Private money is becoming essential.Zcash is built for that world.
A conviction-led investment thesis for ZEC—and the royalty-backed strategy designed to accumulate the leading scarce private-money asset across cycles.
Executive Summary
The investable proposition: scarce private money with two potential compounding engines.
Our view is simple: financial activity is moving onto observable digital rails while the economic and personal cost of public wealth graphs is rising. Zcash is the strongest scarce-asset expression of the privacy category, and Zcash Royalty is designed to accumulate it through both operating cash flow and treasury appreciation.
1 · The category
Public blockchains turn balances, counterparties, and transaction timing into permanent intelligence. For families, founders, companies, and investors, confidentiality is not a niche ideology—it is treasury hygiene, negotiating leverage, and increasingly a physical-security control.[53][52]
2 · Why Zcash
Zcash combines a 21M maximum supply, proof-of-work issuance, native encrypted settlement, and selective disclosure. Bitcoin owns transparent digital scarcity; Monero leads usage-led privacy. We believe Zcash can occupy the valuable space between them: auditable private money with a hard monetary cap.[15][42][41]
3 · Why now
Ironwood shows the ecosystem can coordinate under pressure and gives the network a practical path to bound usable supply after the Orchard flaw. Regulated futures, an advancing trust conversion, funded wallet distribution, and a roadmap spanning finality, better synchronization, and private assets create multiple independent paths to upside.[10][11][23][35][17][19][18]
4 · Why Zcash Royalty
The model is designed around two engines: mining-linked royalty cash flow that can fund disciplined ZEC accumulation, and long-duration treasury exposure that can appreciate if the category thesis plays out. It seeks a more durable path than passive token ownership or repeated equity issuance alone.
The decision
Own the current private-money network; receive the roadmap as upside.
The base case rests on Zcash's live monetary and privacy properties—not assumed Crosslink yield, private stablecoins, private DeFi, or unsupported Tachyon throughput. Those are potential catalysts. The position should still be sized for severe volatility and monitored against explicit protocol, access, and adoption gates.
Our strategic thesis
Zcash is the scarce digital asset built for a world that eventually rediscovers financial privacy.
This is our house view, not a neutral ranking. Bitcoin established digitally scarce bearer value; our thesis is that a transparent ledger cannot satisfy every savings, treasury, payroll, commerce, and personal-security use case. Zcash adds native encrypted settlement and selective disclosure to a capped proof-of-work monetary asset.[15][42]
“The one thing that's missing … is a reliable e-cash.”
“If a solution was found, a much better, easier, more convenient implementation of Bitcoin would be possible.”
Privacy is infrastructure
Public payment graphs expose balances, counterparties, payroll, supplier relationships, pricing, and treasury movements. Confidentiality is normal in traditional finance; fully public settlement is the historical exception.
Selective disclosure is the bridge
Zcash can keep transaction data private from the public while allowing a holder to share viewing keys or payment disclosures with auditors, tax advisers, or counterparties. That is a stronger institutional design than either total publicity or unverifiable secrecy.[42]
The category is economically large
BCG estimates $333T of global financial wealth and $15.6T of cross-border wealth in 2025. We do not convert a fixed percentage of either pool into a ZEC target. The figures show why even a narrow demand for private, portable savings could be material to a $7.9B asset.[40][1]
Store-of-value characteristics — our assessment
Letter grades express our opinion at the snapshot, not objective measurements. They force the trade-offs into view: Zcash scores highly on privacy, portability, and disclosure control, but remains weaker on liquidity, operating history, and institutional rails. Protocol facts use current Zcash and Monero documentation; market-access grades are our judgment.[15][42][41]
| Property | Zcash | Bitcoin | Monero | Gold | Fiat |
|---|---|---|---|---|---|
| Scarcity policy | A · 21M cap | A+ · 21M cap | B+ · tail emission | A− · slow new supply | D · discretionary |
| Transaction privacy | A · strong when shielded | D · public ledger | A+ · default private | A · physical | B · cash / intermediated |
| Fungibility | A− · shielded; mixed system | C · provenance exposed | A · privacy by default | A− · purity / provenance | A− · legal tender |
| Selective disclosure | A+ · viewing tools | C · broadly public | B · view-key model | C · documentary | A · statements / controls |
| Portability | A+ | A+ | A+ | D | A |
| Liquidity | B | A+ | B | A+ | A+ |
| Institutional rails | C+ · emerging | A+ · mature | D · constrained | A+ · mature | A+ · native |
| Censorship resistance | A− · protocol-level | B+ · traceable | A · protocol-level | B · custody dependent | D · issuer controlled |
| Operating history | C+ · since 2016 | B+ · since 2009 | C+ · since 2014 | A+ · millennia | A · centuries |
The “real Bitcoin” view, updated
We do not argue that Zcash replaces Bitcoin's liquidity, brand, or institutional network. We argue that Bitcoin's transparent reserve-asset equilibrium leaves a separate design space for private electronic cash. Zcash is our preferred scarce-asset expression of that category because it combines a fixed cap, proof of work, strong shielded privacy, and controlled disclosure. Monero is the stronger usage-led comparator; Bitcoin is the stronger monetary network. Zcash must ultimately earn the space between them.
The Zcash Royalty vehicle
One thesis. Two potential compounding engines. Three ways to win.
Zcash Royalty is designed to pair operating cash flow with disciplined exposure to ZEC. The objective is not maximum token accumulation at any price; it is durable participation in the private-money thesis across market cycles.
Engine 1 · Royalty cash flow
Contractual mining-linked economics can fund accumulation.
Carefully underwritten royalty interests can create recurring cash flow without requiring the company to operate every underlying mine. Eligible capital can then be allocated to ZEC within explicit liquidity, custody, concentration, and approval limits.
Engine 2 · ZEC treasury
Treasury appreciation can expand future operating capacity.
If private digital money becomes a major category and Zcash captures a meaningful share, disciplined treasury exposure can appreciate. Reinvestment can then support additional royalty capacity and future ZEC accumulation.
Three ways the thesis can win
01
The asset appreciates
ZEC gains value as private savings, payments, and institutional access expand.
