What Is Zcash (ZEC)? Shielded Transactions

Last updated: October 2026

Zcash (ZEC) is a proof-of-work cryptocurrency, launched in October 2016, that lets users choose between Bitcoin-style transparent payments and shielded payments that hide sender, receiver and amount using zero-knowledge proofs. It was the first production use of zk-SNARKs, the same cryptography that now underpins Ethereum’s ZK rollups. ZEC has a 21 million cap and a four-year halving schedule. In 2026 the network is in an unusually busy phase. A counterfeiting flaw in the Orchard shielded pool was found and fixed. A new pool called Ironwood launched in July. And a faster-blocks upgrade, NU7, is targeted for mainnet on November 5, 2026.

• Privacy model: optional, but growing. About 4.94 million ZEC, roughly 29% of circulating supply, sat in shielded pools at the end of September 2026.
• Supply: 21 million ZEC maximum. The block reward is 1.5625 ZEC since the November 2024 halving, with the next halving expected around 2028.
• Governance shift: development is now funded by 8% of block rewards to Zcash Community Grants and 12% to a coinholder-controlled fund, set by NU6.1 in November 2025.
• Still proof of work: the Crosslink hybrid-finality design is in testing, not live.

History

From Zerocash to mainnet (2014–2016)

Zcash grew out of the 2014 Zerocash paper by researchers including Eli Ben-Sasson, Alessandro Chiesa, Matthew Green, Ian Miers, Eran Tromer and Madars Virza. It showed how to make Bitcoin-like payments fully private with zk-SNARKs. Zooko Wilcox founded the Zerocoin Electric Coin Company, later shortened to Electric Coin Company (ECC), to turn the research into a network. Zcash launched on October 28, 2016. Its zk-SNARK parameters came from a multi-party “trusted setup” ceremony. If every participant’s secret had been kept, counterfeiting would have been possible, which became a lasting criticism.

Horizen began as ZenCash, a fork of Zclassic, itself a Zcash fork; our Horizen (ZEN) migration explainer covers its July 2025 move to Base and why its L3 is now winding down.

Upgrades that removed the trusted setup (2018–2022)

The Sapling upgrade (2018) made shielded transactions fast enough for phones. Blossom (2019) cut block time from 150 to 75 seconds. NU5 (May 2022) introduced the Orchard pool built on Halo 2, a proving system that needs no trusted setup, along with Unified Addresses that bundle transparent and shielded receivers.

Funding battles and the 2025 revival

For its first four years, 20% of block rewards went to the founders and investors. A 2020–2024 dev fund then split 20% between ECC, the Zcash Foundation and a grants program. That arrangement ended at the November 2024 halving. NU6 sent 8% to Zcash Community Grants and parked 12% in an in-protocol “lockbox.” NU6.1, activated at block 3,146,400 on November 24, 2025, turned that 12% into a coinholder-controlled fund whose grants are approved by ZEC-weighted votes. Around the same time, ZEC staged a sharp rally and became one of the most-searched crypto assets of November 2025.

2026: a turbulent, consequential year

• January: ECC’s engineering and product team resigned after a governance dispute with its nonprofit parent, Bootstrap. They formed the Zcash Open Development Lab (ZODL) and took the flagship wallet, formerly Zashi and now Zodl, with them. ZODL raised a seed round of more than $25 million in March. Also in January, an SEC investigation into the Zcash Foundation closed without enforcement action.
• March 31: zcashd v6.12.0 patched a long-standing bug that could have let nodes skip proof checks for the original Sprout pool. No funds were lost.
• May 29 – June 3: Shielded Labs researcher Taylor Hornby found a soundness flaw in Orchard’s circuit, present since 2022, that in theory allowed undetectable counterfeiting inside the pool. An emergency soft fork paused Orchard on June 2, and a hard fork restored it with corrected code the next day. Developers and later analysis reported no evidence of exploitation.
• July 28: the Ironwood upgrade launched a new, formally verified shielded pool. A “turnstile” limits how much value can leave Orchard to what was verifiably deposited, which caps any hidden counterfeit. Migration is voluntary through updated wallets. By September 30, Ironwood held about 4.06 million ZEC.
• September 14: a record coinholder poll of nearly 2.4 million ZEC voted overwhelmingly to keep four-year halvings, and backed recycling transaction fees into miner rewards starting February 2031.
• October: NU7 went live on testnet on October 4. Mainnet is targeted for November 5, 2026, pending final readiness checks.

Transparent vs Shielded

• Transparent addresses (t-addresses): work like Bitcoin. Sender, receiver and amount are public. Many exchanges historically supported only these.
• Shielded pools (Sapling, Orchard, and now Ironwood): a zk-SNARK proves a transaction is valid (no double spend, no new money created) without revealing addresses or amounts. Shielded-to-shielded payments leak almost nothing on-chain.
• Unified Addresses: a single address, starting with “u1,” that contains several receiver types, so the sender’s wallet can pick the most private one it supports.
• Encrypted memos: shielded transactions carry a 512-byte memo readable only by the recipient. It is useful for invoices or messages.
• Viewing keys: you can share read-only access to your shielded history with an auditor or tax preparer without giving up spending control.

