02 RECORD — 2013 to 2026 - one spine - filter by strand

From Zerocash to the ETF

Launch, funding, governance, leadership, exploits, upgrades, market and the promotion network on one axis. The governance strand alone runs Founders' Reward to ZIP 1014 to ZIP 1015 to ZIP 1016 to the January 2026 walkout to a VC-funded lab whose engineers accounted for roughly 82 per cent of merged protocol and wallet repository changes in Ironwood. Dates are printed as the record states them: a row the sources date only to a month says so rather than borrowing a day from its sort key.

shielded share of supply — 2018 to 2026

Shielded share of ZEC supply, 2018 to 2026

Shielded share of ZEC supply, by reading date
Date	Share of supply	Source note
Aug 2018	3.6 per cent	Kappos et al.'s own measurement, in the paper that also found 0.3 per cent of transactions fully private
Aug 2021	7.4 per cent	ZECStats' five-years-ago baseline
Early 2024	8 per cent	-
Aug 2024	9 per cent	Forbes gives it as about 9 per cent, 1.48M of 16.3M ZEC
Start of 2025	11 per cent	-
Oct 2025	18 per cent	-
Nov 2025	23 per cent	-
May 2026	30 per cent	the peak, about 5M ZEC, and the only time the shielded share has reached 30 per cent
2026-08-22 (block 3,456,227)	26 to 26.8 per cent	CipherScan at block 3,456,227 gives 26.0 percent shielded; ZECStats reads 26.8 percent. Cite the range, roughly 26 to 27 percent. Coin Metrics adds that the growth was driven primarily by shielding and deshielding activity, and that fully shielded transfers remain a small share.

Nine and a half years after mainnet, the shielded share peaked at 30 per cent and fell back. The final reading is a band because its two sources disagree: CipherScan reads 26 per cent and ZECStats 26.8 per cent on the same day. The decline from the May 2026 peak spans the Orchard disclosure and the forced Ironwood migration; the corpus flags the fall and declines to attribute a cause, and so does this chart.

shielded-sharecite

claim: shielded-share
canonical: https://zecreveal.vercel.app/timeline#shielded-share
last verified: 2026-08-22
confidence: med

Kappos, Yousaf, Maller, Meiklejohn — An Empirical Analysis of Anonymity in Zcash, USENIX Security 2018 USENIX · accessed 2026-08-22
ZEC Stats (zecstats.com) ZEC Stats · accessed 2026-08-22
crypto.news — Why 30% of Zcash supply is in the shielded pool (29 May 2026) crypto.news · 2026-05-29 · accessed 2026-08-22
Forbes — How Satoshi Collaborator Zooko Wilcox Aims to Revive His Zombie Blockchain (8 Aug 2024) Forbes · 2025-03-12 · accessed 2026-08-22
Coin Metrics, State of the Network #338 Coin Metrics · 2025-11-08 · accessed 2026-08-22
CipherScan — Ironwood migration tracker CipherScan · 2026-08-22 · accessed 2026-08-22
CoinGecko — Zcash CoinGecko · accessed 2026-08-22
Coinglass ZEC derivatives coinglass.com · accessed 2026-08-22

C8cite

claim: C8
canonical: https://zecreveal.vercel.app/contradictions#C8
last verified: 2026-08-22
confidence: high

The Block — Zcash developers quit, form new company (7 Jan 2026) The Block · 2026-01-07 · accessed 2026-08-22
CoinDesk — ZODL raises $25M (9 Mar 2026) CoinDesk · 2026-03-09 · accessed 2026-08-22
Draft ecc-zbloc (Obsolete) Zcash Improvement Proposals · accessed 2026-08-22

the 82 per cent figure, its scope and its confidence

124 dated entries, 9 strands. Showing the 24 exploit rows; the year numerals stay, so a strand's silent years remain visible.

all124 exploit24 governance16 funding9 leadership8 protocol22 market12 regulatory8 network20 launch5

2013

2014

2015

2016

26 Apr 2016exploitECC discloses three pre-launch protocol vulnerabilities ECC discloses three pre-launch protocol vulnerabilities: Faerie Gold (Zooko Wilcox), InternalH Collision (Taylor Hornby, critical — would have allowed counterfeiting), security-proof error (Daira Hopwood).T2016-04-26

T2016-04-26cite

claim: T2016-04-26
canonical: https://zecreveal.vercel.app/timeline#T2016-04-26
last verified: 2026-08-22
confidence: high

