Zcash says Ironwood proof rules out undetectable counterfeiting bugs

cointelegraphPublished on 2026-07-29Last updated on 2026-07-29

Abstract

Zcash researchers have completed formal verification of Ironwood, a new shielded pool introduced via the NU6.3 upgrade. They published a machine-checked proof, written in Lean and comprising over 2,700 theorems, that establishes the pool's "balance integrity." This proof confirms that, under its cryptographic assumptions, Ironwood cannot contain undetectable counterfeiting bugs, ensuring it cannot pay out more value than has publicly entered it. The verification, which took multiple teams over a month, covers the zero-knowledge proof system, circuit rules, and ledger accounting but not Ironwood's separate privacy guarantees. Ironwood was created in response to a theoretical vulnerability in the older Orchard pool that could have allowed undetectable counterfeiting, though there's no evidence of exploitation. Funds migrating from Orchard must pass through a public "turnstile" checkpoint, designed to prevent any hypothetical excess coins from entering the new pool and to provide evidence on whether the old pool was exploited.

Zcash researchers have completed formal verification of Ironwood, publishing a machine-checked proof that the network’s new shielded pool does not contain undetectable counterfeiting bugs under its stated cryptographic assumptions.

On Tuesday, Project Tachyon said that the proof, written in the Lean programming language, comprises over 2,700 theorems and took three teams of researchers and cryptographers over a month to complete. The work establishes a security property known as balance integrity, designed to ensure the shielded pool cannot pay out more value than has publicly entered it.

The researchers said the proof covers the components needed for that property, including Ironwood’s zero-knowledge proof system, circuit rules and ledger-level accounting. It does not cover Ironwood’s separate privacy guarantees.

Ironwood was introduced through Zcash’s NU6.3 upgrade in response to a vulnerability discovered in its Orchard shielded pool that could theoretically have enabled undetectable ZEC counterfeiting. Zcash developers said they found no evidence that the flaw had been exploited. The new pool was designed to restore confidence in Zcash’s supply integrity.

Funds migrating from Orchard must pass through a public accounting checkpoint known as a turnstile, which is designed to prevent any hypothetical excess coins from entering Ironwood. As funds leave Orchard, the process could also provide growing evidence about whether the old pool was exploited.

Related: Why ZEC fell 40% even after Zcash patched a shielded pool bug

Trending Cryptos

Related Questions

QWhat is the main security property formally verified for Ironwood, and what does it guarantee?

AThe main security property formally verified for Ironwood is 'balance integrity'. It guarantees that the shielded pool cannot pay out more value than has publicly entered it, ruling out undetectable counterfeiting under the stated cryptographic assumptions.

QWhat was the catalyst for the development of the Ironwood shielded pool in Zcash?

AIronwood was developed and introduced through Zcash's NU6.3 upgrade in direct response to a vulnerability discovered in the older Orchard shielded pool, which could theoretically have enabled undetectable ZEC counterfeiting. It was designed to restore confidence in Zcash's supply integrity.

QHow was the formal verification proof for Ironwood created and how extensive was it?

AThe formal verification proof was written in the Lean programming language. It comprises over 2,700 theorems and took three separate teams of researchers and cryptographers over a month to complete.

QDoes the formal verification proof cover Ironwood's privacy guarantees? What components does it primarily cover?

ANo, the proof does not cover Ironwood's separate privacy guarantees. It primarily covers the components needed for the balance integrity property, including Ironwood’s zero-knowledge proof system, circuit rules, and ledger-level accounting.

QWhat mechanism is used to ensure funds migrating from the old Orchard pool to Ironwood cannot introduce counterfeit coins?

AFunds migrating from the Orchard pool to Ironwood must pass through a public accounting checkpoint called a 'turnstile'. This mechanism is designed to prevent any hypothetical excess or counterfeit coins from the old pool from entering the new Ironwood shielded pool.

Related Reads

After the Fed's Interest Rate Decision and Comments from Kevin Walsh, Experts Gathered and Shared Their Latest Insights!

