Zcash says Ironwood proof rules out undetectable counterfeiting bugs

cointelegraphPublished on 2026-07-29Last updated on 2026-07-29

Abstract

Zcash researchers have completed formal verification of Ironwood, a new shielded pool introduced via the NU6.3 upgrade. They published a machine-checked proof, written in Lean and comprising over 2,700 theorems, that establishes the pool's "balance integrity." This proof confirms that, under its cryptographic assumptions, Ironwood cannot contain undetectable counterfeiting bugs, ensuring it cannot pay out more value than has publicly entered it. The verification, which took multiple teams over a month, covers the zero-knowledge proof system, circuit rules, and ledger accounting but not Ironwood's separate privacy guarantees. Ironwood was created in response to a theoretical vulnerability in the older Orchard pool that could have allowed undetectable counterfeiting, though there's no evidence of exploitation. Funds migrating from Orchard must pass through a public "turnstile" checkpoint, designed to prevent any hypothetical excess coins from entering the new pool and to provide evidence on whether the old pool was exploited.

Zcash researchers have completed formal verification of Ironwood, publishing a machine-checked proof that the network’s new shielded pool does not contain undetectable counterfeiting bugs under its stated cryptographic assumptions.

On Tuesday, Project Tachyon said that the proof, written in the Lean programming language, comprises over 2,700 theorems and took three teams of researchers and cryptographers over a month to complete. The work establishes a security property known as balance integrity, designed to ensure the shielded pool cannot pay out more value than has publicly entered it.

The researchers said the proof covers the components needed for that property, including Ironwood’s zero-knowledge proof system, circuit rules and ledger-level accounting. It does not cover Ironwood’s separate privacy guarantees.

Ironwood was introduced through Zcash’s NU6.3 upgrade in response to a vulnerability discovered in its Orchard shielded pool that could theoretically have enabled undetectable ZEC counterfeiting. Zcash developers said they found no evidence that the flaw had been exploited. The new pool was designed to restore confidence in Zcash’s supply integrity.

Funds migrating from Orchard must pass through a public accounting checkpoint known as a turnstile, which is designed to prevent any hypothetical excess coins from entering Ironwood. As funds leave Orchard, the process could also provide growing evidence about whether the old pool was exploited.

Related: Why ZEC fell 40% even after Zcash patched a shielded pool bug

Trending Cryptos

Related Questions

QWhat is the main security property formally verified for Ironwood, and what does it guarantee?

AThe main security property formally verified for Ironwood is 'balance integrity'. It guarantees that the shielded pool cannot pay out more value than has publicly entered it, ruling out undetectable counterfeiting under the stated cryptographic assumptions.

QWhat was the catalyst for the development of the Ironwood shielded pool in Zcash?

AIronwood was developed and introduced through Zcash's NU6.3 upgrade in direct response to a vulnerability discovered in the older Orchard shielded pool, which could theoretically have enabled undetectable ZEC counterfeiting. It was designed to restore confidence in Zcash's supply integrity.

QHow was the formal verification proof for Ironwood created and how extensive was it?

AThe formal verification proof was written in the Lean programming language. It comprises over 2,700 theorems and took three separate teams of researchers and cryptographers over a month to complete.

QDoes the formal verification proof cover Ironwood's privacy guarantees? What components does it primarily cover?

ANo, the proof does not cover Ironwood's separate privacy guarantees. It primarily covers the components needed for the balance integrity property, including Ironwood’s zero-knowledge proof system, circuit rules, and ledger-level accounting.

QWhat mechanism is used to ensure funds migrating from the old Orchard pool to Ironwood cannot introduce counterfeit coins?

AFunds migrating from the Orchard pool to Ironwood must pass through a public accounting checkpoint called a 'turnstile'. This mechanism is designed to prevent any hypothetical excess or counterfeit coins from the old pool from entering the new Ironwood shielded pool.