ECC — Fixing Vulnerabilities in the Zcash Protocol (26 Apr 2016) Electric Coin Company · 2016-04-26 · accessed 2026-08-22

2017

4 Dec 2017exploitQuesnelle publishes round-trip linkability result Quesnelle publishes the round-trip linkability result: 31.5% of shielded coins.T2017-12-04

T2017-12-04cite

claim: T2017-12-04
canonical: https://zecreveal.vercel.app/timeline#T2017-12-04
last verified: 2026-08-22
confidence: high

Quesnelle — On the linkability of Zcash transactions, arXiv:1712.01210 (4 Dec 2017) arXiv · 2017-12-04 · accessed 2026-08-22

2018

1 Mar 2018exploitAriel Gabizon discovers BCTV14 counterfeiting bug Ariel Gabizon discovers the BCTV14 counterfeiting bug. Kept to four people for 8 months.T2018-03-01

T2018-03-01cite

claim: T2018-03-01
canonical: https://zecreveal.vercel.app/timeline#T2018-03-01
last verified: 2026-08-22
confidence: high

ECC — Zcash Counterfeiting Vulnerability Successfully Remediated (5 Feb 2019) Electric Coin Company · 2018-03-01 · accessed 2026-08-22

15-17 Aug 2018a spanexploitKappos et al. USENIX Security 2018 anonymity analysis Kappos et al., USENIX Security 2018 — anonymity set reduced 69.1%; only 0.3% of transactions z→z.T2018-08-15

T2018-08-15cite

claim: T2018-08-15
canonical: https://zecreveal.vercel.app/timeline#T2018-08-15
last verified: 2026-08-22
confidence: high

Kappos, Yousaf, Maller, Meiklejohn — An Empirical Analysis of Anonymity in Zcash, USENIX Security 2018 USENIX · accessed 2026-08-22

18-20 Sep 2018a spanexploitCVE-2018-17144 disclosed in Bitcoin Core CVE-2018-17144 disclosed in Bitcoin Core (inflation + DoS).T2018-09-18

T2018-09-18cite

claim: T2018-09-18
canonical: https://zecreveal.vercel.app/timeline#T2018-09-18
last verified: 2026-08-22
confidence: high

Bitcoin Core CVE-2018-17144 disclosure Bitcoin Core · 2018-09-20 · accessed 2026-08-22

13 Nov 2018exploitHorizen and Komodo notified of counterfeiting bug Horizen and Komodo privately notified of the counterfeiting bug, 90-day deadline.T2018-11-13

T2018-11-13cite

claim: T2018-11-13
canonical: https://zecreveal.vercel.app/timeline#T2018-11-13
last verified: 2026-08-22
confidence: high

ECC — Zcash Counterfeiting Vulnerability Successfully Remediated (5 Feb 2019) Electric Coin Company · 2018-03-01 · accessed 2026-08-22

2019

5 Feb 2019exploitPublic disclosure of CVE-2019-7167 Public disclosure of CVE-2019-7167.T2019-02-05

T2019-02-05cite

claim: T2019-02-05
canonical: https://zecreveal.vercel.app/timeline#T2019-02-05
last verified: 2026-08-22
confidence: high

ECC — Zcash Counterfeiting Vulnerability Successfully Remediated (5 Feb 2019) Electric Coin Company · 2018-03-01 · accessed 2026-08-22

24 Sep 2019exploitzcashd fixes CVE-2019-16930 and CVE-2019-17048 zcashd 2.0.7-3 fixes CVE-2019-16930 (REJECT) and CVE-2019-17048 (PING) — Tramèr, Boneh, Paterson.T2019-09-24

T2019-09-24cite

claim: T2019-09-24
canonical: https://zecreveal.vercel.app/timeline#T2019-09-24
last verified: 2026-08-22
confidence: high

ECC — New Release: 2.0.7-3 (24 Sep 2019) Electric Coin Company · 2019-09-24 · accessed 2026-08-22

2020

28 Jul 2020exploitzcashd v3.1.0 ships with fChecked bug zcashd v3.1.0 ships — introducing the fChecked bug that silently disabled Sprout proof verification for the next 5.7 years.T2020-07-28

T2020-07-28cite

claim: T2020-07-28
canonical: https://zecreveal.vercel.app/timeline#T2020-07-28
last verified: 2026-08-22
confidence: high

