{"id":181185,"date":"2026-06-10T11:07:00","date_gmt":"2026-06-10T11:07:00","guid":{"rendered":"https:\/\/cryptonews.com\/fr\/news\/zcash-ironwood-upgrade-fixes-critical-orchard-pool-vulnerability\/"},"modified":"2026-06-10T08:50:34","modified_gmt":"2026-06-10T08:50:34","slug":"zcash-la-mise-a-jour-ironwood-pour-corriger-une-faille-de-loffre","status":"publish","type":"post","link":"https:\/\/cryptonews.com\/fr\/news\/zcash-la-mise-a-jour-ironwood-pour-corriger-une-faille-de-loffre\/","title":{"rendered":"Zcash : la mise \u00e0 jour Ironwood pour corriger une faille de l&#8217;offre"},"content":{"rendered":"<p>Les d\u00e9veloppeurs de <strong>Zcash<\/strong> ont finalis\u00e9 les changements des r\u00e8gles de consensus pour la mise \u00e0 jour <strong>Ironwood<\/strong>, pr\u00e9vue pour la fin du mois de juillet. Cette mise \u00e0 niveau vise une activation \u00e0 la hauteur de bloc 3 417 100 afin de corriger une vuln\u00e9rabilit\u00e9 critique dans le pool blind\u00e9 (shielded pool) <strong>Orchard<\/strong>, laquelle exposait le r\u00e9seau \u00e0 une cr\u00e9ation illimit\u00e9e de jetons <strong>ZEC<\/strong> contrefaits.<\/p><p><\/p><blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">\ud83d\udea8UPDATE: Zcash devs finalized the Ironwood upgrade, adding a new Orchard shielded pool to reduce the risk of unlimited counterfeit <a href=\"https:\/\/x.com\/search?q=%24ZEC&amp;src=ctag&amp;ref_src=twsrc%5Etfw\">$ZEC<\/a> circulating.<br><br>ZEC has now recovered +80% from its intraday low of around $252 on June 5. <a href=\"https:\/\/t.co\/4jGJWXPlIH\">pic.twitter.com\/4jGJWXPlIH<\/a><\/p>&mdash; Coin Bureau (@coinbureau) <a href=\"https:\/\/x.com\/coinbureau\/status\/2064261206299595139?ref_src=twsrc%5Etfw\">June 9, 2026<\/a><\/blockquote><script async src=\"https:\/\/platform.x.com\/widgets.js\" charset=\"utf-8\"><\/script><p>L&#8217;upgrade introduit un pool blind\u00e9 de remplacement, renforce les contr\u00f4les de l&#8217;offre via un m\u00e9canisme de \u00ab turnstile \u00bb (tourniquet) existant, et d\u00e9sactive les nouveaux paiements entrants vers le pool Orchard compromis. Ces mesures s&#8217;appuient sur une v\u00e9rification formelle des circuits de preuve \u00e0 divulgation nulle de connaissance (zero-knowledge) sous-jacents et sur des audits de s\u00e9curit\u00e9 ind\u00e9pendants men\u00e9s par des tiers.<\/p><h2 class=\"wp-block-heading\">Le bug du pool Orchard : Ironwood \u00e0 la rescousse de Zcash<\/h2><span class=\"replacer\"><\/span><p>Le pool <strong>Orchard<\/strong> a \u00e9t\u00e9 introduit en mai 2022 lors de la mise \u00e0 jour NU5, qui a apport\u00e9 le syst\u00e8me de preuve <strong>Halo 2<\/strong> \u00e0 Zcash, positionnant Orchard comme la couche de confidentialit\u00e9 de nouvelle g\u00e9n\u00e9ration du protocole. Il s&#8217;agit d&#8217;un environnement prot\u00e9g\u00e9 utilisant des preuves zero-knowledge pour masquer les montants des transactions et les adresses des participants sans n\u00e9cessiter de configuration initiale de confiance (trusted setup).<\/p><p>La faille d\u00e9couverte au d\u00e9but de l&#8217;ann\u00e9e 2026 r\u00e9sidait dans l&#8217;int\u00e9grit\u00e9 du circuit du protocole Orchard : un attaquant l&#8217;exploitant aurait pu \u00e9mettre des <strong>ZEC<\/strong> contrefaits sans laisser de trace on-chain d\u00e9tectable par la v\u00e9rification normale des n\u0153uds.