Related Reads

Trading

Spot

Hot Articles

What is DOGE M

Doge Matrix ($doge m): The New Breed of Community-Driven Cryptocurrency Introduction In the ever-evolving landscape of cryptocurrency, new projects constantly emerge, each aiming to capture the interest of investors and enthusiasts alike. One of the latest entrants to this domain is Doge Matrix, represented by the ticker symbol $doge m. This project has attracted attention thanks to its roots in the popular meme culture surrounding Dogecoin, establishing its place within the web3 space. This article aims to provide a comprehensive analysis of Doge Matrix, covering its overview, creator, investors, functionality, timeline, and notable aspects. What is Doge Matrix ($doge m)? Doge Matrix is a community-driven cryptocurrency project that seemingly builds upon the widespread appeal of Dogecoin, a digital currency known for its Shiba Inu mascot and its meme origins. While the overarching objectives of Doge Matrix are not extensively defined, it is characterized by a commitment to harnessing community involvement and support. Unlike traditional cryptocurrencies that often emphasize utility or intrinsic value through underlying technologies, Doge Matrix positions itself within a space that embraces the cultural phenomenon of cryptocurrencies, particularly appealing to those who resonate with the ethos of meme-based assets. Drawing on the strengths of the Dogecoin community, Doge Matrix operates as part of a broader ecosystem, inviting participation and engagement from users who share an interest in cryptocurrency and the digital landscape. Who is the Creator of Doge Matrix ($doge m)? The identity of the creator of Doge Matrix remains unknown. This lack of transparency is not an uncommon occurrence in the cryptocurrency space, where some projects are launched without revealing the identities of their founders. The absence of information regarding the founding team can raise questions among potential investors about the project’s accountability and direction. Who are the Investors of Doge Matrix ($doge m)? As it stands, there is no publicly available information detailing the investors or investment foundations that back Doge Matrix. The project appears to rely primarily on community support rather than institutional investment. This model aligns with the community-driven nature of the initiative, fostering an environment where the direction of the project is shaped by its participants rather than being dictated by a select few financial backers. How Does Doge Matrix ($doge m) Work? The specifics regarding the operational mechanisms of Doge Matrix are somewhat vague, reflecting a broader trend of projects in the meme coin space where innovative functionalities are not always clearly articulated. Nonetheless, Doge Matrix seems designed to tap into the existing cryptocurrency ecosystem by encouraging user participation while tapping into the familiar cultural references associated with Dogecoin. Its potentially unique characteristics derive from community interactions rather than technological advancements, emphasizing shared experiences and collaboration among token holders. While the exact innovations have not been explicitly outlined, the project appears to create a space where community members can engage, share ideas, and propel the project's potential forward. Timeline of Doge Matrix ($doge m) Reflecting on the project’s timeline reveals notable events that have defined its journey thus far: November 25, 2024: Doge Matrix reached its all-time high value, marking a significant milestone in its early history. January 1, 2025: Conversely, Doge Matrix hit its all-time low value, illustrating the volatility often associated with cryptocurrencies, especially in the early stages of a project's lifecycle. Ongoing: The project continues to be actively traded and supported by its community, although specific future milestones or objectives have yet to be disclosed. Key Points About Doge Matrix ($doge m) Community Focus At the heart of Doge Matrix is a commitment to community engagement. The project thrives on the premise of collaboration and shared objectives among its members, emphasizing the importance of collective effort. Unlike centralized projects that often have a defined leadership structure, Doge Matrix at present showcases a more fluid approach to governance, where every community member's voice matters. Volatility The cryptocurrency market is notorious for its volatility, and Doge Matrix is no exception. Its price history reflects significant fluctuations between high and low values, which is typical of many new cryptocurrencies but underscores the risks associated with investment in emerging tokens. Lack of Detailed Information One of the most striking features about Doge Matrix is the scarcity of detailed information regarding its technological underpinnings and operational mechanisms. This ambiguity necessitates that potential investors conduct thorough due diligence before engaging with the project. Conclusion In summary, Doge Matrix ($doge m) illustrates a new wave of cryptocurrency projects that lean heavily on community engagement and cultural relevance. While lacking in certain specifics—such as clear leadership, defined objectives, and detailed functionality—the project has managed to generate interest within the crypto community, leveraging the established appeal of meme culture. As with any investment in the cryptocurrency space, understanding the inherent risks and conducting comprehensive research is essential for potential participants. Doge Matrix stands as a reminder of the dynamic, sometimes unpredictable nature of the crypto industry, marked by constant evolution and enthusiasm for community-driven initiatives.