ZODL — Zcashd Sprout Verification Vulnerability (31 Mar 2026) ZODL · 2026-05-29 · accessed 2026-08-22

2021

13 Jul 2021exploitViewing-key leak in Nighthawk and ECC iOS wallets via memo "Reply-To" Viewing-key leak in Nighthawk and ECC iOS wallets via memo "Reply-To"T2021-07-13

T2021-07-13cite

claim: T2021-07-13
canonical: https://zecreveal.vercel.app/timeline#T2021-07-13
last verified: 2026-08-22
confidence: high

ECC — Privacy-leak bug in Nighthawk and ECC wallets (13 Jul 2021) Electric Coin Company · 2021-07-13 · accessed 2026-08-22

2022

mid-Jun 2022exploitSandblasting begins (~2 weeks after NU5) Sandblasting begins (~2 weeks after NU5)T2022-06-15

T2022-06-15cite

claim: T2022-06-15
canonical: https://zecreveal.vercel.app/timeline#T2022-06-15
last verified: 2026-08-22
confidence: high

Sandblasting Retrospective (ZCG arboretum notes) GitHub · 2022-05-31 · accessed 2026-08-22

Oct 2022month onlyexploitChain size ~30 GB → >100 GB; attack costs ~$10/day Chain size ~30 GB → >100 GB; attack costs ~$10/dayT2022-10-01

T2022-10-01cite

claim: T2022-10-01
canonical: https://zecreveal.vercel.app/timeline#T2022-10-01
last verified: 2026-08-22
confidence: med

Protos — Zcash chain triples in size thanks to $10-a-day spam attack Protos · accessed 2026-08-22

2023

15 Sep 2023exploit / marketViaBTC hashrate dominance prompts Coinbase to restrict ZEC ViaBTC controls 53% of Zcash hashrate. Coinbase raises confirmations 40 → 110 and moves ZEC to limit-onlyT2023-09-15

T2023-09-15cite

claim: T2023-09-15
canonical: https://zecreveal.vercel.app/timeline#T2023-09-15
last verified: 2026-08-22
confidence: high

crypto.news — Coinbase limits Zcash trading (ViaBTC) crypto.news · accessed 2026-08-22

Nov 2023month onlyexploitSandblast transactions stop entering the mempool Sandblast transactions stop entering the mempoolT2023-11-01

T2023-11-01cite

claim: T2023-11-01
canonical: https://zecreveal.vercel.app/timeline#T2023-11-01
last verified: 2026-08-22
confidence: high

Sandblasting Retrospective (ZCG arboretum notes) GitHub · 2022-05-31 · accessed 2026-08-22

2024

2025

15-16 Nov 2025a spanexploit / regulatoryLedger drops v1 tx support; pre-2018 ZEC unspendable on Ledger Ledger drops v1 tx support; pre-2018 ZEC unspendable on LedgerT2025-11-15

T2025-11-15cite

claim: T2025-11-15
canonical: https://zecreveal.vercel.app/timeline#T2025-11-15
last verified: 2026-08-22
confidence: med

The Defiant — Ledger draws heat as pre-2018 Zcash holders face dropped support The Defiant · accessed 2026-08-22

2026

23-31 Mar 2026a spanexploitSprout proof-verification bypass disclosed and fixed Sprout proof-verification bypass disclosed and fixed (zcashd v6.12.0). ~25,424 ZEC (~$6.5 M) exposed; 5.7-year windowT2026-03-23

T2026-03-23cite

claim: T2026-03-23
canonical: https://zecreveal.vercel.app/timeline#T2026-03-23
last verified: 2026-08-22
confidence: high

ZODL — Zcashd Sprout Verification Vulnerability (31 Mar 2026) ZODL · 2026-05-29 · accessed 2026-08-22

27 Mar 2026exploitFirst Zebra security advisories published (GHSA-qp6f-w4r3-h8wg Critical; GHSA-3vmh-33xr-9cqh / CVE-2026-34377) First Zebra security advisories published (GHSA-qp6f-w4r3-h8wg Critical; GHSA-3vmh-33xr-9cqh / CVE-2026-34377)T2026-03-27

T2026-03-27cite

claim: T2026-03-27
canonical: https://zecreveal.vercel.app/timeline#T2026-03-27
last verified: 2026-08-22
confidence: high

ZcashFoundation/zebra advisories (pages 1–5) GitHub · 2026-08-22 · accessed 2026-08-22

