What is Zcash (ZEC)? How shielded transactions work

Zcash (ZEC) is a privacy coin and blockchain launched in 2016. It allows users to make both public and private transactions. The latter — called “shielded transactions” on the network — make use of zero-knowledge proofs called zk-SNARKs to verify payments without revealing the sender, recipient or amount.

Zcash has emerged as one of the largest cryptocurrencies by market capitalization following a sharp rally in 2026, as growing institutional interest and renewed demand for financial privacy have brought the decade-old project back into the spotlight.

Key Takeaways

• Zcash is a privacy-focused cryptocurrency built from Bitcoin's original codebase, with a maximum supply of 21 million ZEC.
• Zcash supports transparent transactions, which are publicly visible, and shielded transactions, which conceal sensitive financial information.
• Shielded transactions use zk-SNARKs, a type of zero-knowledge proof that allows transactions to be validated without exposing their underlying details.
• Viewing keys allow users to selectively disclose shielded transaction information without giving up control of their funds.

What is Zcash?

Zcash is a decentralized cryptocurrency designed to enable private digital payments. The Zcash network was originally derived from Bitcoin’s code base, beginning as an academic experiment in improving that network’s privacy protections. The network therefore retains some similarities to Bitcoin, including its use of proof-of-work mining to secure the network and fixed supply of 21 million coins. 

The researchers behind Zcash originally conceived of a privacy extension for Bitcoin called Zerocoin. This idea developed into a separate protocol, Zerocash, which in turn provided the foundation for Zcash. 

The main difference between Zcash and Bitcoin is their approaches to privacy. All activity on the Bitcoin network is public by design; anyone can view the balances of every address, along with their full transaction history, even though the identities of the holders are unknown.

Zcash, on the other hand, gives users the option to process their transactions privately. It offers transparent transactions, which function like a normal BTC transaction, as well as shielded transactions, which allow users to keep transaction details private through advanced cryptography.

The network launched in October 2016, and the nonprofit Zcash Foundation was established the following year to support the network and its development. Zcash has since evolved into a decentralized ecosystem spanning multiple independent organizations and contributors. The Zcash Foundation continues to maintain core infrastructure and support protocol development.

How do shielded transactions work?

Zcash’s shielded transactions make use of cryptographic proofs to verify transactions are legitimate while keeping the underlying information concealed. This means that the transaction amount, sender’s address and recipient’s address are all kept private.

Expand Chart

To understand how this works, it helps to look at how Zcash handles private funds. Transactions on the network are processed in two parallel but separate accounting environments: the transparent ledger and shielded pools. The latter is where private transactions take place; shielded pools are parts of the chain where funds can be held and transferred without their ownership, balance and history being publicly visible. 

According to figures displayed on the official Zcash network dashboard, approximately 29% of the issued ZEC supply was held in shielded pools as of October 2026. It is also worth noting that transactions moving between transparent and shielded pools can reveal the amounts entering or leaving those pools, which in turn could be used to infer relationships between addresses.

While the regular blockchain uses conventional public addresses, shielded pools instead represent funds as cryptographic records called notes. When a user processes a shielded payment, their wallet uses existing notes to create new ones for the recipient. This transaction is recorded on the Zcash blockchain, but observers cannot see who received the notes, which notes were spent or how much ZEC changed hands. 

The network stores public commitments to these notes, allowing it to keep track of balances without all of the transaction details displayed on a public ledger. Verifying that private transactions follow the rules of the blockchain was one of the original challenges of privacy coins, one which Zcash solves through a cryptographic mechanism called zero-knowledge proofs.

What is a zero-knowledge proof?

A zero-knowledge proof (ZKP) is a cryptographic method that allows someone to prove a statement is true without revealing the underlying information used to establish it. Imagine if someone wanted to prove they were over 18 without revealing their exact date of birth — ZKPs are able to achieve a similar effect by using cryptographic mathematics. 

Instead of broadcasting all of the information needed to verify a payment, the sender generates a cryptographic proof of its validity. Other users can view and verify that proof — the product of the cryptographic algorithm — while the information used to generate it is kept concealed. 

Zcash uses a specific type of proof called a zero-knowledge succinct non-interactive argument of knowledge, or zk-SNARK. It also makes use of cryptographic identifiers called nullifiers attached to notes to prevent double-spending.