<\/p><figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/cimg.co\/wp-content\/uploads\/sites\/3\/2026\/06\/10080756\/content-inline-1-22.jpg\" alt=\"\"><\/figure><p>Ce bug signifiait que l&#8217;offre totale de <strong>ZEC<\/strong> appliqu\u00e9e par le consensus n&#8217;\u00e9tait pas r\u00e9ellement limit\u00e9e au sein du pool Orchard. En raison de l&#8217;architecture zero-knowledge de Zcash, les propri\u00e9t\u00e9s m\u00eames qui prot\u00e8gent les transactions l\u00e9gitimes des utilisateurs rendent \u00e9galement les \u00e9missions non autoris\u00e9es invisibles pour les observateurs externes et, plus grave encore, pour l&#8217;\u00e9quipe de d\u00e9veloppement de Zcash elle-m\u00eame.<\/p><p>Une revue de s\u00e9curit\u00e9 assist\u00e9e par IA, r\u00e9alis\u00e9e par des chercheurs externes, a mis en \u00e9vidence la faille, menant \u00e0 un correctif discret et \u00e0 une divulgation coordonn\u00e9e avant que le projet <strong>Ironwood<\/strong> ne soit formellement propos\u00e9.<\/p><h2 class=\"wp-block-heading\">Turnstile, nouveau pool et v\u00e9rification de l&#8217;offre<\/h2><span class=\"replacer\"><\/span><p>Ironwood a \u00e9t\u00e9 propos\u00e9 conjointement par <strong>ZODL<\/strong>, <strong>Tachyon<\/strong>, <strong>Valar Group<\/strong>, la <strong>Zcash Foundation<\/strong> et <strong>Shielded Labs<\/strong>, une structure de gouvernance multipartite qui distingue cette r\u00e9ponse d&#8217;un simple correctif \u00e9manant d&#8217;une seule \u00e9quipe.<\/p><p>Le m\u00e9canisme central de la mise \u00e0 jour est un circuit Orchard repens\u00e9 incluant un flag capable de d\u00e9sactiver les paiements vers d&#8217;autres utilisateurs au sein d&#8217;un pool, tout en pr\u00e9servant la capacit\u00e9 de g\u00e9n\u00e9rer des notes de monnaie rendue (change notes), ce que Bowe a d\u00e9crit comme une sauvegarde de la confidentialit\u00e9. Une fois activ\u00e9, ce flag sera activ\u00e9 de fa\u00e7on permanente pour l&#8217;ancien pool Orchard, limitant le champ <code>valueBalance<\/code> et redirigeant automatiquement tous les nouveaux paiements adress\u00e9s \u00e0 Orchard vers le pool de remplacement.<\/p><p>Les contr\u00f4les de l&#8217;offre appliqu\u00e9s par Ironwood reposent sur le m\u00e9canisme de \u00ab turnstile \u00bb pr\u00e9existant du protocole ; chaque <strong>ZEC<\/strong> quittant l&#8217;ancien pool Orchard doit passer par ce tourniquet avant d&#8217;entrer dans le nouveau pool. Le turnstile garantit que la valeur totale sortant de l&#8217;ancien pool ne peut exc\u00e9der la valeur qui y est entr\u00e9e de mani\u00e8re v\u00e9rifiable.<\/p><blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Bowe a d\u00e9clar\u00e9 : \u00ab Cette combinaison impose une limite \u00e0 l&#8217;offre en circulation de ZEC gr\u00e2ce \u00e0 l&#8217;utilisation du m\u00e9canisme de turnstile existant ; la quantit\u00e9 de ZEC avec laquelle n&#8217;importe qui peut transiger n&#8217;est pas sup\u00e9rieure \u00e0 la quantit\u00e9 cens\u00e9e exister. \u00bb<\/p><\/blockquote><p>Une fois la migration termin\u00e9e, les donn\u00e9es on-chain permettront \u00e0 n&#8217;importe quel n\u0153ud complet de v\u00e9rifier ind\u00e9pendamment qu&#8217;aucun <strong>ZEC<\/strong> contrefait n&#8217;a travers\u00e9 vers le nouveau pool, r\u00e9tablissant ainsi la v\u00e9rification trustless de l&#8217;offre au niveau du protocole pour la premi\u00e8re fois depuis l&#8217;introduction de la vuln\u00e9rabilit\u00e9.