02
Ownership becomes productive
Crosslink could add staking rewards and reduce liquid supply if it reaches activation under credible economics.
03
Cash flow buys through cycles
Royalty economics can add ZEC without making the strategy depend entirely on new financing or market timing.
Why the next 12–36 months can matter
The roadmap creates four distinct upside paths—and four clean proof gates.
Productionization · Q2 2026–Q2 2027
Crosslink
Finality, delegation, and compounding staking rewards could broaden ownership and reduce liquid supply.
Proof gate: Ironwood-compatible design, testnet, audits, finalized economics, wallet/custody support, and activation approval.[19][43]
Active R&D · no committed activation date
Tachyon / Ragu
Faster, private synchronization and transaction aggregation could remove the largest wallet-UX constraint.
Proof gate: Audited Ragu, reproducible benchmarks, a shielded testnet, measured capacity, and an accepted deployment ZIP.[18][50]
Draft specifications · no committed activation date
Private assets & DeFi
Private stablecoins, securities, and applications could turn Zcash into a broader confidential capital network.
Proof gate: Activated specifications, audited implementation, wallets, issuers, bridges, liquidity, and credible applications.[46][47][48]
Live rails plus pending expansion
Institutional distribution
Regulated futures, funded wallets, public treasury holders, and a potential exchange-traded product can broaden access.
Proof gate: Effective listing, deeper spot liquidity, qualified custody, and reliable shielded deposit and withdrawal workflows.[35][17][21][23]
Why the structure matters
Passive ZEC exposure relies on one engine: price. Zcash Royalty seeks exposure to price appreciation while building a separate source of capital that can keep accumulating through volatility. Neither engine is guaranteed, but the combination is the strategic edge.
Decision-grade for every audience
Individual investors
A plain-language case for the category, asset, catalysts, valuation, and failure conditions.
HNW & accredited investors
A differentiated exposure model paired with treasury, custody, concentration, and downside discipline.
Institutions
An auditable evidence chain, scenario framework, operating model, and milestone-based underwriting process.
Privacy as personal security
A transparent balance can become a physical-security signal.
The investment case for privacy is no longer only philosophical or commercial. Public wallet activity can become one input in a criminal target package when it is combined with identity leaks, exchange records, social media, tax data, or a known home address.
Verified H1 2026 incidents
52
Up 33.3% from 39 in H1 2025
Recorded exposure
$124.1M
11.8× H1 2025; exposure is not the same as confirmed criminal proceeds
Home invasions
20
Up from one publicly reported case in H1 2025
How on-chain transparency can become off-chain risk
01
Identity exposure
A breach, KYC record, public profile, conference appearance, or insider links a person to crypto.
02
Address linkage
An exchange withdrawal, posted address, ENS name, counterparty, or repeated behavior links identity to a wallet.
03
Wealth inference
A public ledger reveals balances, transaction history, counterparties, and when assets move.
04
Physical targeting
Criminals use the assembled profile to target a holder, executive, employee, or family member.
CertiK says attackers increasingly combine leaked databases, tax or compliance records, exchange customer data, social profiles, public wallet activity, real-estate information, and phone intelligence. Its report calls data minimization a physical-safety control. Zcash Foundation materials separately explain the protocol distinction: transparent-address balances and transaction details are publicly trackable, while shielded-address balances and fully shielded transaction details are not publicly visible.[53][52]
What shielded Zcash can change
It can deny attackers a continuously updating public wealth graph.
A fully shielded Zcash payment does not publish the sender, recipient, or amount to the ledger. That reduces one source of target discovery, balance estimation, counterparty mapping, and post-transaction surveillance. For HNW families, founders, treasury officers, and public investors, that is a personal-security feature—not merely a preference for secrecy.[42][52]
What privacy cannot solve alone
Shielding reduces targetability; it does not make a person coercion-proof.
Public identities, KYC breaches, insiders, lifestyle signals, custody records, and family routines can still expose a holder. Serious wealth protection also requires distributed signing authority, withdrawal delays or limits, separated recovery material, custody policy, travel controls, and a rehearsed duress plan. No privacy coin substitutes for institutional operational security.[53][57][58]
Selected reporting and primary research
The incident count comes from CertiK's disclosed methodology. The additional links show the range of reported home invasions, kidnappings, coercion, and executive-family targeting.
ZEC price
$717.19
Global volume-weighted spot price
Market capitalization
$12.11B
Approximately 0.77% of Bitcoin
1-year return
+1,603%
Market data through the current snapshot
YTD return
+40.3%
Volatility remains the central fact
Shielded supply
26.00%
4.391M ZEC across four shielded pools
Ironwood balance
3.125M
Live network reading after NU6.3 activation
Performance
ZEC has already rerated—and still trades far below its historical peak.
Period returns use CoinGecko observations through the snapshot. The 90-day, YTD, and drawdown figures are calculated from daily closes; short-horizon values use CoinGecko's market endpoint.[1][2]
| Measurement window | ZEC return | Interpretation |
|---|---|---|
| 24 hours | +25.7% | Short-term move |
| 7 days | +45.6% | Calculated from daily CoinGecko observations |
| 30 days | +39.4% | Calculated from daily CoinGecko observations |
| 90 days | +13.9% | Calculated from daily CoinGecko observations |
| Year to date | +40.3% | $511.93 on January 1 |
| 1 year | +1,603.1% | The privacy trade has rerated sharply |
| From 1-year high | New 1-year high | Current price is above the prior 1-year high |
| From all-time high | −85.2% | $3,191.93 on October 29, 2016 |
Event study
The Orchard disclosure repriced technical risk in days.
The vulnerability was discovered May 29 and disclosed publicly in early June. ZEC's daily close fell from $620.93 on June 4 to $362.16 on June 7—a 41.7% decline. At the the current snapshot, price had recovered approximately 98.0% from that trough and was approximately 15.5% above the June 4 close.[2][7][8]
Relative valuation
ZEC trades at a 19.6% market-cap premium to XMR, but at only 0.61% of Bitcoin. The first comparison limits the "undiscovered privacy asset" argument; the second preserves long-duration optionality if private digital money becomes a major category.[1][3][4]
Ironwood / NU6.3
Ironwood bounds usable supply; confidence still compounds over time.