What are viewing keys?

Viewing keys introduce another level of control for Zcash users. These allow them to selectively reveal transaction data with third parties while keeping it hidden from the general public. These viewing keys give limited read-only access to the wallet without giving the holder the capability to spend the balance inside.

The network allows for different levels of visibility. For example, an incoming viewing key reveals only received payments, while a full viewing key reveals broader details of an account’s shielded activity.

This allows Zcash users to straddle the line between privacy and compliance. For example, an individual may need to reveal transaction records to their local tax authority during an audit, or a company may need to reveal its Zcash holdings to shareholders. 

This is known as selective disclosure, allowing users to choose when and with whom they share financial information. Custom controls like this distinguish Zcash from networks like Monero (XMR), where all activity is anonymous by default. 

What is the difference between transparent and shielded addresses?

Zcash supports transparent addresses that operate similarly to Bitcoin addresses and shielded addresses designed to protect transaction details. Unified addresses simplify the process by allowing users to manage both types of transaction from inside one wallet. 

Address type	Format	Privacy
Transparent (t-address)	Begins with t1 or t3	Sender, recipient and transaction amounts are publicly visible
Shielded address	zs1 for Sapling; newer shielded receivers are incorporated into unified addresses	Conceals transaction details when used in fully shielded transfers
Unified address	Begins with u1	Can support multiple receiving methods; privacy depends on which receiver is used

How has Zcash's privacy technology evolved?

Zcash's privacy technology has undergone several major upgrades since the network launched in 2016. One of the biggest challenges facing its early developers was the need for a trusted setup, a process used to generate the cryptographic parameters required for its zero-knowledge proofs to function. This required multiple participants and left the network theoretically vulnerable to counterfeit shielded balances.

Expand Chart

This convoluted process was streamlined by successive network upgrades:

• Orchard, 2022: Introduced an upgraded shielded pool and its Halo 2 proving system. Unlike earlier versions, Halo 2 did not require a trusted setup. The upgrade also introduced unified addresses, making it easier for compatible wallets to handle different types of transactions.
• Ironwood, 2026: Developers discovered and patched a vulnerability in Orchard’s zero-knowledge proofs that could have been exploited by an attacker to mint ZEC — Ironwood was later introduced with enhanced safeguards to protect ZEC’s supply.

The upgrade also restricted activity in the original Orchard pool and introduced a mechanism known as a turnstile, allowing existing funds to migrate to Ironwood while enforcing supply-integrity checks. Compatible wallets can handle this migration without requiring users to create a new wallet.

How is ZEC mined and what is its supply?

New ZEC coins enter circulation through proof-of-work mining. This is the same system used by Bitcoin, wherein miners dedicate computing power to solving complex mathematical problems, with the successful miners gaining the right to produce new blocks that are in turn validated by other nodes. The specific algorithm used by Zcash is called Equihash.

ZEC also shares a similar emission schedule with BTC, with a fixed supply cap of 21 million coins and a halving in new emissions roughly every four years. The most recent Zcash halving occurred in November 2024, cutting the block subsidy (the network reward paid to miners) to 1.5625 ZEC. 

Unlike Bitcoin, however, Zcash also directs a portion of newly minted coins toward network development.  A new funding model was introduced in November 2025 which now sees 80% of block subsidies paid to miners, 8% to community grants and 12% to a development fund controlled by ZEC holders.

Zcash vs Monero: What Is the difference?

Zcash and Monero are both privacy-focused cryptocurrencies, but they take different approaches to transaction confidentiality. The key difference is that Zcash allows users to opt in or out of private transactions, whereas all transactions on Monero are private by default. Both networks support viewing keys to reveal transaction information to selected individuals.

Feature	Zcash (ZEC)	Monero (XMR)
Privacy model	Optional shielded transactions	Private by default
Core technology	zk-SNARKs, Halo 2	Ring signatures, stealth addresses, RingCT
Maximum supply	21 million ZEC	No fixed cap; tail emission
Mining algorithm	Equihash	RandomX
Selective disclosure	Viewing keys	View keys and transaction proofs
Transparent transactions	Supported	Not supported as a standard transaction mode

It’s important to note that neither ZEC nor XMR guarantee complete anonymity. Zcash balances can be tracked while moving in or out of private pools, while wallets on both networks can potentially be de-anonymized if they interact with a user’s centralized exchange accounts.