<\/p><p>La cible d&#8217;activation co\u00efncide avec la fin du support de <strong>zcashd<\/strong> au bloc 3 417 100. Les essais sur le testnet, la coordination de l&#8217;\u00e9cosyst\u00e8me et les audits de s\u00e9curit\u00e9 finaux restent \u00e0 finaliser avant l&#8217;activation sur le r\u00e9seau principal. Les fournisseurs de portefeuilles prenant en charge Orchard devraient proposer des outils de migration en un clic, et le nouveau pool est con\u00e7u pour pr\u00e9server les adresses Orchard existantes, \u00e9vitant ainsi une rotation de cl\u00e9s perturbatrice pour les utilisateurs actifs.<\/p>","protected":false},"excerpt":{"rendered":"<p>Zcash pr\u00e9pare Ironwood pour fin juillet afin de corriger une vuln\u00e9rabilit\u00e9 critique du pool Orchard permettant l&#8217;\u00e9mission illimit\u00e9e de jetons ZEC falsifi\u00e9s.<\/p>\n","protected":false},"author":759,"featured_media":181176,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"editors":[2551],"sponsored_companies":[],"class_list":["post-181185","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","editors-julien-leroy"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Zcash : la mise \u00e0 jour Ironwood pour corriger une faille de l&#039;offre<\/title>\n<meta name=\"description\" content=\"Zcash pr\u00e9pare Ironwood pour fin juillet afin de corriger une vuln\u00e9rabilit\u00e9 critique du pool Orchard permettant l&#039;\u00e9mission illimit\u00e9e de jetons ZEC falsifi\u00e9s.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptonews.com\/fr\/news\/zcash-la-mise-a-jour-ironwood-pour-corriger-une-faille-de-loffre\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Zcash : la mise \u00e0 jour Ironwood pour corriger une faille de l&#039;offre\" \/>\n<meta property=\"og:description\" content=\"Zcash pr\u00e9pare Ironwood pour fin juillet afin de corriger une vuln\u00e9rabilit\u00e9 critique du pool Orchard permettant l&#039;\u00e9mission illimit\u00e9e de jetons ZEC falsifi\u00e9s.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptonews.com\/fr\/news\/zcash-la-mise-a-jour-ironwood-pour-corriger-une-faille-de-loffre\/\" \/>\n<meta property=\"og:site_name\" content=\"Cryptonews France\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-10T11:07:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cimg.co\/wp-content\/uploads\/sites\/3\/2026\/06\/10080749\/zcash-ironwood-upgrade-fixes-critical-orchard-pool-vulnerabi-featured.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"675\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Zcash : la mise \u00e0 jour Ironwood pour corriger une faille de l&#039;offre\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/cimg.co\/wp-content\/uploads\/sites\/3\/2026\/06\/10080749\/zcash-ironwood-upgrade-fixes-critical-orchard-pool-vulnerabi-featured.jpg\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Zcash : la mise \u00e0 jour Ironwood pour corriger une faille de l'offre","description":"Zcash pr\u00e9pare Ironwood pour fin juillet afin de corriger une vuln\u00e9rabilit\u00e9 critique du pool Orchard permettant l'\u00e9mission illimit\u00e9e de jetons ZEC falsifi\u00e9s.