The upgrade activated at block 3,428,143 on July 28, 2026. It is a new shielded pool using the Orchard protocol, a separate note-commitment tree and nullifier set, and version 6 transactions.[10][11]
What triggered it
A critical soundness bug in the Orchard circuit could have allowed a dishonest prover to create counterfeit notes inside Orchard without detection. NU6.2 patched the circuit and re-enabled Orchard on June 3. There is no evidence of exploitation or loss of user funds, but the privacy of the pool means past exploitation cannot simply be ruled out by inspecting balances.[8][7]
How the turnstile works
Ordinary Orchard payments are restricted after activation, and wallets move funds into Ironwood through a public cross-pool value balance. The protocol will not allow more ZEC to leave Orchard than legitimately entered it. Hypothetical counterfeit notes therefore cannot become broadly usable without eventually colliding with that bound.[11][9]
The key nuance: pool-crossing amounts are public even though addresses and notes remain shielded. Wallets must batch and time migrations carefully to reduce linkability.[12]
What Ironwood adds
The new pool starts from a clean supply state, incorporates the corrected Orchard circuit, and is being subjected to formal verification and independent audit work. Ironwood notes also add quantum recoverability: a future recovery protocol could preserve access if discrete-log assumptions fail.[10][13]
Quantum recoverability is not the same as post-quantum security. Ironwood still uses current cryptography; the upgrade creates a safer migration path for a later transition.[13]
What it does not settle
Ironwood does not retroactively prove on day one that Orchard was never exploited. That assurance strengthens as legitimate balances migrate and the turnstile remains intact. It also does not remove implementation risk, guarantee wallet or custodian readiness, resolve privacy-asset regulation, or deliver future roadmap items.
Post-Ironwood, Zebra is the only full-validator implementation able to follow consensus. That simplifies the zcashd retirement but raises client-diversity questions for institutional operational reviews.[11][14]
Early migration signal
3.125M ZEC is currently in Ironwood.
Ironwood now represents 71.16% of shielded ZEC, while Orchard holds 714,497 ZEC as the sealed pool continues to migrate. This confirms sustained migration at meaningful size, but does not establish completion quality or steady-state wallet coverage.[6]
71.16%
share of shielded ZEC
Monetary structure & adoption
A fixed cap anchors the monetary thesis; renewed shielded growth is the next adoption catalyst.
On-chain supply is 16.890M ZEC, or 80.43% of the 21M maximum. CoinGecko's estimated circulating supply is approximately 16.89M because circulation methodologies exclude some issued balances, including the protocol lockbox.[5][1]
Outside-in adoption check
Shielded balances are approximately 769,000 ZEC below the Q1 baseline.
Blockworks Advisory reported a rounded 5.16M shielded ZEC, or 31.0% of supply, for Q1. The current CipherScan reading is 4.391M, or 26.00%. That is a roughly 14.9% balance decline and a 5.0 percentage-point share decline from the Q1 baseline. The Q1 report was funded by GenZcash, but its older on-chain baseline is still useful when compared transparently with current chain data.[27][6]
−14.9%
balance
−5.5pp
share
Shielded pool composition
Share uses total on-chain supply as denominator.
4.391M ZEC
26.00% shielded
| Pool | ZEC | Of shielded | Of chain |
|---|---|---|---|
| Ironwood | 3.125M | 71.16% | 18.50% |
| Orchard | 714,497 | 16.27% | 4.23% |
| Sapling | 529,031 | 12.05% | 3.13% |
| Sprout | 22,621 | 0.52% | 0.13% |
Do not call this "removed from circulation." Shielded ZEC is spendable and can return to transparent venues. Pool balances support an adoption and privacy-savings argument, but they are not vesting, staking, or contractual lockups and should not be subtracted mechanically from investable float.[6]
Issuance
Bitcoin-like cap, still-inflating float.
The current block subsidy is 1.5625 ZEC. At the 75-second target, gross issuance is about 1,800 ZEC per day. Of each block, 80% goes to miners, 8% to grants, and 12% to the lockbox. Excluding lockbox accumulation, current liquid issuance is roughly 1,584 ZEC per day—about 3.4% annualized against circulating supply.[15][5][1]
The next scheduled halving is November 2028, although a proposed smoothed issuance curve could change the path.[15]
Network use
8,113 transactions
Recorded over the preceding 24 hours by CipherScan. Transaction count is directionally useful but not a clean user metric: one payment may create multiple protocol actions, and shielded value cannot be read like transparent-chain transfer volume.[5]
The privacy flywheel
More shielded use can strengthen the product—but the flywheel must be observed, not presumed.
01
Better defaults
Wallets make shielding ordinary rather than an expert workflow.
02
Deeper privacy set
More diverse shielded activity can make individual behavior harder to isolate.
03
Stronger monetary demand
Useful private savings and payments create a reason to acquire and retain ZEC.
The counterpoint is equally important: shielded balances are liquid, privacy depends on behavior as well as cryptography, and the current balance is below the Q1 baseline. Our supply-squeeze thesis is therefore conditional: it becomes investable only if shielded balances, repeat usage, and wallet retention resume a durable upward trend.[6][27][30]
Core investment case
Four measurable claims support the current asset thesis.
Private money is a real category
Public ledgers expose balances and transaction graphs. Zcash offers selective transparency: a user can keep payments shielded while retaining viewing keys and payment disclosures for audits, tax work, or counterparties. The category has legitimate use cases in payroll, treasury, commerce, donations, and personal security—not only secrecy.
