Quantum

Zcash

Major

<h2 id="b-tldr-b">TLDR:</h2>
<ul>
 <li style="font-weight: 400">Zcash’s Ironwood upgrade activated on July 28, 2026, at block 3,428,143, opening a new shielded pool.</li>
 <li style="font-weight: 400">Ironwood notes use plaintext marker 0x03, replacing Orchard’s 0x02 format to prepare for future recovery.</li>
 <li style="font-weight: 400">ZIP 2005 reserves marker 0x0A for PRF-expand, but it does not make shielded transactions quantum-resistant.</li>
 <li style="font-weight: 400">Recovery remains unfinished, while Sprout, Sapling and Orchard funds lack the same planned protection.</li>
</ul>
Zcash’s push toward quantum preparedness has moved from theory to how shielded funds are recorded. Its Ironwood upgrade, activated July 28, 2026, introduced notes designed to support recovery if current cryptographic protections fail. However, the change does not make transactions <a href="https://blockonomi.com/starkware-says-quantum-resistant-bitcoin-transaction-now-costs-under-67/" rel="noopener noreferrer nofollow">quantum-resistant</a> today.
An October 25 technical update drew attention to <a href="https://zips.z.cash/zip-2005" rel="noopener noreferrer nofollow">ZIP 2005,</a> which reserves hexadecimal marker 0x0A for a specific cryptographic operation. That marker equals decimal 10. Its role is precise but narrower than a wholesale security replacement: separating one calculation from another.
<div class="embed-x">
 <blockquote class="twitter-tweet">
 Ironwood introduced quantum recoverable shielded notes to Zcash.
 ZIP 2005 reserves 0x0A (decimal 10) as a pseudorandom function domain separator.
 A small cryptographic detail in a much larger effort to future proof against possible quantum threats.<a href="https://t.co/yTVOMAafUl" rel="noopener noreferrer nofollow">https://t.co/yTVOMAafUl</a><a href="https://t.co/5A3Zc0cUBS" rel="noopener noreferrer nofollow">pic.twitter.com/5A3Zc0cUBS</a>
 — Zcash <img src="https://s.w.org/images/core/emoji/17.0.2/72x72/1f6e1.png" alt="🛡" style="height: 1em; max-height: 1em;"> (@Zcash) <a href="https://x.com/Zcash/status/2114081549704626363?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">October 24, 2026</a>
 </blockquote>
</div>
Together, the specification and new note design show how Zcash is preparing a path for legitimate holders to recover funds. Major pieces of that path, including authorization and proof systems, remain unfinished.
<h2 id="b-how-ironwood-shielded-notes-prepare-zcash-for-quantum-recovery-b">How Ironwood Shielded Notes Prepare Zcash for Quantum Recovery</h2>
ZIP 2005 assigns 0x0A to PRF-expand, a pseudorandom function used in split-note functionality described by ZIP 226. The separator keeps values created for different purposes from being interpreted interchangeably. Reserving this identifier alone provides no quantum resistance.
Separately, <a href="https://zcash.github.io/ironwood/concepts/quantum-recoverability.html" rel="noopener noreferrer nofollow">Ironwood introduces</a> a note plaintext format marked 0x03, compared with 0x02 for earlier Orchard notes. Its commitment-randomness calculation uses transaction details, including recipient public keys, note values and other cryptographic parameters. Those inputs help link a recovered note to a valid commitment recorded onchain.
<a href="https://parameter.io/zcash-zec-liquidity-pool-now-active-on-thorchain-after-network-node-churn/" rel="noopener noreferrer nofollow">Zcash’s network</a> activated its NU6.3 upgrade at block 3,428,143. It established the Ironwood shielded pool while restricting the original Orchard pool and applying additional safeguards to transfers. This matters because the recovery design requires funds to reside in the newer pool.
<h2 id="b-why-quantum-recovery-still-needs-further-cryptographic-upgrades-b">Why Quantum Recovery Still Needs Further Cryptographic Upgrades</h2>
The security gap is serious: <a href="https://moneycheck.com/iqm-quantum-computers-iqmx-expands-to-south-america-with-landmark-brazil-partnership/" rel="noopener noreferrer nofollow">powerful quantum computers</a> could undermine elliptic-curve cryptography that supports existing shielded protocols. Successful attacks could enable forged transactions, unauthorized transfers or manipulation of shielded balances. Zcash therefore distinguishes protection against theft from the ability to reclaim legitimate funds later.
Under the proposed model, an eventual recovery mechanism would let valid owners reclaim Ironwood funds after vulnerable systems are disabled. However, <a href="https://coincentral.com/zcash-zec-price-developers-raise-25m-as-token-jumps-nearly-10/" rel="noopener noreferrer nofollow">Zcash developers</a> have not finalized the recovery protocol, post-quantum proof system or commitment-tree architecture.
That leaves a practical divide between balances. Older Sprout, Sapling and Orchard funds would not have the same recovery protection. The specification recommends moving eligible funds into Ironwood, although migration itself cannot replace the missing security components.
Privacy also remains a separate concern. <a href="https://blockonomi.com/verifiedx-unveils-prism-privacy-layer-for-encrypted-crypto-transfers-and-hidden-balances/" rel="noopener noreferrer nofollow">Encrypted transaction</a> data could become readable to a future attacker who already knows the recipient address. For Zcash, quantum readiness therefore remains a staged transition, not a completed defense. Ironwood establishes one recovery foundation, while work on transaction security continues.
The post <a href="https://blockonomi.com/zcash-advances-quantum-readiness-with-ironwoods-shielded-notes-upgrade/" rel="noopener noreferrer nofollow">Zcash Advances Quantum Readiness With Ironwood’s Shielded Notes Upgrade</a> appeared first on <a href="https://blockonomi.com" rel="noopener noreferrer nofollow">Blockonomi</a>.

Zcash Advances Quantum Readiness With Ironwood’s Shielded Notes Upgrade

Table of Contents

Blockonomi

Other articles published on Oct 25, 2026

Join our free newsletter for daily crypto updates!