Following the Fed's decision to hold interest rates steady, experts highlight a potential shift towards more independent policymaking within the FOMC, as three members dissented. Market strategists note the slight decline in bond yields and a weaker dollar post-announcement, but caution that a rate hike in September remains possible. Experts like Mark Hackett point to the three dissenting votes as a sign of growing committee independence. While markets initially rallied in relief, the final direction hinges on Fed Chair Kevin Warsh's upcoming press conference. Analysts, including Audrey Childs-Freeman, interpret the dissent as the Fed maintaining a hawkish stance. They suggest the Fed will continue monitoring data, with a summer scenario of high bond yields supporting the dollar still in play. Chris Anstey emphasizes that markets will closely watch the 10-year Treasury yield during Warsh's conference. A continued rise could signal investor fears that the Fed is not acting aggressively enough on inflation, posing a challenge for the Chair. The long-term yield is also viewed as critical for mortgages and economic management. Diane Swonk of KPMG argues a September rate hike is likely, stating that an increase now would have been more appropriate given nearly five years of high inflation. She warns that prolonged high prices risk becoming embedded in the economic system. *This is not investment advice.

cryptonews.ru14m ago

After the Fed's Interest Rate Decision and Comments from Kevin Walsh, Experts Gathered and Shared Their Latest Insights!

cryptonews.ru14m ago

USDT Supply Shrinks by $5.5 Billion While Stablecoin Turnover Hits Record High

The supply of stablecoins has contracted for the first time in years, with total market capitalization falling 4.3% from its May peak to $308.5 billion. Despite this decline, June saw a record $1.83 trillion in adjusted transaction volume for stablecoins, a 60% increase from May. This divergence suggests a shift in usage patterns: less capital is sitting idle, while the remaining supply circulates more rapidly through payment and trading systems. Specifically, the supply of Tether's USDT decreased from approximately $189.54 billion to $184 billion between May 1 and July 29, while Circle's USDC supply fell from $77.27 billion to $72.41 billion. Part of this capital appears to have moved into tokenized Treasury products, a sector whose value has grown to over $16 billion, partly driven by regulations like the 2025 GENIUS Act that prohibit interest payments on payment-focused stablecoins. Transaction velocity is emerging as a key metric, with stablecoins now turning over about six times per month—double the rate from two years ago. USDC, despite having a smaller supply than USDT, processed about $1.21 trillion in adjusted volume in June, leading in settlement activity. While a significant portion of on-chain volume may not represent genuine economic payments, identifiable real-world payments have grown sharply, reaching an estimated $390 billion in 2025. The data indicates stablecoins are evolving from static collateral into active financial infrastructure.

