The Zcash Arborist Calls are bi-weekly protocol development meetings focused on tracking upcoming protocol deployment logistics, consensus node implementation issues, and protocol research.
This summary focuses on the last call that took place on 30/04/2026
Zebra development remains focused on security hardening.
Security advisories reported over the past two weeks were actively addressed
A post-Arborist release delivered important security fixes
Additional fixes are already in progress, with another release expected soon
Ongoing priority remains strengthening node security and overall infrastructure resilience
Zodl’s core stack delivered major infrastructure releases across Sapling, Orchard, and the broader Librustzcash ecosystem.
New versions introduced significant functionality upgrades across core libraries
Critical dependency maintenance issues required replacing an abandoned core crate
A custom in-house replacement was developed to avoid regressions and strengthen maintainability
The new implementation improves long-term infrastructure resilience while reducing unsafe dependencies
Zallet CLI wallet integration testing continues to mature.
Regression testing for wallet imports now supports full historical recovery back to Genesis
Dedicated regtest wallets were constructed for deep validation
Integration test repository PR confirms successful end-to-end wallet history import functionality
This significantly strengthens wallet reliability for legacy and future users
Research efforts continue advancing Zcash’s long-term quantum resilience.
Work is progressing on the finalized quantum recoverability specification
Major cleanup PRs have already been merged
A fully formal security proof is now underway
This work lays foundational security guarantees for potential future quantum-secure Zcash protocols
Zodl has also begun developing specialized AI-assisted tooling for Zcash development.
A new repository of AI “skills” is being refined for agents like Claude
Focus remains on improving efficiency while reducing stale duplicated repository data
Tooling aims to streamline future Zcash codebase interaction and development productivity
Separately, zcashd also received an important security-focused release during this period
Zingo Labs and Zaino remain focused on core infrastructure refinement.
Internal development centered on faster testing pipelines and stronger integration test coverage
API inconsistencies with Lightwalletd were addressed to improve protocol alignment
Dependency upgrades, cleaner shutdown processes, and broader technical debt reduction remain ongoing priorities
While recent work has been largely behind the scenes, these improvements strengthen long-term ecosystem reliability
Zcashd deprecation urgency has significantly accelerated following a growing wave of security vulnerabilities discovered by Ai
Multiple recent bugs across Zcashd and related infrastructure have intensified pressure to simplify the protocol and retire legacy code faster
Security incident volume is reshaping prior deprecation assumptions and timelines
Teams are increasingly prioritizing rapid migration over a fully frictionless transition
Zebra’s role as the long-term secure network foundation continues to strengthen
Zcash core teams are actively reassessing long-term security response strategy.
Discussions now include more aggressive patching cycles, structured security release approaches, and expanded audit coordination
Legacy Sprout code remains a major technical liability and simplification priority
❖ Shielded Labs, ZCG, and external auditors are increasing white-hat security effortsA $1M bug bounty initiative reflects the seriousness of current ecosystem defense priorities
Transition strategy is evolving from seamless migration toward accelerated practical deprecation.
Teams may reduce emphasis on perfect user experience if it slows critical security timelines
Focus is shifting toward securing essential use cases first
Broader outreach and operational support may compensate for increased transition friction
Goal remains achieving a Zebra dominant future without obstructing upcoming network upgrades
Despite mounting security challenges, Zcash leadership emphasized that ecosystem security posture remains comparatively strong.
No critical shielded circuit verification failures have been identified
Major vulnerabilities largely center on legacy infrastructure rather than core zero-knowledge systems
Ongoing duplicate lower-severity reports may indicate progress against low-hanging vulnerabilities
Nevertheless, teams expect continued pressure and remain committed to aggressive defensive improvements
QEDIT delivered a major end-to-end ZSA milestone with a full public demonstration of issuance, transfers, and atomic swap functionality.
A complete live demo showcased core ZSA infrastructure in action
Atomic swap capabilities are now functionally demonstrated alongside issuance and transfers
Community members can explore functionality locally or connect to active swap-supporting nodes
Broader ecosystem documentation and forum updates are expected soon
Technical implementation work continues progressing steadily across Orchard, Librustzcash, and Zebra integration.
Orchard review responses have been completed and advanced review stages are nearing completion
Additional swap-related structural upgrades are expected following current review cycles
Core supporting crates remain prepared for subsequent review phases
Zebra-side integration work is approaching final readiness as ZSA infrastructure matures
Shielded Labs’ NSM work continues advancing through careful implementation refinement, with recent progress focused on correcting deferred pool balance calculation logic, strengthening regression test coverage, and preparing the next major PR phase as development moves steadily toward more robust protocol reliability.
Shielded Labs introduced “Shielded Transport Pigeon” as Crosslink’s custom UDP-based syncing infrastructure.
New transport layer focuses on lightweight deployment and simplified infrastructure
Designed to optimize performance for privacy-focused networks such as mixnets
Current implementation prioritizes flexibility and experimentation over immediate post-quantum readinessRepresents a major technical foundation for Crosslink’s evolving architecture
Crosslink’s incentivized featurenet is now live, marking a major milestone for Shielded Labs’ trailing finality layer development.
Feature net is actively running with growing community participation
Over 90 commits across multiple contributors
Real-world user testing is delivering valuable deployment feedback
Community built explorers and ecosystem tooling are already emerging
Crosslink infrastructure continues rapidly maturing across syncing, wallet support, and staking systems.
Block sync has been substantially refactored
Wallet support now includes transparent and unified addresses
Funding streams and reward infrastructure are actively progressing
Scanner and staking reward systems are moving toward broader incentivized deployment
Crosslink remains iterative, experimental, and community driven as Shielded Labs prepares future seasonal upgrades.
Season one emphasizes active deployment, testing, and refinement
Transport architecture may evolve further after broader review
External contributors and new hires are already expanding development velocity
Formal verification is gaining traction in Zcash conversations.
There’s growing optimism that tools like Lean4, combined with recent AI advances, may finally make meaningful protocol verification more practical
Daira emphasized that verifying Zcash’s protocol design itself may be even more important than verifying implementation code alone
Focus is increasingly shifting toward validating the most security-critical and mathematically complex components first