Even for those deep in Zcash for years, this should fundamentally increase your confidence in the project. No more fear of "did they get the math wrong". Something better exists than a 100 audits & researchers Mathematical proof, checked by machines, of no undetectable bugs.

Tomorrow Ironwood brings: - Formally verified shielded pool - Quantum recoverability - Privacy-preserving pool deprecation & migration logic The third is actually where all the work for this upgrade has gone. We want you to be able to migrate while preventing anyone from learning your exact balance, or linking your deposits. At a glance: - We must freeze Orchard, while allowing withdraws and splitting up your own txs - Turns out no shielded pool considered allowing private fund-splitting in withdraw only mode! - This is the circuit update - Orchard ZKP's are "per action" not "per tx". So we must prove - We must make it possible to pre-sign all your txs. - It was news to me this was not possible prior to this upgrade. RIP multisigs. Now it is :) - We must make your hardware wallets capable of pre-signing ~100 txs. Would have taken hours before. Now minutes. - Make your wallets able to produce dozens of ZKP's in the background. This involves fighting the limits of background wallet syncing and background compute The wallet stack has had large rewrites to facilitate this, shoutout to everyone involved! And that doesn't even include all the parallel work in scale and making the p2p stack more connected, and secure!

Zcash testnet is updating for Ironwood tomorrow! We have two independently developed consensus implementations of it. One by @valargroup, and another by @ZcashFoundation. @valargroup's is in audit as well. We have a desktop wallet fork with migration code you can try! If you have a Keystone dev device, you can even update your firmware to try it out on the testnet! Sign 11+ txs with one QR code. This is a record for Zcash testnet readiness to my knowledge!

Most private voting in all of crypto! Every vote is a private snapshot of your zcash balance. We use pir to get this snapshot. 1 zec = 1 vote Each vote is mpc encrypted, and split up so that your balance can’t be leaked if mpc got broken. Final result is publicly auditable