cryptonews.ru39m ago

USDT Supply Shrinks by $5.5 Billion While Stablecoin Turnover Hits Record High

cryptonews.ru39m ago

Trading

Spot

Hot Articles

What is DOGE M

Doge Matrix ($doge m): The New Breed of Community-Driven Cryptocurrency Introduction In the ever-evolving landscape of cryptocurrency, new projects constantly emerge, each aiming to capture the interest of investors and enthusiasts alike. One of the latest entrants to this domain is Doge Matrix, represented by the ticker symbol $doge m. This project has attracted attention thanks to its roots in the popular meme culture surrounding Dogecoin, establishing its place within the web3 space. This article aims to provide a comprehensive analysis of Doge Matrix, covering its overview, creator, investors, functionality, timeline, and notable aspects. What is Doge Matrix ($doge m)? Doge Matrix is a community-driven cryptocurrency project that seemingly builds upon the widespread appeal of Dogecoin, a digital currency known for its Shiba Inu mascot and its meme origins. While the overarching objectives of Doge Matrix are not extensively defined, it is characterised by a commitment to harnessing community involvement and support. Unlike traditional cryptocurrencies that often emphasise utility or intrinsic value through underlying technologies, Doge Matrix positions itself within a space that embraces the cultural phenomenon of cryptocurrencies, particularly appealing to those who resonate with the ethos of meme-based assets. Drawing on the strengths of the Dogecoin community, Doge Matrix operates as part of a broader ecosystem, inviting participation and engagement from users who share an interest in cryptocurrency and the digital landscape. Who is the Creator of Doge Matrix ($doge m)? The identity of the creator of Doge Matrix remains unknown. This lack of transparency is not an uncommon occurrence in the cryptocurrency space, where some projects are launched without revealing the identities of their founders. The absence of information regarding the founding team can raise questions among potential investors about the project’s accountability and direction. Who are the Investors of Doge Matrix ($doge m)? As it stands, there is no publicly available information detailing the investors or investment foundations that back Doge Matrix. The project appears to rely primarily on community support rather than institutional investment. This model aligns with the community-driven nature of the initiative, fostering an environment where the direction of the project is shaped by its participants rather than being dictated by a select few financial backers. How Does Doge Matrix ($doge m) Work? The specifics regarding the operational mechanisms of Doge Matrix are somewhat vague, reflecting a broader trend of projects in the meme coin space where innovative functionalities are not always clearly articulated. Nonetheless, Doge Matrix seems designed to tap into the existing cryptocurrency ecosystem by encouraging user participation while tapping into the familiar cultural references associated with Dogecoin. Its potentially unique characteristics derive from community interactions rather than technological advancements, emphasising shared experiences and collaboration among token holders. While the exact innovations have not been explicitly outlined, the project appears to create a space where community members can engage, share ideas, and propel the project's potential forward. Timeline of Doge Matrix ($doge m) Reflecting on the project’s timeline reveals notable events that have defined its journey thus far: November 25, 2024: Doge Matrix reached its all-time high value, marking a significant milestone in its early history. January 1, 2025: Conversely, Doge Matrix hit its all-time low value, illustrating the volatility often associated with cryptocurrencies, especially in the early stages of a project's lifecycle. Ongoing: The project continues to be actively traded and supported by its community, although specific future milestones or objectives have yet to be disclosed. Key Points About Doge Matrix ($doge m) Community Focus At the heart of Doge Matrix is a commitment to community engagement. The project thrives on the premise of collaboration and shared objectives among its members, emphasising the importance of collective effort. Unlike centralised projects that often have a defined leadership structure, Doge Matrix at present showcases a more fluid approach to governance, where every community member's voice matters. Volatility The cryptocurrency market is notorious for its volatility, and Doge Matrix is no exception. Its price history reflects significant fluctuations between high and low values, which is typical of many new cryptocurrencies but underscores the risks associated with investment in emerging tokens. Lack of Detailed Information One of the most striking features about Doge Matrix is the scarcity of detailed information regarding its technological underpinnings and operational mechanisms. This ambiguity necessitates that potential investors conduct thorough due diligence before engaging with the project. Conclusion In summary, Doge Matrix ($doge m) illustrates a new wave of cryptocurrency projects that lean heavily on community engagement and cultural relevance. While lacking in certain specifics—such as clear leadership, defined objectives, and detailed functionality—the project has managed to generate interest within the crypto community, leveraging the established appeal of meme culture. As with any investment in the cryptocurrency space, understanding the inherent risks and conducting comprehensive research is essential for potential participants. Doge Matrix stands as a reminder of the dynamic, sometimes unpredictable nature of the crypto industry, marked by constant evolution and enthusiasm for community-driven initiatives.