4-17 Apr 2026a spanexploitFour-bug disclosure by Alex "Scalar" Sol — including the turnstile accounting bypass Four-bug disclosure by Alex "Scalar" Sol — including the turnstile accounting bypassT2026-04-04

T2026-04-04cite

claim: T2026-04-04
canonical: https://zecreveal.vercel.app/timeline#T2026-04-04
last verified: 2026-08-22
confidence: high

ZODL — Several Zcash Vulnerabilities Remediated (Apr 2026) ZODL · accessed 2026-08-22

2-8 May 2026a spanexploitAdvisory wave: Zebra Criticals (CVE-2026-44497 etc.); zcashd Critical use-after-free (CVE-2024-52911 parity) Advisory wave: Zebra Criticals (CVE-2026-44497 etc.); zcashd Critical use-after-free (CVE-2024-52911 parity)T2026-05-02

T2026-05-02cite

claim: T2026-05-02
canonical: https://zecreveal.vercel.app/timeline#T2026-05-02
last verified: 2026-08-22
confidence: high

ZcashFoundation/zebra advisories (pages 1–5) GitHub · 2026-08-22 · accessed 2026-08-22

29 May 2026, 23:53exploitTaylor Hornby finds the Orchard soundness bug Taylor Hornby finds the Orchard soundness bug — one day after the model's releaseT2026-05-29

T2026-05-29cite

claim: T2026-05-29
canonical: https://zecreveal.vercel.app/timeline#T2026-05-29
last verified: 2026-08-22
confidence: high

ZODL — Orchard Vulnerability Successfully Remediated (2 Jun 2026) ZODL · 2026-05-29 · accessed 2026-08-22

1-2 Jun 2026a spanexploit / protocolEmergency soft fork at block 3,363,426 disables Orchard Emergency soft fork at block 3,363,426 disables OrchardT2026-06-01

T2026-06-01cite

claim: T2026-06-01
canonical: https://zecreveal.vercel.app/timeline#T2026-06-01
last verified: 2026-08-22
confidence: high

ZF — Zebra 4.5.3 and 5.0.0: Emergency Soft Fork and NU6.2 Activation Zcash Foundation · 2026-06-02 · accessed 2026-08-22

4 Jun 2026exploit / marketOrchard bug disclosed publicly; ZEC falls 31% Public disclosure (Zooko Wilcox, Jason McGee, Taylor Hornby). ZEC −31% in 24 h to $409.64; peak $624 → $309 by 5 Jun (−50% in <48 h)T2026-06-04

T2026-06-04cite

claim: T2026-06-04
canonical: https://zecreveal.vercel.app/timeline#T2026-06-04
last verified: 2026-08-22
confidence: high

The Block — Zcash vulnerability, ZEC drops 31% (4 Jun 2026) The Block · 2026-06-04 · accessed 2026-08-22
BitMEX Blog — Why Zcash Crashed Nearly 50% in 48 Hours bitmex.com · accessed 2026-08-22

15 Jun 2026exploit / marketCVE-2026-54496 published; Anthropic's Mythos audit clears Zcash GHSA-ww9q-8r59-xv46 / CVE-2026-54496 published (CVSS 9.3). Same day: Zooko announces Anthropic's "Mythos" whole-protocol audit found no further serious bugs; ZEC +25–30%T2026-06-15

T2026-06-15cite

claim: T2026-06-15
canonical: https://zecreveal.vercel.app/timeline#T2026-06-15
last verified: 2026-08-22
confidence: high

GHSA-ww9q-8r59-xv46 / CVE-2026-54496 (Orchard soundness, CVSS 9.3) GitHub · accessed 2026-08-22
Crypto Briefing — Zcash jumps 25% as Anthropic Mythos audit finds no critical flaws (15 Jun 2026) Crypto Briefing · 2026-06-15 · accessed 2026-08-22

13-19 Jul 2026a spanexploitzcashd advisory backfill, including GHSA-ghc3-g8w4-whf9 (Critical) for the Orchard soundness failure zcashd advisory backfill, including GHSA-ghc3-g8w4-whf9 (Critical) for the Orchard soundness failureT2026-07-13

T2026-07-13cite

claim: T2026-07-13
canonical: https://zecreveal.vercel.app/timeline#T2026-07-13
last verified: 2026-08-22
confidence: high

zcash/zcash security disclosures GitHub · accessed 2026-08-22