Zcash has a differentiated product
Orchard/Ironwood use Halo 2 without a per-circuit trusted setup, and unified addresses allow wallets to manage transparent and shielded receivers. Zodl packages shielding, swaps, CrossPay, and Keystone cold storage into a consumer interface. The product distinction is strongest when privacy is the default wallet behavior, not an expert-only transaction mode. Brave's browser-native wallet added shielded Zcash on desktop in April 2025, providing a genuine third-party distribution proof point, although its announcement did not establish adoption or current mobile availability.[16][36]
Capital and distribution are improving
ZODL raised more than $25M in March 2026 from investors including Paradigm, a16z crypto, Coinbase Ventures, Winklevoss Capital, and others. It reported more than $600M of in-wallet swap volume since October 2025. This funds product and protocol work outside the block subsidy and creates a clearer commercial distribution engine.[17]
The roadmap is optionality, not base case
Tachyon/Ragu targets faster synchronization and scalable shielded payments, but has no committed mainnet date. Crosslink is in a productionization phase through Q2 2027 and would add finality and staking incentives without replacing proof of work. Zcash Shielded Assets are not live; the original ZIP 220 is withdrawn and related specifications remain drafts.[18][19][20]
No staking yield, private-asset TVL, or Tachyon adoption belongs in a current base-case valuation.
How the strategy operates
Royalty underwriting creates the cash flow; treasury policy protects the compounding engine.
The strategic proposition only becomes institutionally credible when it is translated into repeatable sourcing, underwriting, cash-management, custody, and approval processes.
- 01
Source royalty interests
Identify mining-linked opportunities with durable economics and alignment.
- 02
Underwrite operations
Assess contracts, power, production, jurisdiction, counterparties, and downside.
- 03
Receive royalty cash flow
Participate in defined revenue without operating every underlying mine directly.
- 04
Allocate under policy
Convert eligible capital into ZEC within liquidity, custody, concentration, and approval limits.
Why the model can compound
Two engines can work together.
Royalty cash flow can increase the quantity of ZEC accumulated, while ZEC appreciation can increase treasury value. Reinvestment can then expand future royalty capacity. If both engines work, the result is more powerful than holding idle cash or relying on token appreciation alone.
What can break the flywheel
The model also compounds correlated risk.
Mining performance, royalty enforceability, counterparty quality, ZEC price, liquidity, and custody can deteriorate together. The strategy only deserves institutional capital if it preserves operating liquidity, limits concentration, documents decision rights, and does not depend on forced selling during a drawdown.
Strategic objective
The objective is not to maximize ZEC purchased at any price. It is to build a durable cash-flow machine that can accumulate ZEC across cycles without compromising the company's ability to operate. Treasury discipline is the mechanism that turns conviction into survivable exposure.
Technical & ecosystem optionality
Four catalysts could expand Zcash from private money into a broader financial network.
Synchronization, finality, private assets, and distribution create real upside paths. We preserve that optionality without treating unfinished engineering, unactivated economics, or unlaunched products as current results.
Tachyon / Ragu · active R&D
Privacy becomes mainstream only when synchronization disappears into the product.
Tachyon proposes proof-carrying data, transaction aggregation, bounded validator state, and oblivious synchronization so wallets can stay current without scanning the entire chain or revealing what they are looking for. Ragu, its foundational proving framework, is under heavy development and explicitly unaudited. The published sequence is optimization and audits, protocol review, testnet, a ZIP and community approval, then possible mainnet activation. No stage carries a public date or numeric throughput commitment.[49][18][50]
The upside catalyst is therefore measured evidence: audited Ragu benchmarks, a working shielded testnet, wallet synchronization results, transaction-aggregation capacity, and an accepted deployment ZIP—not an unsupported TPS headline. Governance support is unusually strong, but support does not collapse the engineering timeline.[51]
Crosslink · productionization
Finality and staking could broaden the ownership proposition.
Crosslink keeps proof of work and adds a proof-of-stake finality layer. Prototype staking semantics were completed January 28, 2026; the productionization phase runs from Q2 2026 through Q2 2027 and is intended to deliver a testnet, specification, audits, ecosystem integration, and—only if consensus forms—a future network upgrade.[19][44]
The current design proposes delegation, compounding rewards, five-day epochs, a five-to-ten day exit window, no in-protocol slashing in v1, and a 40% miner / 40% staker / 20% development-fund reward split. It still describes staking from Orchard, so post-Ironwood pool compatibility is now an explicit diligence gate. Yield is variable, not promised.[43][45][12]
Private assets · speculative successor path
Private stablecoins and tokenized assets could turn Zcash into settlement infrastructure.
ZIP 220 is withdrawn, but the idea did not disappear: successor ZIPs 226 and 227 specify issuance, transfer, and burn of custom assets, with transparent issuance and shielded transfers. They remain Draft. Their text still assumes NU7, while the current ZIP registry no longer lists either proposal among the NU7 candidates. There is therefore no committed activation window.[20][46][47][48]
If activated and adopted, private stablecoins, wrapped assets, securities, and governance tokens could increase ZEC fee demand, liquidity, and the value of the shielded network. Private DeFi is a second-order catalyst, not an automatic ZSA feature: swaps remain only a reserved ZIP, and lending, market making, bridges, custody, issuers, and compliance would still have to be built. No TVL, fee revenue, collateral demand, or “TVL price floor” is in the base case.[46][47][48][52]
Distribution · live and funded
Zodl and Brave show that privacy can be packaged for ordinary users.
Zodl combines shielding, swaps, payments, and hardware-wallet workflows; Brave added shielded desktop transactions to a browser-native wallet. ZODL's financing provides a commercial engine outside protocol issuance. The remaining test is repeat usage and retention—not announcements, download counts, or one-time migration flows.[16][17][36]
Upside-catalyst timeline — evidence before valuation
These are the observable gates that can move optionality into an investable forecast. “Mainnet” remains uncommitted for all three.
| Catalyst | Verified position now | Published window | Evidence that would unlock upside | Base-case treatment |
|---|---|---|---|---|
| Crosslink | Prototype milestones complete; productionization in progress. | Q2 2026–Q2 2027 for productionization; no activation date. | Public testnet, updated Ironwood-compatible design, audited economics and code, finalized ZIP, wallet/custody support, governance approval. | Zero staking yield |
| Tachyon / Ragu | Active code and protocol design; Ragu is unaudited. | No dated testnet or mainnet commitment. | Reproducible performance benchmarks, audits, testnet, wallet sync results, capacity measurements, accepted ZIP. | No TPS or adoption uplift |
| ZSAs / private DeFi | ZIPs 226/227 Draft; not live and absent from the current NU7 candidate list. | No committed activation window. | Deployment ZIP, production implementation, audits, wallet support, credible issuer or bridge, compliant stablecoin, liquidity and applications. | Zero TVL and fee uplift |
Crosslink staking sensitivity
A 5–10% yield is plausible in some configurations—but it is not a protocol promise.
