BTC/USD $68,420 +2.8%
ETH/USD $3,540 +1.4%
SOL/USD $142.80 -0.6%
BNB/USD $605.20 +0.9%
XRP/USD $0.62 -1.2%
DOGE/USD $0.18 +5.4%
BTC/USD $68,420 +2.8%
ETH/USD $3,540 +1.4%
SOL/USD $142.80 -0.6%
BNB/USD $605.20 +0.9%
XRP/USD $0.62 -1.2%
DOGE/USD $0.18 +5.4%
Policy

Zcash NU7 upgrade: Zebra 7.0.0 fixes seven security flaws

Zcash is rallying just ahead of the largest network upgrade in its history, and the Zcash Foundation has hardened its node software for the occasion in seven places. ZEC holders do not need t

AnonymousCryptoCompass newsroom
November 4, 2026
12 min read
NEWS
Hero article visual / chart / editorial image
CryptoCompass editorial visual for policy coverage.

Zcash is rallying just ahead of the largest network upgrade in its history, and the Zcash Foundation has hardened its node software for the occasion in seven places. ZEC holders do not need to move anything themselves, but they should update their wallet app and move any old Sprout balances before block 3,543,405. Anyone running their own node needs Zebra 7.0.0; otherwise they will end up on a different blockchain after activation.

Zcash price at $1,231: up 8.6 percent about 50 hours before NU7

Zcash (ZEC) traded at $1,230.91 at 0:48 a.m. German time on November 4, 2026, or roughly 1,099 euros. That is a gain of 8.6 percent in 24 hours, the strongest showing among the 25 largest cryptocurrencies according to CoinGecko. The daily low was $1,122.37 and the daily high $1,243.03. Despite the jump, ZEC is still down 6.0 percent over seven days. With a market capitalisation of around $20.9 billion, Zcash ranks tenth in the market.

The broader market moved far less over the same period. Bitcoin rose 1.3 percent to $77,678 and Ether 1.5 percent to $2,282. Monero, the other large privacy coin, gained 4.1 percent. There is no single documented trigger for the jump in ZEC. The day before, the price had fallen by around 11 percent after a large leveraged position was unwound and the dispute over funding for Zcash Community Grants escalated; the background is in our report on the ZCG grants dispute from November 3. What is certain is the date the market is heading towards: the activation of Network Upgrade 7, or NU7 for short.

Zebra 7.0.0: the first stable node software for NU7 on mainnet

A node is a computer that stores the full blockchain, verifies every transaction itself and passes new blocks on to other participants. Zcash has had two programs for this for years: the older zcashd, which grew out of the Bitcoin code, and Zebra, a version written from scratch in the Rust programming language by the Zcash Foundation. NU7 supports only Zebra.

The Zcash Foundation released Zebra 7.0.0 on October 22, 2026 and describes it as the first stable release with NU7 support on mainnet. Activation is set at block height 3,543,405. The foundation states explicitly that all mainnet node operators must upgrade before this block to remain on the consensus blockchain. After activation, NU7 nodes disconnect from older versions, and nodes that have not been updated will follow a different chain.

Two details matter mainly for operators. On first start, Zebra 7.0.0 converts its own database to a new format, from version 28 to version 29; rolling back to Zebra 6.x afterwards requires a full resync. The foundation will also support this release for only eight weeks instead of the usual twelve, so the upgrade will soon be followed by the next mandatory update. The trade site crypto.news revisited the list of fixes on November 3 and also pointed to the alpha release 7.1.0-alpha.0 of October 31, which the developers say fixes delays in mining.

Seven Zebra security vulnerabilities: the Zcash Foundation rates five as high

Alongside NU7, Zebra 7.0.0 closes seven reported security vulnerabilities, known as security advisories. The foundation rates five of them as high severity and two as medium. According to its description, none of the flaws allowed access to other people's coins. The issue was a different one: a hostile participant in the network could crash a Zebra node, slow it down or cut it off from honest peers.

