Zcash fixes critical Orchard bug after emergency network upgrade, restores shielded transactions

A zero-knowledge proof vulnerability in Zcash's Orchard pool prompted two rapid-fire protocol upgrades, but no funds were lost and ZEC rallied on the news.

Share

Add us on Google by Editorial Team Jun. 3, 2026

Zcash developers pulled off something rare in crypto this week: they found a critical bug, shut down the affected system, patched it, and brought everything back online in under a week. No exploit. No lost funds. No privacy breach.

The vulnerability, discovered on May 29 by independent researcher Taylor Hornby during an audit, affected the zero-knowledge proof circuit powering Zcash’s Orchard shielded pool. In plain English: the bug could have allowed someone to fake valid transactions within the pool, potentially enabling limited double-spending. The Zcash Foundation confirmed there was no evidence the flaw was ever exploited.

How the fix unfolded

The response came in two stages. First, an emergency soft fork deployed at block height 3,363,426, effectively disabling Orchard transactions starting around June 1-2. Then came the real fix. A hard fork dubbed NU6.2 activated on June 3 at 00:05 EDT, around block 3,364,600, deploying an updated proof circuit that patched the vulnerability and restored full Orchard functionality.

Advertisement

The transition wasn’t perfectly smooth. The Zcash Open Development Lab (ZODL) acknowledged that the network briefly became unstable as miners upgraded to the new software. Block production halted for over four hours on June 3 while the network’s mining infrastructure caught up.

Still, the broader outcome was clean. No unauthorized value creation was detected. User privacy remained intact. And by the time the dust settled, Zcash’s shielded supply had crossed 4 million ZEC.

The technical details matter

Zero-knowledge proofs are the cryptographic backbone of Zcash’s privacy features. They let users prove a transaction is valid without revealing any details about the sender, receiver, or amount. The Orchard pool, introduced in 2022, is the latest and most advanced version of this shielded transaction system.

A “soundness” bug in a zero-knowledge circuit is about as serious as it gets. Soundness is the property that guarantees no one can create a valid-looking proof for a false statement. If that guarantee breaks, someone could theoretically mint coins out of thin air or spend the same coins twice, all while the network thinks everything checks out.

It’s worth noting this marks only the second time Zcash has implemented a security-driven protocol upgrade in its history, underscoring both the rarity and severity of the issue. ZODL coordinated the response alongside the Zcash Foundation, with the technical fix centered on the Rust-based Zebra client.

Market reaction and what it means for investors

The token rallied between 5% and 14% within hours of the emergency announcement, even as the broader crypto market was dealing with its own instability.

The four-hour block production halt is a real cost, and anyone running time-sensitive operations on the network felt that friction. But in the hierarchy of bad outcomes for a critical zero-knowledge proof vulnerability, a few hours of downtime barely registers.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.