Zcash rocked by four-year “Orchard” bug that could have minted unlimited ZEC — price plunges
A critical vulnerability in Zcash’s Orchard codebase that reportedly could have allowed unlimited minting of ZEC has been confirmed by the project’s founder, triggering a sharp market reaction and renewed scrutiny of the protocol’s security.
What happened
- The bug, which affected Orchard — Zcash’s shielded transaction component — was active from May 2022 until it was patched on June 1, 2026, a span of roughly four years.
- According to the founder’s confirmation, the flaw could have been exploited to create counterfeit ZEC with no supply limit. The issue was discovered following the Claude Opus 4.8 update and fixed on June 1.
Market fallout
- News of the vulnerability sent ZEC tumbling: CoinGecko shows a more than 36% drop in the token’s price over the past 24 hours.
- Despite the crash, ZEC remains far above last year’s levels, still reporting an approximate 660% rally since June 2025.
Bigger context and recent troubles
- The Orchard incident is the latest in a turbulent year for Zcash. In January 2026 the Electric Coin Company (ECC) — historically the core development team behind Zcash — saw its entire staff resign en masse amid internal disputes. ECC CEO Josh Swihart said the platform had made it “impossible to work with integrity.”
- That mass resignation previously coincided with a steep price drop for ZEC, though the token recovered as interest in privacy-focused assets spiked.
Why it matters
- A bug enabling unlimited minting strikes at the heart of any cryptocurrency: supply integrity and user trust. Even if no exploit is confirmed, the mere existence of such a flaw for four years is likely to erode confidence among holders, exchanges, and developers.
- The episode may reshape the competitive landscape for privacy coins. With ZEC under fresh scrutiny, rivals such as Monero (XMR) — which has also benefitted from growing demand for privacy amid concerns about financial surveillance — could gain market share.
Outlook
- Zcash stakeholders will be watching for further technical forensic details, any evidence of exploitation, and how exchanges and custodians respond. Rebuilding confidence may require transparent audits, coordinated governance, and clear communication from remaining developers and community leaders.
This remains a developing story; expect more updates as audits and disclosures continue.
Read more AI-generated news on: undefined/news