  • Forged checkpoint blocks (high, two cases): A peer, meaning another connected node, could supply forged block contents during the initial sync. Zebra only downloaded the genuine block again after a restart.
  • Invalid scripts without penalty (high): Transactions with faulty transparent scripts kept verification busy without the sender being banned.
  • Quadratic cost of signature hashes (high): A single 2-megabyte transaction with tens of thousands of inputs could tie up a node's CPU for minutes.
  • Mempool verification (high): The mempool is the waiting room for transactions that have not yet been confirmed. A crafted transaction cost ten seconds or more of computing time there, and could be repeated at will. The flaw was only introduced with Zebra 6.4.0.
  • Crash on disconnect (medium): Zebra could crash when disconnecting a busy peer.
  • Honest peers banned (medium): By deliberately spreading transactions with a lock time set slightly too early, an attacker could get a node to ban its best connections.

For ZEC holders who trade through an exchange or a wallet app, this is an indirect question. Their coins do not sit on a Zebra node, but exchanges, block explorers and wallet servers do depend on one. A node that stalls shortly before or after activation delays deposits and withdrawals. That is why the timing of the fixes matters.

Open server rack in a dark data centre, a gloved hand pulls a network cable while a red warning light glows on the front panel The seven flaws in Zebra targeted node availability, not users' coins.

Block 3,543,405: when NU7 activates based on block times

NU7 has no fixed clock time, because activation is tied to a block height. The Zcash Foundation gives its plan as "around November 5". At 0:48 a.m. German time on November 4, the Zcash blockchain stood at block 3,540,980. That leaves 2,425 blocks until activation. In the preceding 24 hours, 1,145 blocks were produced, an average of one every 75.5 seconds.

If that pace holds, block 3,543,405 will arrive in about 50.8 hours, around 3:40 a.m. German time on November 6. At the target of 75 seconds per block, the result is about 3:20 a.m. If miners' hash rate fluctuates, the time shifts by a few minutes to a few hours. cryptoticker.io compiled this analysis itself on November 4, 2026, based on public block data from the Zcash blockchain covering 1,145 checked blocks. There is one inconsistency on the official upgrade page at z.cash: it still says the activation height has not been set, while the Zcash Foundation names height 3,543,405 in its release announcement.

With NU7, the interval between two blocks falls from 75 to 25 seconds under ZIP 218. ZIP stands for Zcash Improvement Proposal, the process used to describe changes to the protocol. Daily issuance of new ZEC stays the same, because the reward per block is divided by three. According to the foundation, the four-year halving cycle and the cap of 21 million ZEC are also unchanged. A detailed calculation of the new block interval is in our article from October 28.

Network Sustainability Mechanism: 60 percent of fees go into a reserve

The second major change concerns fees. Under ZIP 235, from NU7 onwards 60 percent of the transaction fees in a block are taken out of circulation and placed in a reserve. Miners keep 40 percent. Later blocks are meant to pay out a small, predictable share from this reserve on top of the normal reward; on mainnet, according to ZIP 259, this begins only at block height 8,939,664. The foundation justifies this with the long horizon: the block reward shrinks with every halving, and at some point network security has to be paid for through fees.

There are also new per-block limits for transactions in the shielded pools Orchard, Ironwood and Sapling. In Zcash, a pool is a separate area with its own encryption in which balances are held. According to the Zcash Foundation, possible throughput in the Orchard pool rises from 2.9 to 6.6 transactions per second. At the same time, the amount of data an attacker could at worst push onto light wallets through spam falls by about 37 percent. Light wallets are smartphone apps that do not load the entire blockchain, only the data relevant to them.

Zodl wallet 3.19.0: the app update needed before November 5

For retail investors, the wallet is what matters most. The provider of the Zodl wallet app, formerly known as Zashi, said on X on November 3 that users must update to version 3.19.0 before November 5 to keep using the app after the upgrade. The trade site Tron Weekly quotes Zodl's post verbatim. Other wallets generally follow through their normal update channels; nobody is forced to move their coins.

Your balance itself does not change with NU7. Your seed phrase, the sequence of words from which all the wallet's keys can be restored, remains valid. If you keep your ZEC on a hardware wallet, you will usually need a firmware or app update there once the manufacturer releases it; our hardware wallet comparison shows which devices support Zcash with shielded addresses. An update from an unknown source, a link in a direct message or a supposed support email is a well-known attack vector around upgrades. Updates come only from the official app store or the manufacturer's own website.