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptonews.com\/fr\/news\/zcash-la-mise-a-jour-ironwood-pour-corriger-une-faille-de-loffre\/","og_locale":"fr_FR","og_type":"article","og_title":"Zcash : la mise \u00e0 jour Ironwood pour corriger une faille de l'offre","og_description":"Zcash pr\u00e9pare Ironwood pour fin juillet afin de corriger une vuln\u00e9rabilit\u00e9 critique du pool Orchard permettant l'\u00e9mission illimit\u00e9e de jetons ZEC falsifi\u00e9s.","og_url":"https:\/\/cryptonews.com\/fr\/news\/zcash-la-mise-a-jour-ironwood-pour-corriger-une-faille-de-loffre\/","og_site_name":"Cryptonews France","article_published_time":"2026-06-10T11:07:00+00:00","og_image":[{"width":1200,"height":675,"url":"https:\/\/cimg.co\/wp-content\/uploads\/sites\/3\/2026\/06\/10080749\/zcash-ironwood-upgrade-fixes-critical-orchard-pool-vulnerabi-featured.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_title":"Zcash : la mise \u00e0 jour Ironwood pour corriger une faille de l'offre","twitter_image":"https:\/\/cimg.co\/wp-content\/uploads\/sites\/3\/2026\/06\/10080749\/zcash-ironwood-upgrade-fixes-critical-orchard-pool-vulnerabi-featured.jpg","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/cryptonews.com\/fr\/news\/zcash-la-mise-a-jour-ironwood-pour-corriger-une-faille-de-loffre\/#article","isPartOf":{"@id":"https:\/\/cryptonews.com\/fr\/news\/zcash-la-mise-a-jour-ironwood-pour-corriger-une-faille-de-loffre\/"},"author":{"name":"domn","@id":"https:\/\/cryptonews.com\/fr\/#\/schema\/person\/7505e51895f10feb029abe55e2dadfa2"},"headline":"Zcash : la mise \u00e0 jour Ironwood pour corriger une faille de l&#8217;offre","datePublished":"2026-06-10T11:07:00+00:00","mainEntityOfPage":{"@id":"https:\/\/cryptonews.com\/fr\/news\/zcash-la-mise-a-jour-ironwood-pour-corriger-une-faille-de-loffre\/"},"wordCount":791,"commentCount":0,"publisher":{"@id":"https:\/\/cryptonews.com\/fr\/#organization"},"image":{"@id":"https:\/\/cryptonews.com\/fr\/news\/zcash-la-mise-a-jour-ironwood-pour-corriger-une-faille-de-loffre\/#primaryimage"},"thumbnailUrl":"https:\/\/cimg.co\/wp-content\/uploads\/sites\/3\/2026\/06\/10080749\/zcash-ironwood-upgrade-fixes-critical-orchard-pool-vulnerabi-featured.jpg","articleSection":["News"],"inLanguage":"fr-FR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/cryptonews.com\/fr\/news\/zcash-la-mise-a-jour-ironwood-pour-corriger-une-faille-de-loffre\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/cryptonews.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/cryptonews.com\/fr\/news\/zcash-la-mise-a-jour-ironwood-pour-corriger-une-faille-de-loffre\/","url":"https:\/\/cryptonews.com\/fr\/news\/zcash-la-mise-a-jour-ironwood-pour-corriger-une-faille-de-loffre\/","name":"Zcash : la mise \u00e0 jour Ironwood pour corriger une faille de l'offre","isPartOf":{"@id":"https:\/\/cryptonews.com\/fr\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptonews.com\/fr\/news\/zcash-la-mise-a-jour-ironwood-pour-corriger-une-faille-de-loffre\/#primaryimage"},"image":{"@id":"https:\/\/cryptonews.com\/fr\/news\/zcash-la-mise-a-jour-ironwood-pour-corriger-une-faille-de-loffre\/#primaryimage"},"thumbnailUrl":"https:\/\/cimg.co\/wp-content\/uploads\/sites\/3\/2026\/06\/10080749\/zcash-ironwood-upgrade-fixes-critical-orchard-pool-vulnerabi-featured.jpg","datePublished":"2026-06-10T11:07:00+00:00","description":"Zcash pr\u00e9pare Ironwood pour fin juillet afin de corriger une vuln\u00e9rabilit\u00e9 critique