The Zcash Bug That Could Have Minted Unlimited ZEC — Explained
On 5 June 2026 the privacy coin Zcash (ZEC) fell sharply after developers disclosed a critical flaw that, in theory, could have let someone counterfeit an unlimited amount of ZEC without anyone noticing. Here is what happened in plain English — and why it matters even if you never touch privacy coins.
What the bug was
The flaw lived in the Orchard shielded pool — the part of Zcash that hides transaction amounts behind zero-knowledge proofs. A soundness error in the Orchard circuit meant that, under the right conditions, bogus inputs could slip past the checks that are supposed to guarantee every coin is real. A security engineer, Taylor Hornby, wrote a working proof-of-concept that minted unlimited, undetectable counterfeit ZEC in a local test.
The unsettling part: the bug had been live since the Orchard upgrade in May 2022 — roughly four years — and because the pool is shielded, there is no way to look back and prove whether anyone exploited it.
How it was found
Hornby discovered the issue on 29 May 2026 during a targeted review of the Orchard circuit, reportedly with help from an AI model. He disclosed it privately; Zcash developers shipped an emergency patch by 1 June, and Shielded Labs went public on 5 June. The team says there is no evidence of exploitation and believes no fake coins were created.
Why the price crashed
ZEC dropped roughly 30–50% in the days around disclosure — from about $624 toward $309 at the lows. Selling accelerated when Arthur Hayes, one of the most visible backers of the recent privacy-coin narrative, exited his position. For a coin whose entire pitch is verifiable, trustless supply, "we cannot prove the supply was never inflated" is close to the worst sentence you can read.
The lesson for traders
You do not need to hold ZEC for this to matter. Single-headline events routinely move crypto 30–50% in hours, and leveraged positions get liquidated long before the dust settles. That is exactly why position sizing and stops exist:
- Size every trade by risk, not conviction, so one bad headline cannot end your account.
- Know your liquidation price before you enter, and keep your stop inside it.
- On high leverage a 30% gap can blow straight through your stop — see how much leverage is too much.
Check your liquidation and size by risk before the next surprise.
Open the calculators →News commentary for education, not financial or security advice. Figures are based on reporting around the 5 June 2026 disclosure and may be revised.
Comments