The current proposal assigns 40% of block rewards to stakers. At today's 1.5625 ZEC subsidy and 75-second block target, that equals approximately 262,800 ZEC per year before finalizer commission. The sensitivity below holds subsidy, participation, uptime, and a 10% finalizer commission constant.[43][45][15]
| Total ZEC staked | Gross annualized share | After 10% commission | After one simple subsidy halving |
|---|---|---|---|
| 1.0M | 26.3% | 23.7% | 11.8% |
| 2.0M | 13.1% | 11.8% | 5.9% |
| 3.0M | 8.8% | 7.9% | 3.9% |
Illustrative static math only. It excludes missed rewards, protocol changes, pool eligibility, custody costs, taxes, changing commission, changing stake participation, and issuance smoothing. The next scheduled halving is November 2028; actual activation could occur under different economics. Crosslink's own simulator carries the same non-forecast limitation.
Timing advantage, properly framed
Liquid markets can price credible technical delivery before the resulting usage is visible. That creates upside if milestones arrive sooner or adoption is stronger than expected. It also creates valuation risk when a compelling roadmap is capitalized before delivery. Our approach is to own the optionality while requiring the current network—not a future one—to justify position size.
Outside-in evidence review
Independent evidence supports the privacy category; adoption remains the proof point.
The category case survives outside scrutiny. The next phase of value creation depends on repeat usage, shielded balances, liquidity, and access—not narrative momentum alone.
Adoption evidence
The spring narrative has not held at the balance level.
Blockworks' Q1 report described 5.16M shielded ZEC and 31.0% of supply. Current data is 4.391M and 26.00%. This does not prove fewer users—migration, withdrawals, and payment flows can all move balances—but it does invalidate a simple claim that shielded adoption has continued rising since Q1.[27][6]
Measurement risk
“Shielded share” is not one standardized metric.
A GenZcash-commissioned CoinDesk report cited a 59.3% shielded transaction share for February, while the separately commissioned Blockworks Q1 report gave 21.2% for the quarter. Different windows, denominators, and transaction classifications can all be legitimate; without a common definition, the figures cannot be joined into a trend. Balance share and transaction share must also remain separate.[28][27]
Privacy reality
Cryptography is necessary; user behavior still matters.
USENIX researchers showed that recognizable usage patterns could materially shrink Zcash's practical anonymity set. The work studied the 2018 Sprout-era system and is not a security assessment of Orchard or Ironwood. Its durable lesson is narrower: wallet defaults, migration behavior, timing, and user concentration affect realized privacy even when the cryptography is sound.[30][12]
Perception and competition
Official mindshare still favors Monero as the usage-led privacy asset.
A June 2025 Council of Europe report characterized Monero as the only privacy coin with significant adoption and described Zcash privacy as non-default. That description predates Zodl's current defaults and Ironwood, so it is not a current product audit. It is still evidence of the perception gap Zcash must overcome with observable usage, not positioning. Independent secondary analysis reaches a similar underwriting test: track shielded use, liquidity, exchange access, and privacy alternatives rather than price alone.[31][29]
Evidence hierarchy
For underwriting, this memo ranks reproducible chain observations and regulatory filings above primary issuer claims; independent academic and policy research provides context; commissioned research and blogs are treated as leads or historical baselines. Sponsorship is disclosed because editorial control does not eliminate selection and framing risk.
Institutional access
Institutional rails are becoming investable—without making the asset frictionless.
Trust shares, a proposed exchange-traded product, public-company treasury ownership, and regulated derivatives broaden the opportunity set. Fees, tracking differences, custody constraints, and shielded-workflow support remain material.
Grayscale Zcash Trust
391,104 ZEC
Held as of March 31, 2026. ZCSH is quoted on OTCQX and charges a 2.5% annual sponsor fee. Shares can deviate from underlying NAV, and ZEC per share declines as fees are paid.[21]
Cypherpunk Technologies
314,186 ZEC
Held as of May 13, 2026, with a reported average cost of $337.86. The position represented 1.88% of then-circulating supply and creates a public-equity treasury proxy with company, financing, and custody risks of its own.[22]
Proposed exchange-traded product
S-3/A filed
Grayscale filed a preliminary registration statement to convert the trust and seek NYSE Arca listing. As of this snapshot, EDGAR showed no effectiveness filing; the S-3/A was not an approved listing or operating spot ETF.[23][26]
Regulated derivatives
1 ZEC / contract
Coinbase lists a five-year, cash-settled ZEC perpetual-style futures contract on Coinbase Derivatives Exchange. The CFTC record shows the product as certified on January 29, 2026. This adds regulated hedging and leveraged price exposure; it does not create shielded custody or translate one-for-one into spot demand.[34][35]
U.S. signal improved
The SEC concluded its inquiry into the Zcash Foundation in January 2026 without recommending enforcement action or operational changes. This removes one entity-specific overhang; it is not a blanket determination covering ZEC, every intermediary, or every use of shielded transactions.[24]
Global access remains fragile
MiCA's Article 76 restricts admission to trading for assets with an inbuilt anonymization function unless holders and transaction history can be identified by the venue or competent authorities. How this is applied to Zcash's optional privacy and selective-disclosure tooling remains a venue-by-venue and jurisdiction-by-jurisdiction risk. Separately, the EU AML Regulation applies from July 10, 2027 and restricts crypto service providers from offering or custodying anonymous accounts or accounts that increase transaction obfuscation. India's January 2026 guidance already produced reported ZEC delistings and potential forced conversions, demonstrating that distribution risk is realized rather than theoretical.[25][33][32]
Illicit-use evidence does not settle the policy question
A 2020 RAND study did not identify credible evidence of large-scale Zcash use for money laundering, terrorism financing, or illicit trade and found Zcash had a minor presence on the reviewed dark-web venues relative to Bitcoin and Monero. The report was sponsored by Electric Coin Company, is six years old, and emphasized that absence of evidence is not evidence of absence. It supports a limited conclusion: regulatory pressure can be driven by traceability and control requirements even when demonstrated Zcash-specific misuse is limited.[37][33][32]
Valuation framework
The asymmetry is meaningful—but only if adoption and access earn it.
