Zcash is facing fresh pressure after a critical Orchard pool bug raised questions about private balances, supply checks, and user safety. Summary David Schwartz says unmoved Zcash coins would
Zcash is facing fresh pressure after a critical Orchard pool bug raised questions about private balances, supply checks, and user safety.
SummaryRipple CTO emeritus David Schwartz said passive holders would not lose access to their funds if the bug was not exploited before the planned recovery process.
They can’t prove it per se, but if orchard is deprecated and migrates and the pool retains some leftover funds (as in the last two cases) that effectively means there was no exploit because it means everyone got their funds out. Even then it’s still theoretically possible, but…
— Sixsmith (@CatOfLongTails) June 7, 2026
You might also like: Spot Bitcoin ETFs attract $3M as historic outflow streak comes to an end
The issue centers on Zcash’s Orchard shielded pool, a private transaction pool that hides sender, receiver, and amount details.
Shielded Labs said the bug could have allowed fake ZEC to be created inside Orchard without public detection. That risk created panic because privacy makes full public balance checks harder.
The bug has already been patched through emergency action. Still, the main concern is whether anyone used it before the fix.
Shielded Labs has said it believes past exploitation was unlikely. It also said users should not rely only on that judgment, because there is no cryptographic proof that the bug was never used.
David Schwartz entered the debate after users questioned what would happen to coins left in old Orchard addresses.
He said users who do not move funds would not lose ownership if no exploit occurred. Their coins would remain in an old pool that no longer receives normal use.
“Lonely and abandoned” coins would still belong to their owners, Schwartz said while explaining the issue.
His point focused on consensus rules. These rules decide which coins remain valid and who can spend them.
That means migration does not need to punish passive holders. A user who misses the move would not automatically lose coins because the network can still preserve ownership.
Shielded Labs and other Zcash contributors are discussing a recovery plan called Ironwood.
The plan would isolate Orchard and limit new outgoing activity from the old pool. It would also use turnstile accounting to track coins that leave Orchard.
A new shielded pool would then support safer private activity. This would let users move funds into a cleaner environment while keeping stronger checks on supply.
The goal is to rebuild confidence without forcing a careless wipeout of older balances. The plan still needs community review and network support before activation.
Zcash Open Development Lab founder Josh Swihart has said a second Orchard-style pool could be considered for the NU7 upgrade window around late July.
The market reacted sharply after the disclosure. ZEC dropped hard as traders reacted to the chance that fake coins may have entered the private pool.
The drop did not prove exploitation. It showed that traders were pricing uncertainty around Zcash’s supply assurance.
Privacy is Zcash’s main feature, but it also makes this crisis harder to settle. The same design that protects users also limits what observers can verify from public data.
As of then, the central question remains clear. Zcash must show users that Orchard can be isolated, funds can be tracked during exit, and future private activity can continue with stronger checks.
Read more: XRP price analysis: rebound or another drop below $1?