579 Total ViewsPublished 2025.02.03Updated 2025.02.03

What is DOGE M

What is $M

Understanding Mantis ($M): A New Era in Cross-Chain Interoperability In the continually evolving landscape of Web3 and cryptocurrency, new projects strive to offer innovative solutions aimed at enhancing the user experience and expanding functional possibilities within the decentralised financial ecosystem. One such project garnering attention is Mantis ($M), a pioneering protocol founded on the principles of cross-chain interoperability and intent-based settlements. This article delves into the essential aspects of Mantis, including its core functionality, creators, investment backing, innovative features, and critical milestones. What is Mantis ($M)? Mantis is described as a multi-domain intent settlement protocol that simplifies cross-chain interactions, enabling users to execute complex financial transactions across various blockchain platforms seamlessly. The protocol operates through three primary layers: Intent Expression: Users can articulate their transaction goals using natural language facilitated by the DISE LLM, an advanced AI language model. For instance, a user might express a desire to swap Ethereum (ETH) for Solana (SOL) with a specific slippage tolerance of 1%. Execution: This layer employs a network of solvers that compete to fulfil user intents. Transactions are executed using mechanisms such as Coincidence of Wants (CoWs) and Order Flow Auctions (OFAs), which ensure that user demands are met optimally. Settlement: Leveraging the Inter-Blockchain Communication (IBC) protocol, Mantis enables atomic cross-chain transactions, allowing users to operate across various supported chains, including Ethereum, Solana, and Cosmos. Mantis is engineered to introduce native yield generation for idle assets, employing cryptographic proofs to maintain the integrity of transactions throughout the entire process. Creators & Development Team Mantis was conceived by the Composable Foundation, a research-driven organisation notable for its emphasis on blockchain interoperability solutions. This foundation collaborates with esteemed academic institutions, including Harvard University and the University of Lisbon, contributing to extensive research and development efforts that inform Mantis's architecture and functionality. The Composable Foundation’s commitment to fostering innovation in the blockchain space positions Mantis as a robust solution for the growing demand for interoperability among multiple blockchain networks. Investors & Backing While specific details about individual investors have not been publicly disclosed, Mantis enjoys substantial backing from various entities, including: Ecosystem grants from IBC-enabled chains, which support the protocol's growth and integration within decentralised finance ecosystems. Strategic partnerships with infrastructure providers that enhance Mantis's network capabilities and deployment strategies. Funding through the Composable Foundation's treasury, ensuring sustained financial support for ongoing development and operational costs. These collaborative efforts reflect a consensus among stakeholders about the importance of enhancing cross-chain functionality and the potential utility of Mantis's infrastructural innovations. Key Innovations Mantis sets itself apart through several pioneering innovations that enhance its functionality and utility: Chain-Agnostic Intents: Users can initiate transactions from any supported chain while settling on another. This flexibility empowers users, driving increased interaction among different platforms. AI-Powered Interface: The integration of DISE LLM allows users to conduct complex DeFi operations using natural language, thereby simplifying interactions and making blockchain technology accessible to a broader audience. Cross-Domain MEV Capture: Mantis creates an internal market for maximal extractable value (MEV) through competitions among solvers. This innovative approach allows for greater efficiency and value extraction in complex transactions. Modular Settlement Layer: The protocol supports various verification methods, including zero-knowledge proofs and optimistic rollups, providing a versatile framework that can adapt to emerging blockchain technologies. Historical Timeline Mantis's development is marked by several critical milestones that chart its trajectory and growth: | Year | Milestone | |————|————————————————————————-| | 2022 | Initial concept development within the Composable Foundation's research division. | | Q3 2024 | Launch of the testnet with bridging capabilities between Solana and Ethereum. | | Q1 2025 | Anticipated Token Generation Event (TGE) alongside the mainnet launch. | | Q2 2025 | Expected integration of DISE LLM and expansion of cross-chain capabilities. | | 2025 H2 | Planned support for over 15 chains through further IBC upgrades. | This timeline outlines Mantis's evolution, from conceptual discussions to active implementation and future growth phases. Ecosystem Growth Strategy Mantis's strategy for ecosystem growth includes several initiatives designed to encourage user participation and developer engagement: Credits System: Users can earn protocol credits by providing liquidity and engaging in referral programmes. These credits are redeemable for incentives in the future, fostering a robust user community. Modular Software Development Kit (SDK): This toolkit empowers developers to create applications based on intent-driven models utilising Mantis's infrastructure, thus promoting innovation within its ecosystem. Governance Model: As the protocol matures, $M token holders will have a voice in protocol governance, allowing them to vote on proposed upgrades and changes, thereby enhancing community engagement and decentralisation. Mantis represents a significant advancement in the realm of cross-chain architecture. By seamlessly integrating advanced AI algorithms with a robust settlement framework, Mantis seeks to tackle the problems of fragmentation within multi-chain ecosystems. Its innovative approach prioritises improved user experiences while adhering to the foundational principles of decentralisation and security, setting a new standard for the future interoperability of blockchain technologies. As Mantis continues its journey of growth and implementation, it promises to be a project to watch closely in the competitive landscape of Web3 and decentralised finance. With its focus on crossing boundaries and elevating user engagement, Mantis is poised to be an integral part of the future developments in the cryptocurrency space.

99 Total ViewsPublished 2025.03.18Updated 2025.03.18

What is $M

Discussions

Welcome to the HTX Community. Here, you can stay informed about the latest platform developments and gain access to professional market insights. Users' opinions on the price of M (M) are presented below.

活动图片