The Ironwood Book
The primary technical guide to the new pool, transaction format, circuit changes, quantum-recoverable notes, and formal-verification effort.
Ironwood Resources
Everything to read and build against: explainers of the upgrade, the normative specifications, and the library and node releases that carry Ironwood support.
Learn
Ironwood: Auditing the Orchard Pool's Supply
Project Tachyon's explanation of the Orchard vulnerability, the Ironwood turnstile, migration, and supply accounting.
Published 6 June 2026Detecting Counterfeiting after Zcash's Ironwood
How formal verification is intended to rule out protocol-level counterfeiting bugs, and where implementation assurance still matters.
Published 7 July 2026Formal Verification of Zcash Ironwood Completed
Project Tachyon's announcement of the machine-checked Lean proof — more than 2,700 theorems — that undetectable counterfeiting bugs do not exist in Ironwood.
Published 28 July 2026Verifying the Soundness of Zcash's Circulating Supply
Shielded Labs' plain-language account of how Ironwood restores verifiable aggregate supply without weakening transaction privacy.
Published 6 June 2026Ironwood: A New Shielded Pool
ZODL's overview of the new pool and what wallet users should expect.
Published 6 June 2026Specifications
ZIP 258: Deployment of NU6.3
Network-upgrade deployment parameters, activation heights, and the consensus branch ID.
Created 19 June 2026ZIP 229: Version 6 Transaction Format
The V6 transaction format and the separation between the Orchard protocol, Orchard pool, and Ironwood pool.
Created 13 June 2026ZIP 318: Orchard to Ironwood Migration
Wallet procedure being implemented for splitting Orchard notes, assigning common denominations to future height buckets and scheduled broadcast windows, pre-authorizing transactions, and obtaining consent to the public amounts.
Wallet implementation in progress · created 16 June 2026ZIP 2005: Ironwood Quantum Recoverability
The additional note material that makes a future recovery protocol possible if current cryptography is threatened.
Created 31 March 2025ZIP 326: Wallet Changes for NU6.3
Wallet behavior for receiving, change, pool selection, transaction construction, and migration.
Created 30 June 2026Zcash Protocol Specification
The normative protocol specification for Zcash consensus and shielded protocols.
Libraries and implementations
orchard
Rust implementation of the Orchard protocol and the shared Action circuit used by the Orchard and Ironwood pools.
NU6.3 tag: 0.15.0halo2
The halo2 proving-system implementation used by Orchard and Ironwood.
NU6.3 versions: halo2_gadgets 0.5.0 · halo2_proofs 0.3.2librustzcash
Core Rust crates for protocol constants, V6 transactions, keys, wallet construction, scanning, storage, proofs, and history trees.
NU6.3 versions: zcash_primitives 0.29.0 · zcash_protocol 0.10.0Zakura
Zcash full-node implementation with Ironwood consensus, state, sync, and mempool support.
NU6.3 tag: v1.0.0Zebra
The Zcash Foundation's full-node implementation and the upstream base for Zakura.
NU6.3 tag: v6.0.0