At the snapshot, a $25B institutional-adoption case implies approximately $1,190 per ZEC, while category leadership at $50B implies approximately $2,381. A severe-impairment case implies approximately $143. We use market-cap scenarios—not arbitrary percentages of global wealth—and divide by the full 21M maximum supply to keep the denominator conservative.[15][1]
| Scenario | Market cap | ZEC at 21M supply | Vs. snapshot | What would need to be true |
|---|---|---|---|---|
| Severe impairment | $3B | $143 | −80.1% | Access contracts, adoption reverses, or protocol confidence deteriorates. |
| Current thesis holds | $10B | $476 | −33.7% | Zcash remains a leading privacy asset without a step-change in use. |
| Institutional adoption | $25B | $1,190 | +65.8% | Regulated access broadens and private savings/payment use compounds. |
| Category leadership | $50B | $2,381 | +231.5% | Zcash becomes a global privacy reserve and payment network at scale. |
These are valuation sensitivities, not forecasts, targets, or probabilities. They exclude taxes, fees, custody costs, market impact, and the path dependency of future issuance.
Risk register
The largest risks are observable—and should be monitored explicitly.
A credible ZEC thesis should be falsifiable. Each risk below has a concrete evidence stream rather than a generic crypto disclaimer.
| Risk | Level | Why it matters now | Evidence to monitor |
|---|---|---|---|
| Protocol and supply integrity | High | The May 2026 Orchard soundness flaw could have enabled undetectable counterfeiting before it was patched.[7][8] | Ironwood migration, Orchard turnstile balance, audit publications, and new vulnerability disclosures. |
| Regulatory and distribution | High | Privacy features can trigger exchange restrictions even where ownership is legal; India has already produced ZEC delistings and the EU framework adds further intermediary constraints.[25][32][33] | Listings by jurisdiction, shielded withdrawal support, custody policy, and final treatment by regulated venues. |
| Liquidity and market structure | High | Aggregated volume is not executable depth, and ZEC can gap sharply around protocol or regulatory events.[1][2] | Order-book depth, OTC capacity, venue concentration, borrow availability, and slippage at target size. |
| Product adoption | High | Current shielded balances are about 14.9% below the rounded Q1 baseline, and balances do not by themselves prove payment frequency, retention, or institutional use.[5][6][27] | Shielded transaction share, active wallets, repeat usage, merchant flows, and net movement into current pools. |
| Roadmap execution | Medium–high | Tachyon and Crosslink remain development programs; ZSAs are not an activated product.[18][19][20] | Testnet delivery, independent audits, accepted ZIPs, wallet support, and an agreed activation path. |
| Governance and implementation | Medium | Zebra is now the sole full-validator implementation for post-Ironwood consensus, while protocol work spans several organizations.[11][14] | Client diversity, release cadence, funding durability, contributor concentration, and incident response. |
Thesis confirmation
- Ironwood absorbs the large majority of Orchard value without a turnstile anomaly.
- Shielded balances stabilize or grow after migration rather than merely rotating pools.
- Regulated custody and exchange access expand, including reliable shielded workflows.
- Tachyon or Crosslink reaches audited testnet milestones and gains broad ecosystem support.
- Transaction and wallet usage grow without relying on price appreciation alone.
Thesis invalidation
- Any credible evidence of supply inflation, a turnstile breach, or an exploited critical bug.
- A prolonged migration failure that strands liquidity or fractures wallet and custody support.
- Persistent decline in real shielded use after the one-time Ironwood transfer wave.
- Material loss of regulated trading, custody, or fiat access across major jurisdictions.
- Roadmap claims repeatedly slip while the asset retains a premium valuation to privacy peers.
Our conclusion
Private money is becoming infrastructure. We believe Zcash can become its scarce reserve asset.
The conviction is not that every transaction becomes private or that Zcash displaces Bitcoin, Monero, gold, or fiat. It is that a world moving more wealth onto programmable, observable rails will create durable demand for confidentiality, selective disclosure, portability, and monetary scarcity in the same asset.
Zcash has the cryptographic architecture, monetary policy, operating history, product ecosystem, and institutional footholds to compete for that role. Ironwood strengthens the response to a serious failure, but it also makes clear that technical excellence must be continuously earned.[15][10][7][21][35]
What Zcash Royalty is building
A royalty-backed accumulation vehicle built around two potential compounding engines: durable mining-linked cash flow and disciplined ownership of the leading scarce private-money asset.
Success requires both sides of the model to work. Royalty economics cannot rescue a broken ZEC thesis, and ZEC appreciation cannot permanently rescue weak operations.
Our stance is strong and conditional: own the current private-money network, demand evidence of adoption and access, and receive Crosslink, Tachyon, private assets, and private DeFi as upside—not as assumptions.
Next diligence cycle
The next 90 days should answer three questions.
01
Does migration finish cleanly?
Track Ironwood as a share of Orchard plus Ironwood, public cross-pool flows, wallet support, and any turnstile irregularity.
02
Does access broaden or narrow?
Monitor the Grayscale filing, custody support, exchange listings by jurisdiction, and the difference between transparent and shielded operations.
03
Does use grow after the catalyst?
Separate one-time migration transactions from repeat payments, wallet retention, shielded savings, and merchant or cross-chain demand.
Important disclosure
This page is independent educational research, not investment, legal, tax, or custody advice. It is not an offer to sell securities or a recommendation to buy, sell, or hold ZEC or any related product. Digital assets can lose most or all of their value. Data is a point-in-time snapshot from third-party and protocol sources; market prices, pool balances, product status, and regulations can change without notice. Past performance does not indicate future results.
