Ironwood Receives Formal Verification to Prevent Undetectable Counterfeiting, Zcash Announces
Following the discovery of a counterfeiting vulnerability in Zcash's Orchard pool, Project Tachyon has released a machine-checked proof confirming Ironwood's balance integrity through more than 2,700 verified theorems.
Research teams working on Zcash have successfully completed the formal verification process for Ironwood, releasing a machine-checked proof demonstrating that the network's latest shielded pool is free from undetectable counterfeiting vulnerabilities when operating under its defined cryptographic assumptions.
Project Tachyon announced on Tuesday that this verification proof, developed using the Lean programming language, encompasses more than 2,700 theorems and required collaborative efforts from three separate teams of researchers and cryptographers working for over a month. The verification work confirms a crucial security characteristic called balance integrity, which is intended to guarantee that the shielded pool cannot distribute more value than what has been publicly deposited into it.
According to the research teams, the proof encompasses all components necessary to establish that property, which includes Ironwood's zero-knowledge proof system, the circuit rules governing it, and the accounting mechanisms at the ledger level. However, the proof does not extend to cover Ironwood's independent privacy protection features.
The introduction of Ironwood came as part of Zcash's NU6.3 upgrade, which was implemented as a direct response to a vulnerability that was identified in its Orchard shielded pool—a flaw that theoretically could have allowed for the undetectable creation of counterfeit ZEC. According to Zcash developers, their investigation revealed no evidence suggesting that this vulnerability had been actively exploited. The deployment of the new pool was specifically intended to rebuild trust in the integrity of Zcash's total supply.
Any funds transitioning from Orchard into the new system are required to go through a public accounting verification point called a turnstile, which has been specifically designed to block any potentially excessive coins from gaining entry into Ironwood. As the migration of funds out of Orchard continues, this process may also yield increasing evidence that could help determine whether the previous pool had suffered any exploitation.