A bug that let someone potentially mint fake Zcash tokens for four straight years without anyone noticing is not, on its face, the kind of thing you rally behind. But Cameron and Tyler Winklevoss are doing exactly that, publicly endorsing ZEC after the discovery of a critical flaw in the coin’s Orchard shielded pool sent its price cratering and rattled the broader privacy coin market.

The vulnerability, discovered on May 29 by researcher Taylor Hornby using AI-assisted tools during a commissioned audit, had been sitting quietly in Zcash’s code since the Orchard pool went live in May 2022. For roughly four years, it was theoretically possible to mint counterfeit ZEC without detection.

The fallout was immediate and brutal

ZEC suffered an intraday selloff that, depending on when you looked at your screen, ranged from 30% to 57%. The token fell from around $640 to as low as $250.

That kind of drop doesn’t stay contained. Cypherpunk Technologies, a firm with significant ZEC exposure, saw its shares plummet roughly 37% to 40% in the aftermath. The company has been on a public mission to acquire up to 5% of ZEC’s total supply and reportedly holds hundreds of thousands of tokens, with earlier estimates placing the stash between 203,000 and 290,000 ZEC.

The emergency response came fast. Shielded Labs, under Hornby’s supervision, pushed through an emergency network upgrade dubbed NU6.2, which was activated between June 1 and June 3. The patch closed the vulnerability, but the market damage was already done.

Why the Winklevoss twins are leaning in

Rather than distancing themselves from the chaos, the Winklevoss twins chose to frame the incident as evidence of Zcash’s robust security infrastructure actually working. Their argument: the bug was found through a rigorous audit process, the fix was deployed within days, and the researchers involved demonstrated exactly the kind of expertise you want protecting a network.

The twins called for improvements in supply verification processes going forward and endorsed formal verification for future Zcash upgrades. Formal verification is a mathematical approach to proving that code does what it’s supposed to do, nothing more, nothing less.

Their backing carries weight beyond sentiment. The Winklevoss twins co-founded Gemini, one of the largest US crypto exchanges, and their involvement with Cypherpunk Technologies ties their financial interests directly to ZEC’s recovery.

What this means for investors

The Zcash bug episode highlights a tension that privacy coins have never fully resolved. The same cryptographic complexity that makes shielded transactions private also makes it harder to verify that the money supply hasn’t been tampered with. For four years, the Orchard shielded pool could have been used to create tokens out of thin air. Whether anyone actually did remains unclear.

The speed of the emergency patch is genuinely notable. Going from discovery to network upgrade in under a week is fast by any standard. ZEC’s drop from $640 to $250 represents a massive repricing of risk. Cypherpunk Technologies’ concentrated bet on ZEC means its stock now functions as a leveraged proxy for Zcash sentiment.