactions are shielded, developers also acknowledged there is no definitive cryptographic method to determine whether counterfeit coins had been created before the bug was fixed. A week after the exploit became public, Zooko Wilcox proposed Ironwood, an upgrade intended to let users independently verify circulating supply.
The episode also fed into a larger debate over frontier AI systems as tools for vulnerability discovery. Security researchers warned that more capable models could accelerate defensive research while also increasing the pace at which exploitable software flaws are found.
The Ironwood upgrade
In July 2026, Zcash activated Ironwood and retired the Orchard pool. About 3.7 million ZEC, worth roughly $1.7 billion, sat in Orchard when the upgrade went live, which meant holders had to migrate those funds into a new shielded pool.
At the center of Ironwood is a "turnstile," an accounting rule that caps withdrawals from the retired pool at the amount verifiably deposited into it. Any counterfeit ZEC created through the Orchard flaw, if it exists, is trapped inside that old pool permanently.
That gives the network a way to guarantee supply integrity without exposing individual transaction privacy. It directly addresses the problem developers had admitted in June, when they said there was no cryptographic way to prove the vulnerability had never been exploited.
Ironwood also adds quantum-resistant transaction records and a formally verified proof circuit, both meant to reduce the chance of similar flaws remaining undetected. After the plan was announced in early June, developers spent the following weeks testing it while exchanges, wallets, and mining pools prepared for deployment.
The migration also created privacy risks for users. Decentralized VPN provider Nym warned that because every holder had to move funds into the new pool, anyone migrating without added protection could reveal information linking an IP address to a wallet balance. Wilcox advised users not to rush and to use tools such as Tor or a VPN while moving funds.
What comes next for Zcash
With tighter oversight of digital assets and mounting pressure on privacy coins, Zcash is moving into a period shaped by technical, regulatory, and governance stress. A halving, a development funding overhaul, and a software migration are all arriving within the same cycle.
Nearly a decade after launch, Zcash returned to the spotlight for market reasons as well. CoinGecko data cited by Decrypt shows that ZEC rose to $698.87 in November 2025. The move was helped in part by prominent figures on social media highlighting the project’s community, privacy design, and technical progress.
By December 2025, Zcash was again drawing institutional interest. That included founder Zooko Wilcox taking an advisory role at a firm building a large ZEC treasury.
In January 2026, the project entered a turbulent stretch marked by sharp price swings, internal conflict, and regulatory developments. The Zcash Foundation said the SEC had closed a long-running investigation without recommending enforcement action.
Any relief from that decision did not last long. In early January, the entire team at Electric Coin Company said it had been constructively discharged after a disagreement with the majority of Bootstrap’s board members, the 501(c)(3) nonprofit created to support Zcash.
After leaving, former ECC CEO Josh Swihart said he and his former colleagues would launch a new project called cashZ, focused on full-stack Zcash development, including a new Zcash wallet.
Another independent development group, Shielded Labs, whose contributors include Zooko Wilcox, received about $1.16 million in funding from Gemini and Facebook founders Tyler and Cameron Winklevoss. The stated goal was to strengthen the long-term security, sustainability, and scalability of the Zcash network.
Zcash’s next halving is scheduled for November 2028. The current development fund expires at the same time, and the community is debating what replaces it. ECC is also deprecating the C++ full node zcashd in favor of the Rust-based zebrad, while a new wallet, Zallet, is in development.
Those changes are set to shape Zcash’s cryptography, funding model, and user experience for years to come.
This article was updated in July 2026 to reflect recent developments.