Zcash flaw enables undetectable counterfeit ZEC generation

Zcash’s privacy protocol Orchard contained a critical flaw that made it possible to generate unlimited counterfeit ZEC without detection, triggering a price collapse of more than 30% and leaving a lasting cloud over the cryptocurrency’s monetary integrity.

Security researcher Taylor Hornby disclosed on May 29 that Orchard’s elliptic curve multiplier verification circuit had an incomplete constraint. That gap allowed transactions to bypass Zcash’s normal conservation-of-value checks, opening the door for the creation of non-existent coins inside the privacy pool.

Sharp sell-off as inflation fears hit zec

Following the disclosure by Zcash founder Zooko Wilcox, ZEC’s price fell sharply. Data from different trading windows show the token sliding from around $610–$625 to roughly $408–$478 within about 24 hours, a drop of more than 30%, while trading volumes spiked above $1.5 billion as selling accelerated.

Market data and on-chain activity suggest both large holders and smaller traders moved to reduce exposure. Notably, prominent trader Arthur Hayes said he fully exited his position, citing the inability to mathematically prove that no unauthorized minting had occurred while the bug was live.

Vulnerability existed for years and cannot be fully audited

Hornby’s analysis indicates the flaw may have been present since Orchard launched in May 2022, meaning a mechanism for undetectable counterfeit ZEC creation appears to have existed for roughly four years.

The design of Zcash’s shielded system prevents a straightforward audit of past activity. While the Turnstile Accounting framework ensures the total supply cannot exceed the 21 million coin cap, it cannot confirm that all coins circulating within Orchard before the fix were legitimately created. As a result, analysts say it is cryptographically impossible to rule out past exploitation, even though no direct evidence of abuse has surfaced.

Emergency forks halt risk but not uncertainty

Once notified, developers temporarily suspended Orchard and initiated an emergency network upgrade. A soft fork first disabled the compromised pool, followed by a hard fork on June 3 that permanently corrected the constraint error in the verification circuit.

Hornby verified the exploit locally, demonstrating that counterfeit ZEC could be produced in a controlled test environment. However, project teams say there is no indication so far that the method was used on the main network before the fix. All core network functions have since resumed, but the unresolved question of historical supply integrity continues to weigh on market sentiment.

Shielded labs plans new pool and verifiable migration

To restore confidence and transparency, Shielded Labs outlined plans for a future upgrade that would replace Orchard with a new privacy pool and enforce verifiable migration of funds.

The proposal centers on a turnstile-style migration system: all coins exiting Orchard into the new pool would pass through an auditable mechanism, allowing anyone to check aggregate outflows and compare them against the protocol’s maximum supply. Individual transaction privacy would be preserved, but the total legitimate supply could be independently verified on-chain.

In one place, Shielded Labs describes the measures this way:

• Launch a replacement shielded pool, require funds to migrate through a verifiable turnstile, and enable public auditing of aggregate outflows against the 21 million cap while keeping transaction-level data private.

Analysts say such a system would not retroactively prove that no counterfeit ZEC ever circulated inside Orchard, but it would create a clean, fully auditable baseline for future supply.

Ai-assisted research helped uncover the flaw

Hornby’s discovery came shortly after the release of Anthropic’s Claude Opus 4.8 model, which he integrated into his audit workflow. He combined traditional cryptographic review, custom analysis tools, and targeted AI prompts to locate, understand, and reconstruct the exploit in a test setting.

The episode underscores a growing role for advanced AI systems in complex protocol security reviews. Experts note that while large models cannot replace specialist auditors, they can significantly accelerate code comprehension and edge-case exploration when directed by experienced researchers.

Privacy versus transparency debate intensifies

This is the second time a bug in Zcash’s history has been found that could allow the creation of unverified currency, highlighting an ongoing trade-off at the heart of privacy-focused blockchains.

The same cryptographic techniques that shield user activity also make full historical audits difficult or impossible. In Zcash’s case, the Orchard flaw has reignited debate over how far privacy protocols can go before they undermine the ability to independently validate total supply, a core pillar of trust for any monetary system built on a fixed issuance schedule.