Snapshot methodology: market data from CoinGecko; network and pool data from CipherScan; protocol claims from Zcash ZIPs and project organizations; institutional holdings from SEC filings. Figures are rounded, and calculated returns may differ slightly from vendor displays because of timing.[1][2][5][6][11][21][22]
Sources & methodology
Primary documents first, with an auditable point-in-time record.
Numbered citations throughout the memo resolve to this register. Dated protocol and corporate claims use the original specification, release, legal text, or SEC filing wherever available; live values carry an explicit access date.
Market observations
USD prices, market capitalizations, volume, and vendor returns were captured at August 21, 2026 at 21:00 UTC. Calculated returns use daily observations and may differ from intraday vendor displays.
Network observations
CipherScan network and pool balances were captured at approximately 21:00 UTC on August 21, 2026. Percentages and annualized issuance were recalculated from the cited inputs before rounding.
- 1
CoinGecko. Zcash Price: ZEC/USD Live Price Chart, Market Cap & News Today. Live market data. Accessed August 21, 2026.
Open source - 2
CoinGecko. Zcash Price History and Historical Data. Historical market data. Accessed August 21, 2026.
Open source - 3
CoinGecko. Monero Price: XMR/USD Live Price Chart, Market Cap & News Today. Live market data. Accessed August 21, 2026.
Open source - 4
CoinGecko. Bitcoin Price: BTC/USD Live Price Chart, Market Cap & News Today. Live market data. Accessed August 21, 2026.
Open source - 5
CipherScan. Zcash Network Statistics API. Live network data. Accessed August 21, 2026.
Open source - 6
CipherScan. Zcash Shielded Pools Overview API. Live network data. Accessed August 21, 2026.
Open source - 7
Zcash Foundation. Zebra 4.5.3 and 5.0.0: Emergency Soft Fork and NU6.2 Activation. Incident and release report. June 3, 2026. Accessed August 21, 2026.
Open source - 8
Zooko Wilcox, Jason McGee, and Taylor Hornby. The Orchard Counterfeiting Vulnerability—and Next Steps. Security disclosure. June 4, 2026. Accessed August 21, 2026.
Open source - 9
Sean Bowe and Dev Ojha (Project Tachyon and Valar Group). Ironwood: Auditing the Orchard Pool’s Supply. Protocol rationale. June 6, 2026. Accessed August 21, 2026.
Open source - 10
Zcash Foundation. Zebra 6.0.0 Release. Mainnet release notice. July 10, 2026. Accessed August 21, 2026.
Open source - 11
Daira-Emma Hopwood. ZIP 258: Deployment of the NU6.3 Network Upgrade. Consensus specification. Created June 19, 2026; Draft. Accessed August 21, 2026.
Open source - 12
Schell Carl Scivally, Pacu Gindre, and Kris Nuttycombe. ZIP 318: Orchard to Ironwood Migration. Wallet specification. Created June 16, 2026; Draft. Accessed August 21, 2026.
Open source - 13
Daira-Emma Hopwood and Jack Grigg. ZIP 2005: Ironwood Quantum Recoverability. Consensus proposal. Created March 31, 2025; Proposed. Accessed August 21, 2026.
Open source - 14
Zcash Foundation. zcashd-compat Mode. Zebra operator documentation. Accessed August 21, 2026.
Open source - 15
Zcash. Network Information. Protocol monetary-policy reference. Accessed August 21, 2026.
Open source - 16
ZODL. Zodl Wallet. Product documentation. Accessed August 21, 2026.
Open source - 17
ZODL. ZODL Raises $25M+ in Seed Funding. Company announcement. March 9, 2026. Accessed August 21, 2026.
Open source - 18
Project Tachyon. Roadmap. Project roadmap. Accessed August 21, 2026.
Open source - 19
Shielded Labs. Crosslink Roadmap. Project roadmap. Accessed August 21, 2026.
Open source - 20
Jack Grigg and Daira-Emma Hopwood. ZIP 220: Zcash Shielded Assets. Consensus proposal. Withdrawn; accessed August 21, 2026.
Open source - 21
Grayscale Zcash Trust (ZEC). Quarterly Report on Form 10-Q for the Quarter Ended March 31, 2026. SEC filing. Filed May 8, 2026. Accessed August 21, 2026.
Open source - 22
Cypherpunk Technologies Inc.. Quarterly Report on Form 10-Q for the Quarter Ended March 31, 2026. SEC filing. Dated May 13, 2026. Accessed August 21, 2026.
Open source - 23
Grayscale Zcash Trust (ZEC). Amendment No. 2 to Form S-3; Preliminary Prospectus. SEC registration statement. Filed April 2, 2026. Accessed August 21, 2026.
Open source - 24
Zcash Foundation. Notice Concluding SEC Investigation. Organization notice. January 14, 2026. Accessed August 21, 2026.
Open source - 25
European Parliament and Council of the European Union. Regulation (EU) 2023/1114 on Markets in Crypto-assets, Article 76. Primary law. Consolidated January 9, 2024; accessed August 21, 2026.
Open source - 26
U.S. Securities and Exchange Commission. Grayscale Zcash Trust (ZEC) Company Filings. EDGAR filing history. Accessed August 21, 2026.
Open source - 27
Blockworks Advisory. Zcash Tokenholder Report Q1 2026. Commissioned research funded by GenZcash. April 2026. Accessed August 21, 2026.
Open source - 28
CoinDesk Research. Encryption Supremacy: Zcash and Privacy in the Age of Scale. Commissioned research for GenZcash. March 31, 2026. Accessed August 21, 2026.
Open source - 29
Jasir Jawaid. Is Zcash Worth Buying in 2026? Full Investment Thesis Beyond Price Predictions. Independent secondary analysis; affiliate disclosure. Updated May 25, 2026. Accessed August 21, 2026.
Open source - 30
George Kappos, Haaroon Yousaf, Mary Maller, and Sarah Meiklejohn. An Empirical Analysis of Anonymity in Zcash. USENIX Security 2018 research paper. May 8, 2018. Accessed August 21, 2026.
