1. Formal Verification: Mathematical Certainty

Zcash's Ironwood upgrade (NU6.3), which activated on July 28, 2026, at block 3,428,143, is designed to restore confidence in shielded transactions through a dual-layered approach: formal verification of the cryptographic specification and a turnstile mechanism for observable supply integrity [Source: https://shieldedlabs.net/the-orchard-counterfeiting-vulnerability/].

While the formal verification effort aims to provide mathematical certainty against future "silent inflation" bugs, its ability to restore confidence is currently balanced by the implementation of a "turnstile" that traps any potentially counterfeit funds in the legacy Orchard pool.

1. Formal Verification: Mathematical Certainty

The Ironwood upgrade targets the "knowledge soundness" of the shielded pool—the property that ensures it is impossible to generate a valid proof for an invalid transaction. Unlike standard audits, this process uses mathematical proofs to rule out specification-level bugs.

• Methodology: The effort is led by Project Tachyon and the Zcash Open Development Lab (ZODL). They utilize the Lean theorem prover to create machine-checkable proofs of the circuit's logic [Source: https://shieldedlabs.net/the-orchard-counterfeiting-vulnerability/].
• Scope: The verification specifically addresses the "double-and-add" multiplication loop vulnerability found in the previous Orchard pool, which lacked a critical elliptic curve constraint [Source: https://shieldedlabs.net/the-orchard-counterfeiting-vulnerability/].
• Gap: While the involvement of ZODL and Tachyon is confirmed, independent verification of the specific Lean theorem prover tool and the exact completion percentage of the proofs remains limited [Source: https://shieldedlabs.net/the-orchard-counterfeiting-vulnerability/].

2. The Turnstile: Observable Supply Integrity

Because formal verification cannot "undo" potential past exploits, Ironwood introduces a turnstile (ZIP 209) to restore trust in the total circulating supply.

• Sealing the Orchard Pool: The legacy Orchard pool is now "exit-only." No new ZEC can be created within it.
• Hard Cap Enforcement: The turnstile prevents more ZEC from leaving the Orchard pool than was verifiably deposited into it. If a user attempts to move counterfeit ZEC, the transaction is blocked, and the counterfeit funds remain trapped [Source: https://shieldedlabs.net/the-orchard-counterfeiting-vulnerability/].
• Public Auditability: Users can now verify the total supply by summing the balances of active pools, removing the need to "trust" the underlying math blindly [Source: https://shieldedlabs.net/the-orchard-counterfeiting-vulnerability/].

3. Comparison of Shielded Pools

[Source: https://shieldedlabs.net/the-orchard-counterfeiting-vulnerability/]

4. Market and Confidence Indicators

The disclosure of the Orchard vulnerability in May 2026 led to a significant confidence gap, evidenced by a ~50% drop in ZEC price to approximately $300. However, the successful activation of Ironwood has signaled a partial recovery.

• Price Action: ZEC recovered to ~$463 by the Ironwood activation day (July 28, 2026) [Source: https://shieldedlabs.net/the-orchard-counterfeiting-vulnerability/].
• Early Adoption: Within hours of activation, approximately 1,500 ZEC migrated into the Ironwood pool with zero turnstile violations detected [Source: https://shieldedlabs.net/the-orchard-counterfeiting-vulnerability/].

Conclusion

Ironwood's formal verification provides a proactive defense against future cryptographic flaws, but the turnstile mechanism is the primary tool for restoring immediate confidence by capping potential past inflation. While the technical community views formal verification as a significant step forward, the lack of independent verification for the specific proof tools used (Lean) remains a minor point of contention for some auditors. As of July 29, 2026, the migration is proceeding without technical incident.