Zcash has had a rough few months. The discovery of a critical vulnerability in its Orchard shielded pool sent ZEC tumbling more than 50%, hitting lows around $300, and left a community built on privacy promises wondering whether its supply figures could even be trusted. Now, founder Zooko Wilcox says the project is close to completing the mathematical proof that would put those fears to rest.

The proof in question is tied to the Ironwood upgrade, and its completion would formally verify that the shielded pool’s zk-SNARK circuits are free from the class of bugs that made undetectable counterfeiting theoretically possible.

What the Orchard vulnerability actually meant

The Orchard vulnerability, discovered and patched between May and June 2026, created a scenario where an attacker could, in theory, mint unlimited ZEC inside the shielded pool without anyone being able to detect it.

The damage was immediate. ZEC shed more than half its value following the disclosure. What made things worse is that Zcash’s privacy model was also the thing that made the vulnerability so dangerous. Shielded pools are private by design, which creates a situation where a supply-inflation bug is uniquely hard to detect or rule out retroactively.

Ironwood and the road to formal verification

Zooko Wilcox introduced the Ironwood upgrade proposal on June 6, 2026, framing it as a ground-up response to the trust problem the Orchard vulnerability created. The upgrade includes activated turnstile mechanisms and pool isolation, features that allow users to validate the total supply without needing to see individual transaction details.

The formal verification work itself is being carried out by Project Tachyon, a team working under the Shielded Labs umbrella. Their task is to mathematically prove that the zk-SNARK circuits underpinning Ironwood’s shielded pool cannot produce the class of counterfeiting bug that plagued Orchard. Formal verification produces a machine-checkable proof, the cryptographic equivalent of a mathematical theorem rather than a second opinion.

Wilcox’s announcement signals that work is nearly done. Testnet activation is described as imminent, with mainnet deployment targeted for late July 2026, pending ecosystem readiness.

What investors are actually watching

If Project Tachyon completes the proof and it holds up to scrutiny, Zcash emerges from this episode with a cryptographically verified supply guarantee. Ironwood’s design, with its turnstile mechanisms and formally verified circuits, attempts to offer both: privacy for individual transactions and a provable ceiling on total supply.

Testnet trials will be the first real-world stress test of whether the Ironwood circuits behave as the formal proof describes. The mainnet late-July target means the window for something to go wrong before deployment is short.

The ZEC price chart from May through July 2026 tells a clean story: vulnerability disclosure crushed confidence, and each positive Ironwood update has clawed some of that confidence back. Traders who positioned on the Ironwood announcement are essentially making a bet on whether the proof holds, the testnet runs clean, and the late-July mainnet window does not slip.