The practical rule: privacy is strongest when both sides stay shielded. Moving funds from a transparent address into a pool and straight back out can link activity through timing and amounts.

For privacy applied to smart contracts rather than payments, see our explainer on what Oasis Network (ROSE) is and how Sapphire works.

How Zcash Works Under the Hood

Zcash is a Bitcoin-derived proof-of-work chain using the Equihash algorithm, which is mined mostly with ASICs today. Blocks arrive about every 75 seconds. NU7 would cut that to roughly 25 seconds and reduce the per-block reward proportionally, so the daily issuance of about 1,800 ZEC is unchanged. NU7 also retires the old v4 transaction format. Coins still in the 2016-era Sprout pool may become unspendable unless a later upgrade restores access, so anyone with very old shielded funds should move them first.

Several node implementations now exist: the Zcash Foundation’s Zebra, and Zakura from Valar Group and Project Tachyon, alongside the legacy zcashd. That spreads development across independent teams. Separately, Shielded Labs is building Crosslink, a hybrid design that would add proof-of-stake finality on top of mining. It was bootstrapping finality on a test “FeatureNet” in October 2026 and has no mainnet date.

Tokenomics

The coinholder-controlled fund is new territory. In the third quarter of 2026, holders approved $8.39 million in retroactive grants, mostly for protocol and security work, including $1.5 million to the researcher who found the Orchard flaw. Whether the dev fund should shrink or end is an open debate. See our tokenomics guide for how issuance and allocations affect holders.

Our Zcash price prediction takes these drivers and models bear, base and bull outcomes, with the supply maths shown.

How to Buy and Store ZEC

ZEC trades on Coinbase, Kraken, Gemini and Binance, among others. Coinbase, Binance and Kraken together supplied about two-thirds of resting order-book depth near market price in September 2026. Many exchanges only send to and accept transparent addresses, so after withdrawing, shield your coins in a wallet that supports it, such as Zodl (formerly Zashi), which has the newer pools. Some hardware wallets handle only transparent ZEC, so check shielded support before relying on one. Grayscale’s Zcash product (ticker ZCSH) offers brokerage exposure. It held about 597,000 ZEC at the end of September 2026.

To see each step from exchange purchase to shielded storage, read our guide on how to buy Zcash (ZEC) and withdraw to a shielded wallet.

Pros and Cons

• Pro: zero-knowledge privacy that reveals nothing about shielded amounts or parties, plus selective disclosure through viewing keys.
• Pro: the original trusted-setup concern is gone, since Halo 2 needs none, and the Ironwood proof system has been formally verified.
• Pro: Bitcoin-like scarcity (21M cap, halvings), reaffirmed by a 2026 coinholder vote.
• Pro: development is now spread across several teams with transparent, vote-based grants.
• Con: the 2026 Orchard flaw showed that complex cryptography can hide serious bugs for years, even if no exploit was found.
• Con: regulatory pressure. The EU’s AML rules bar regulated providers from handling anonymity-enhancing coins from July 2027, and some exchanges in Asia and Europe have already delisted privacy coins.
• Con: trading is derivatives-heavy and volatile. Leverage made ZEC’s 2025–2026 swings sharper.
• Con: governance churn, from the ECC split to dev-fund disputes, adds execution risk.

Compare ZEC with other privacy and payment coins in our crypto coin directory.

If you compare privacy coins, our XMR price forecast for 2026 reviews Monero’s price history and scenarios, which should not be treated as reliable.

FAQ

Zcash vs Monero — which is better for privacy?

They take different routes. Monero makes privacy mandatory, using ring signatures and stealth addresses, so every transaction blends into one crowd. Zcash’s shielded pools use zero-knowledge proofs that reveal less per transaction, but privacy is optional, so the anonymity set depends on how many people shield. Fully shielded Zcash usage is very strong; mixed transparent-shielded usage is weaker.

Was Zcash hacked in 2026?

No funds were reported stolen. In May 2026 a researcher found a flaw in the Orchard pool that could have allowed hidden counterfeiting. Developers paused Orchard on June 2, patched it on June 3, and launched the Ironwood pool in July with a turnstile that limits withdrawals from Orchard to verifiable deposits. Analyses found no sign of exploitation.

What is NU7?

NU7 is Zcash’s next network upgrade. It cuts block time from 75 to about 25 seconds while lowering the per-block reward, so issuance stays on schedule and confirmations arrive about three times faster. It also retires the old v4 transaction format. It went live on testnet on October 4, 2026, with mainnet targeted for November 5, 2026.

Is ZEC a good investment?

It is a bet that on-chain privacy becomes more valuable and that Zcash’s governance and cryptography hold up. Positives include growing shielded usage and a fixed supply. Risks include regulatory delistings, the bug history and a leverage-driven market. Treat any position as high-risk, and check our regulation guide for your jurisdiction.

Why is privacy opt-in instead of mandatory?

Zcash launched with both address types so exchanges and wallets built for Bitcoin could support it easily. The trade-off is a smaller shielded crowd. The ecosystem has steadily shifted toward shielded-by-default wallets and Unified Addresses, and shielded holdings reached roughly 29% of supply by late 2026.

Crypto is volatile and risky; this is education, not financial advice. Do your own research.