Sprout pool and version 4 transactions: which balances NU7 freezes

With NU7, transactions in the old version 4 format become invalid, as described in ZIP 2003 and ZIP 259. Versions 5 and 6 remain valid. This hits the oldest shielded pool, Sprout. Transfers out of Sprout only work in the version 4 format. Anyone who still has ZEC there will no longer be able to move it after activation. The Zcash Foundation states that such balances become "unspendable".

This mainly affects users who have not touched their wallet for years. Modern wallets such as Zodl do not use Sprout. If you own an old desktop wallet from Zcash's early days, you should transfer the balance to a newer pool or a current wallet before block 3,543,405. How to do that, and how to recognise Sprout addresses, is explained in our guide to the Sprout pool.

Hand holding a smartphone with a dark display showing a bright progress ring, a desk at night in the background Ahead of NU7, what counts for holders is the app update; the coins themselves stay where they are.

Exchange pauses and leverage: why the upgrade date matters for traders

Exchanges usually suspend deposits and withdrawals of a coin for a few hours during network upgrades, until their own nodes are running the new version and the first blocks are confirmed. By the time of writing, we had not found a specific announcement on NU7 from Binance, Kraken or Coinbase. If you want to move ZEC between an exchange and a wallet during the night of November 6, you are better off building in a buffer and checking your exchange's status page beforehand.

This matters more for leveraged trading than for the spot market. With a leveraged contract, the position is closed by force as soon as losses eat up the posted collateral; this is called liquidation. If you cannot top up with ZEC during that window because deposits are paused, the only option left is collateral in another form. The previous day showed how fast this can happen: the slide to the daily low set off a series of forced sales that the price only recovered over the course of the day.

Buying ZEC in Europe: MiCA exchanges, holding period and custody before the upgrade

For investors in Germany, NU7 changes nothing about how to buy. You still buy ZEC through exchanges licensed under the EU's MiCA regulation. MiCA stands for Markets in Crypto-Assets and has governed since the end of 2024 which providers may offer crypto assets in the EU. Which platforms list ZEC and what trading costs there is shown in our crypto exchange comparison. In the longer term, a different deadline looms for privacy coins: under the new EU anti-money-laundering rules, providers may no longer hold accounts for coins with obscured transactions from July 2027. That plays no role for NU7 yet.

For tax purposes, the upgrade is not an event. No new coins are created, and a software update is neither a sale nor an exchange. The one-year holding period under Section 23 of the German Income Tax Act continues to run unchanged for your ZEC. Transferring coins from an exchange to your own wallet before the upgrade is not a sale either; you should still record the transfer with date and amount so that the proof of the holding period remains complete later on.

On custody, the usual trade-off applies. On an exchange, the provider takes care of the upgrade, but it also holds the keys. In your own wallet you have full control and have to install the app update yourself. Both are possible ahead of NU7; what matters is that wallet and exchange are up to date before block 3,543,405.

Zcash price levels: $1,122 below, $1,243 above

The next level to the upside is the daily high at $1,243.03. Above that lies the zone around $1,279, which we described as resistance on November 3. To the downside, the round $1,200 mark is the first support; according to our November 3 report, a large stop-loss was triggered there the day before. Below that comes the daily low at $1,122.37. If the price falls below it, the entire jump of the past 24 hours will have been given back.

A major upgrade can cut both ways. If activation goes through without outages, a technical risk that many traders price in beforehand disappears. If exchanges stay frozen for longer or part of the nodes split off, uncertainty rises. Neither can be established in advance, which is why tight positions with high leverage are among the riskiest options in ZEC over the next 50 hours.

Zcash upgrade countdown: about 50 hours left until block 3,543,405

  1. Update your wallet: Install your wallet app's update before November 5, at least version 3.19.0 for Zodl. If you want to keep ZEC in self-custody for the long term, the hardware wallet comparison lists devices with Zcash support.
  2. Plan transfers: Do not move ZEC between exchange and wallet during the night of November 6; do it beforehand or a few hours after activation. You can find an exchange with MiCA authorisation for ZEC in the crypto exchange comparison.
  3. Document transfers: Record every transfer with date and amount so that the holding period remains provable. The programs in our comparison of crypto tax tools can help.

(As of November 4, 2026. This article is not investment advice. Prices and fee structures change; check the terms with the provider before you buy.)