Zcash: A Decade of Privacy, a Critical Vulnerability, and the Fight for Private Payments
Zcash, launched in 2016, is a privacy-focused cryptocurrency that uses zk-SNARK technology to offer optional private transactions. Unlike Bitcoin's transparent ledger, Zcash allows users to choose between transparent and shielded transactions, hiding sender, recipient, and amount. Despite its privacy features, most Zcash coins remain in the transparent pool, though wallets now default to shielding funds. The project was developed by the Electric Coin Company (ECC) led by Zooko Wilcox-O'Hearn, with a maximum supply of 21 million coins and halving cycles. In May 2026, security researcher Taylor Hornby discovered a critical counterfeiting vulnerability in Zcash's Orchard shielded pool using AI tool Claude Opus 4.8, allowing potential creation of unlimited ZEC. An emergency fix was deployed by June 3, 2026. The flaw sparked debate on privacy, auditability, and AI's role in security. Zcash has faced regulatory scrutiny, with exchanges delisting and relisting it. The community also proposed the Ironwood upgrade for independent supply verification. Zcash remains a key player in the privacy coin space, balancing regulatory compliance and user privacy.
Key facts
- Zcash uses zk-SNARKs to enable private transactions by hiding sender, recipient, and amount.
- Maximum supply of 21 million ZEC with halving cycles similar to Bitcoin.
- May 2026: Critical counterfeiting vulnerability discovered in Orchard pool by researcher Taylor Hornby using Claude Opus 4.8.
- Emergency fix deployed by June 3, 2026 after coordinated response across the ecosystem.
- Zcash remains listed on major exchanges but faces ongoing regulatory scrutiny worldwide.