Which blockchain provides better privacy solutions depends on the circumstances. Generally speaking, Monero's default privacy removes the need for users to manage custom privacy settings inside their wallet, while Zcash's optional approach offers greater flexibility for compliance. 

Is Zcash legal? Privacy coins and regulation

The regulatory footing of privacy coins is complex and differs between jurisdictions. Generally, ZEC is legal to own and use; however, restrictions can apply to exchanges and other crypto platforms that handle ZEC even where individual ownership is permitted.

The European Union has taken one of the clearest regulatory stances against privacy coins, introducing legislation prohibiting crypto service providers from maintaining anonymous blockchain accounts.

In response to these pressures and ambiguities, some cryptocurrency exchanges have delisted privacy coins due to compliance concerns. Others restrict users from using shielded pools for deposits and withdrawals, requiring that these go through standard transparent transaction channels instead. 

Although this does not establish a blanket ban on individuals owning Zcash, measures such as these can affect the accessibility of the privacy coin sector. Users should verify the rules applying to their jurisdiction and chosen service provider before trading or transferring ZEC.

What are the risks and limitations of Zcash?

Zcash offers solutions for blockchain users concerned about privacy, but it also carries certain risks that holders should be aware of. These are technical, regulatory and financial. 

• Privacy limitations: Transfers into or out of shielded pools can reveal ZEC amounts that can potentially be used to de-anonymize shielded balances. Exchange records, network metadata and user behavior may also expose information.
• Security vulnerabilities: The Orchard vulnerability discovered in 2026 demonstrated how reliance on complex cryptography can leave security problems unaddressed for months or years. 
• Exchange availability: Not all exchanges support shielded transfers, potentially requiring users to move funds through transparent addresses.
• Regulatory uncertainty: Restrictions on privacy coins may reduce access to trading platforms and other financial services.
• Market risk: Like other cryptocurrencies, ZEC is exposed to price volatility, liquidity constraints and changing market conditions.

Frequently Asked Questions

1. Is Zcash completely anonymous?

No. Shielded transactions can conceal the sender, recipient and amount, but Zcash does not guarantee complete anonymity. Transparent transactions remain publicly visible, while exchange records, network information and user behavior can reveal identifying details.

2. What is the difference between shielded and transparent Zcash transactions?

Transparent transactions publicly reveal wallet addresses and transaction amounts, much like Bitcoin. Shielded transactions use zero-knowledge proofs to conceal this information while allowing the network to verify the payment. Transfers between transparent and shielded pools can still reveal the amounts entering or leaving those pools.

3. Is Zcash similar to Tornado Cash?

No. Zcash is a privacy blockchain and coin, while Tornado Cash is a mixer protocol. Privacy coins are distinct from cryptocurrency mixers, which attempt to obscure the origins and destinations of funds moving across otherwise transparent blockchains. They do this by automating a complex web of transactions to obfuscate the trail of funds.

4. How is Zcash different from Bitcoin?

Zcash’s optional privacy features are its core differentiator from Bitcoin. Although ZEC was originally derived from Bitcoin’s code base, its developers added shielded transaction pools that use zero-knowledge proofs to enable private transfers.

5. Is Zcash better than Monero for privacy?

Neither cryptocurrency is universally better for privacy. Monero provides transaction confidentiality by default, while Zcash allows users to choose between shielded and transparent transactions. Both have different privacy trade-offs, and neither guarantees complete anonymity.

6. Is Zcash legal?

Zcash ownership and use are generally permitted in many jurisdictions, although restrictions vary by country. Some jurisdictions, such as the EU, have introduced legislation restricting cryptocurrency platforms from maintaining anonymous accounts. Although not a blanket ban, this could limit the accessibility of ZEC when it takes effect in July 2027.

7. How many ZEC will ever exist?

Zcash has a maximum supply of 21 million ZEC, matching BTC’s supply cap. New coins are issued through proof-of-work mining, with the block subsidy periodically reduced through halvings. The latest halving occurred in November 2024.