Zcash Awards $8 Million in Grants After Orchard Bug Crisis

Zcash has distributed more than $8 million in retroactive grants to developers and security researchers, rewarding contributors who helped protect the privacy-focused cryptocurrency during a major vulnerability crisis earlier this year.

Zcash cofounder Zooko Wilcox said the funding included $1.5 million for security researcher Taylor Hornby, who discovered and responsibly disclosed a critical vulnerability in Orchard, the cryptographic system supporting Zcash’s advanced shielded pool. The grant was approved through a permissionless coinholder vote administered by a Zcash nonprofit.

Hornby, a security engineer hired by Shielded Labs in April 2026 to search for protocol vulnerabilities, used Anthropic’s artificial intelligence technology during a targeted review of the Orchard circuit. The investigation uncovered a previously undetected flaw that could potentially have allowed an attacker to create unlimited counterfeit ZEC.

The discovery prompted Zcash developers and community members to prioritize network security. The Ironwood Upgrade, also known as NU6.3, was activated on July 28, 2026, sealing the vulnerable Orchard shielded pool and addressing the counterfeiting flaw, which had reportedly remained undiscovered for four years.

Wilcox said the response also demonstrated an important strength of Zcash’s governance and self-funding model. Rather than only funding development in advance, Zcash coinholders were able to retrospectively reward contributors whose work provided significant value to the network.

“The best thing is: Zcash proved once again that it is a sustainable, capture-resistant, and evolving system of self-funding and self-governance,” Wilcox wrote on X.

Zcash coinholders also approved a $1.95 million retroactive grant requested by ZODL for core protocol work completed during the first and second quarters. That work included remediation of 10 major vulnerabilities, development of advanced post-quantum and consensus specifications, and the merging of 162 pull requests.

Meanwhile, adoption of the upgraded network continues to expand. More than 4 million ZEC, valued at nearly $5.8 billion, is now secured by Ironwood, marking another milestone for Zcash following the Orchard security crisis.