Open source - 31
Guillaume Lamboy and Edouard Klein, Council of Europe. Crypto-assets and Decentralised Finance: Impact on ML/TF Investigations Led by FIUs. Policy and financial-intelligence report. June 2025. Accessed August 21, 2026.
Open source - 32
Abhinav Kaul, The Economic Times. Ban on Privacy Tokens: How to Navigate Exchange Delisting. Regulatory and market reporting. February 2, 2026. Accessed August 21, 2026.
Open source - 33
Norton Rose Fulbright. The New EU AML/CFT Regime Has Arrived—Are You Ready?. Legal analysis. July 2024. Accessed August 21, 2026.
Open source - 34
Coinbase. Zcash Perpetual-Style Futures. Regulated derivatives product documentation. Accessed August 21, 2026.
Open source - 35
U.S. Commodity Futures Trading Commission. Designated Contract Market Product Filing 59550: Zcash Perp Style Futures. Regulatory product filing. Certified January 29, 2026. Accessed August 21, 2026.
Open source - 36
Brave. Brave Wallet Adds Shielded Zcash Transactions on Desktop. Third-party product announcement. April 2, 2025. Accessed August 21, 2026.
Open source - 37
Erik Silfversten, Marina Favaro, Linda Slapakova, Sascha Ishikawa, James Liu, and Adrian Salas. Exploring the Use of Zcash Cryptocurrency for Illicit or Criminal Purposes. RAND research sponsored by Electric Coin Company. 2020. Accessed August 21, 2026.
Open source - 38
Milton Friedman, interviewed by John Berthoud. Take It to the Limits: Milton Friedman on Libertarianism. National Taxpayers Union Foundation interview archive. Interviewed February 10, 1999; archive accessed August 21, 2026.
Open source - 39
Satoshi Nakamoto. Re: Not a Suggestion. Archived Bitcoin Forum post. August 11, 2010. Accessed August 21, 2026.
Open source - 40
Boston Consulting Group. The Great Reordering: 2026 Global Wealth Report. Global wealth market-sizing report. May 27, 2026. Accessed August 21, 2026.
Open source - 41
Monero Project. Monero Technical Specification. Protocol documentation. Accessed August 21, 2026.
Open source - 42
Zcash Documentation. Glossary: Selective Disclosure, Viewing Keys, and Payment Disclosure. Protocol and wallet documentation. Accessed August 21, 2026.
Open source - 43
Shielded Labs. Crosslink FAQ. Project design and economics documentation. Accessed August 21, 2026.
Open source - 44
Shielded Labs. Scope for Crosslink: Goals for the First Deployment. Project design scope. Accessed August 21, 2026.
Open source - 45
Shielded Labs. Crosslink Economics Simulator. Illustrative project economics tool. Version 1.3; accessed August 21, 2026.
Open source - 46
Pablo Kogan, Vivek Arte, Daira-Emma Hopwood, and Jack Grigg. ZIP 226: Transfer and Burn of Zcash Shielded Assets. Consensus proposal. Draft; accessed August 21, 2026.
Open source - 47
Pablo Kogan, Vivek Arte, Daira-Emma Hopwood, and Jack Grigg. ZIP 227: Issuance of Zcash Shielded Assets. Consensus proposal. Draft; accessed August 21, 2026.
Open source - 48
Zcash ZIP Editors. Specifications and Zcash Improvement Proposals Registry. Current protocol-proposal registry. Accessed August 21, 2026.
Open source - 49
Project Tachyon. Making Private Payments Scale for Everyone. Project technical overview. Accessed August 21, 2026.
Open source - 50
Project Tachyon. Ragu: Rust-Language Proof-Carrying Data Framework. Open-source project repository. Accessed August 21, 2026.
Open source - 51
Zcash Foundation. NU7 Polling Results: What We Heard and Where We Go From Here. Governance and sentiment report. February 23, 2026. Accessed August 21, 2026.
Open source - 52
Zcash Foundation. U.S. Regulatory Issues for Consideration by Zcash Shielded Assets Issuers. Commissioned legal and protocol analysis. Published 2024; accessed August 21, 2026.
Open source - 53
CertiK Intel3D. H1 2026 Wrench Attacks. Physical-security incident dataset and threat report. July 23, 2026. Accessed August 21, 2026.
Open source - 54
Sam Schechner, Robert McMillan, and Angus Berwick, The Wall Street Journal. Severed Fingers and ‘Wrench Attacks’ Rattle the Crypto Elite. Investigative reporting. 2026. Accessed August 21, 2026.
Open source - 55
Yahoo Finance, syndicating Decrypt. Crypto ‘Wrench Attacks’ Cost Victims $124M in Six Months, Up 12x. Syndicated reporting. July 23, 2026. Accessed August 21, 2026.
Open source - 56
Murtuza Merchant, Yellow. Crypto Wrench Attacks Reach 52 Cases in Six Months, Most of Them in France. Secondary reporting on CertiK data. July 28, 2026. Accessed August 21, 2026.
Open source - 57
Tim Alper, DL News. Gun-Wielding Thieves Hold Family Captive, Make Off With $800,000 Worth of Crypto. Incident reporting. April 22, 2026. Accessed August 21, 2026.
Open source - 58
Associated Press. Kidnappers in France Target Cryptocurrency Entrepreneurs for Ransom. Incident and law-enforcement reporting. May 4, 2025. Accessed August 21, 2026.
Open source - 59
The Record from Recorded Future News. ‘Wrench’ Attacks Against Crypto Holders Appear to Be on the Rise. Cybersecurity reporting. July 24, 2026. Accessed August 21, 2026.
Open source
Source quality note: issuer and project publications are primary evidence for what those organizations reported, not independent verification of every claim. Blockworks and CoinDesk research cited here were commissioned by GenZcash; RAND was sponsored by Electric Coin Company but states that its publications do not reflect sponsor opinions. Coin Bureau carries an affiliate-link disclosure. Market feeds and chain APIs are point-in-time observations. Legal interpretation is framed as a diligence issue, not legal advice.