du pool Orchard permettant l'\u00e9mission illimit\u00e9e de jetons ZEC falsifi\u00e9s.","breadcrumb":{"@id":"https:\/\/cryptonews.com\/fr\/news\/zcash-la-mise-a-jour-ironwood-pour-corriger-une-faille-de-loffre\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptonews.com\/fr\/news\/zcash-la-mise-a-jour-ironwood-pour-corriger-une-faille-de-loffre\/"]}],"author":[]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/cryptonews.com\/fr\/news\/zcash-la-mise-a-jour-ironwood-pour-corriger-une-faille-de-loffre\/#primaryimage","url":"https:\/\/cimg.co\/wp-content\/uploads\/sites\/3\/2026\/06\/10080749\/zcash-ironwood-upgrade-fixes-critical-orchard-pool-vulnerabi-featured.jpg","contentUrl":"https:\/\/cimg.co\/wp-content\/uploads\/sites\/3\/2026\/06\/10080749\/zcash-ironwood-upgrade-fixes-critical-orchard-pool-vulnerabi-featured.jpg","width":1200,"height":675},{"@type":"BreadcrumbList","@id":"https:\/\/cryptonews.com\/fr\/news\/zcash-la-mise-a-jour-ironwood-pour-corriger-une-faille-de-loffre\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptonews.com\/fr\/"},{"@type":"ListItem","position":2,"name":"Zcash : la mise \u00e0 jour Ironwood pour corriger une faille de l&#8217;offre"}]},{"@type":"WebSite","@id":"https:\/\/cryptonews.com\/fr\/#website","url":"https:\/\/cryptonews.com\/fr\/","name":"Cryptonews","description":"","publisher":{"@id":"https:\/\/cryptonews.com\/fr\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptonews.com\/fr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/cryptonews.com\/fr\/#organization","name":"Cryptonews France","url":"https:\/\/cryptonews.com\/fr\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/cryptonews.com\/fr\/#\/schema\/logo\/image\/","url":"https:\/\/cryptonews.com\/wp-content\/uploads\/sites\/3\/2023\/09\/4.jpg","contentUrl":"https:\/\/cryptonews.com\/wp-content\/uploads\/sites\/3\/2023\/09\/4.jpg","width":1669,"height":874,"caption":"Cryptonews France"},"image":{"@id":"https:\/\/cryptonews.com\/fr\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/cryptonews.com\/fr\/wp-json\/wp\/v2\/posts\/181185","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptonews.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptonews.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptonews.com\/fr\/wp-json\/wp\/v2\/users\/759"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptonews.com\/fr\/wp-json\/wp\/v2\/comments?post=181185"}],"version-history":[{"count":1,"href":"https:\/\/cryptonews.com\/fr\/wp-json\/wp\/v2\/posts\/181185\/revisions"}],"predecessor-version":[{"id":181187,"href":"https:\/\/cryptonews.com\/fr\/wp-json\/wp\/v2\/posts\/181185\/revisions\/181187"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptonews.com\/fr\/wp-json\/wp\/v2\/media\/181176"}],"wp:attachment":[{"href":"https:\/\/cryptonews.com\/fr\/wp-json\/wp\/v2\/media?parent=181185"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptonews.com\/fr\/wp-json\/wp\/v2\/categories?post=181185"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptonews.com\/fr\/wp-json\/wp\/v2\/tags?post=181185"},{"taxonomy":"editors","embeddable":true,"href":"https:\/\/cryptonews.com\/fr\/wp-json\/wp\/v2\/editors?post=181185"},{"taxonomy":"sponsored_companies","embeddable":true,"href":"https:\/\/cryptonews.com\/fr\/wp-json\/wp\/v2\/sponsored_companies?post=181185"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}