4.2k Total ViewsPublished 2025.02.03Updated 2025.02.03

What is DOGE M

What is $M

Understanding Mantis ($M): A New Era in Cross-Chain Interoperability In the continually evolving landscape of Web3 and cryptocurrency, new projects strive to offer innovative solutions aimed at enhancing the user experience and expanding functional possibilities within the decentralized financial ecosystem. One such project garnering attention is Mantis ($M), a pioneering protocol founded on the principles of cross-chain interoperability and intent-based settlements. This article delves into the essential aspects of Mantis, including its core functionality, creators, investment backing, innovative features, and critical milestones. What is Mantis ($M)? Mantis is described as a multi-domain intent settlement protocol that simplifies cross-chain interactions, enabling users to execute complex financial transactions across various blockchain platforms seamlessly. The protocol operates through three primary layers: Intent Expression: Users can articulate their transaction goals using natural language facilitated by the DISE LLM, an advanced AI language model. For instance, a user might express a desire to swap Ethereum (ETH) for Solana (SOL) with a specific slippage tolerance of 1%. Execution: This layer employs a network of solvers that compete to fulfill user intents. Transactions are executed using mechanisms such as Coincidence of Wants (CoWs) and Order Flow Auctions (OFAs), which ensure that user demands are met optimally. Settlement: Leveraging the Inter-Blockchain Communication (IBC) protocol, Mantis enables atomic cross-chain transactions, allowing users to operate across various supported chains, including Ethereum, Solana, and Cosmos. Mantis is engineered to introduce native yield generation for idle assets, employing cryptographic proofs to maintain the integrity of transactions throughout the entire process. Creators & Development Team Mantis was conceived by the Composable Foundation, a research-driven organization notable for its emphasis on blockchain interoperability solutions. This foundation collaborates with esteemed academic institutions, including Harvard University and the University of Lisbon, contributing to extensive research and development efforts that inform Mantis's architecture and functionality. The Composable Foundation’s commitment to fostering innovation in the blockchain space positions Mantis as a robust solution for the growing demand for interoperability among multiple blockchain networks. Investors & Backing While specific details about individual investors have not been publicly disclosed, Mantis enjoys substantial backing from various entities, including: Ecosystem grants from IBC-enabled chains, which support the protocol's growth and integration within decentralized finance ecosystems. Strategic partnerships with infrastructure providers that enhance Mantis's network capabilities and deployment strategies. Funding through the Composable Foundation's treasury, ensuring sustained financial support for ongoing development and operational costs. These collaborative efforts reflect a consensus among stakeholders about the importance of enhancing cross-chain functionality and the potential utility of Mantis's infrastructural innovations. Key Innovations Mantis sets itself apart through several pioneering innovations that enhance its functionality and utility: Chain-Agnostic Intents: Users can initiate transactions from any supported chain while settling on another. This flexibility empowers users, driving increased interaction among different platforms. AI-Powered Interface: The integration of DISE LLM allows users to conduct complex DeFi operations using natural language, thereby simplifying interactions and making blockchain technology accessible to a broader audience. Cross-Domain MEV Capture: Mantis creates an internal market for maximal extractable value (MEV) through competitions among solvers. This innovative approach allows for greater efficiency and value extraction in complex transactions. Modular Settlement Layer: The protocol supports various verification methods, including zero-knowledge proofs and optimistic rollups, providing a versatile framework that can adapt to emerging blockchain technologies. Historical Timeline Mantis's development is marked by several critical milestones that chart its trajectory and growth: | Year | Milestone | |————|————————————————————————-| | 2022 | Initial concept development within the Composable Foundation's research division. | | Q3 2024 | Launch of the testnet with bridging capabilities between Solana and Ethereum. | | Q1 2025 | Anticipated Token Generation Event (TGE) alongside the mainnet launch. | | Q2 2025 | Expected integration of DISE LLM and expansion of cross-chain capabilities. | | 2025 H2 | Planned support for over 15 chains through further IBC upgrades. | This timeline outlines Mantis's evolution, from conceptual discussions to active implementation and future growth phases. Ecosystem Growth Strategy Mantis's strategy for ecosystem growth includes several initiatives designed to encourage user participation and developer engagement: Credits System: Users can earn protocol credits by providing liquidity and engaging in referral programs. These credits are redeemable for incentives in the future, fostering a robust user community. Modular Software Development Kit (SDK): This toolkit empowers developers to create applications based on intent-driven models utilizing Mantis's infrastructure, thus promoting innovation within its ecosystem. Governance Model: As the protocol matures, $M token holders will have a voice in protocol governance, allowing them to vote on proposed upgrades and changes, thereby enhancing community engagement and decentralization. Mantis represents a significant advancement in the realm of cross-chain architecture. By seamlessly integrating advanced AI algorithms with a robust settlement framework, Mantis seeks to tackle the problems of fragmentation within multi-chain ecosystems. Its innovative approach prioritizes improved user experiences while adhering to the foundational principles of decentralization and security, setting a new standard for the future interoperability of blockchain technologies. As Mantis continues its journey of growth and implementation, it promises to be a project to watch closely in the competitive landscape of Web3 and decentralized finance. With its focus on crossing boundaries and elevating user engagement, Mantis is poised to be an integral part of the future developments in the cryptocurrency space.

637 Total ViewsPublished 2025.03.18Updated 2025.03.18

What is $M

How to Buy M

Welcome to HTX.com! We've made purchasing MemeCore (M) simple and convenient. Follow our step-by-step guide to embark on your crypto journey.Step 1: Create Your HTX AccountUse your email or phone number to sign up for a free account on HTX. Experience a hassle-free registration journey and unlock all features.Get My AccountStep 2: Go to Buy Crypto and Choose Your Payment MethodCredit/Debit Card: Use your Visa or Mastercard to buy MemeCore (M) instantly.Balance: Use funds from your HTX account balance to trade seamlessly.Third Parties: We've added popular payment methods such as Google Pay and Apple Pay to enhance convenience.P2P: Trade directly with other users on HTX.Over-the-Counter (OTC): We offer tailor-made services and competitive exchange rates for traders.Step 3: Store Your MemeCore (M)After purchasing your MemeCore (M), store it in your HTX account. Alternatively, you can send it elsewhere via blockchain transfer or use it to trade other cryptocurrencies.Step 4: Trade MemeCore (M)Easily trade MemeCore (M) on HTX's spot market. Simply access your account, select your trading pair, execute your trades, and monitor in real-time. We offer a user-friendly experience for both beginners and seasoned traders.

8.4k Total ViewsPublished 2025.07.02Updated 2026.06.02

How to Buy M

Discussions

Welcome to the HTX Community. Here, you can stay informed about the latest platform developments and gain access to professional market insights. Users' opinions on the price of M (M) are presented below.

活动图片