Zcash (ZEC)

What Zcash is

Zcash is a privacy-focused cryptocurrency that lets users choose whether a transaction's details are public or hidden. Its own description is direct: "a digital currency — and a store of value — that keeps all your financial information private and in your control" (source: z.cash). It shares Bitcoin's monetary design, with z.cash stating that "just like Bitcoin, Zcash has a fixed supply of 21 million coins. Their inflation schedules are the same, too."

What Zcash added was cryptography that most chains still do not have. Z.cash says the project "was the first widespread application of zk-SNARKs, a novel form of zero-knowledge cryptography," developed with input from "scientists at MIT, Johns Hopkins, and other respected academic and scientific institutions."

For where to buy Zcash in your country or state, see the availability tables on this page and the venue list at Exchanges.

How it works

Zcash has two kinds of address, and the distinction is the whole product. Z.cash puts it plainly: "shielded Zcash addresses keep your financial information private. Transparent addresses make that information public."

A transparent address behaves like an ordinary blockchain address. Balances and transaction history are visible to anyone with a block explorer, exactly as on Bitcoin. A shielded address hides the sender, the receiver, and the amount, while still allowing the network to verify that the transaction is valid and that no coins were created out of nothing.

That verification without disclosure is what a zk-SNARK does. Z.cash spells out the acronym as "Zero-Knowledge Succinct Non-Interactive Argument of Knowledge," and the useful part is the first phrase: a proof that a statement is true which reveals nothing about why it is true. The network confirms that inputs and outputs balance and that the spender held the funds, without learning who or how much.

Because both address types exist on the same chain, funds move between them. A transfer from a transparent to a shielded address is a shielding transaction; the reverse is deshielding. Privacy comes from the shielded pool, so coins sitting in a transparent address get the same visibility as any other public blockchain balance. Many exchanges support only transparent addresses for deposits and withdrawals, which is worth checking before you send.

Z.cash describes shielded addresses as giving users "more control over their assets" and protection "from fraudsters and other ill-intentioned actors," which is the practical case for privacy: a public balance is a public target.

Supply and tokenomics

Zcash caps total supply at 21 million ZEC. Z.cash is explicit that "Zcash's max supply is 21M" and that the inflation schedule matches Bitcoin's, so new coins enter circulation as a block subsidy that halves periodically rather than on a smooth curve.

A portion of that subsidy is directed to funding development, and the rules are set in the protocol rather than by convention. The 8% share goes to the Financial Privacy Foundation "for the express use of the Zcash Community Grants Committee."

The lockbox portion is unusual and worth understanding. ZIP 1015 defers the actual disbursement mechanism for those funds to a later community decision through a subsequent ZIP. The coins are issued and tracked by the protocol, but how they are spent is not settled by the same document that creates them.

Anyone modeling Zcash issuance should treat the development fund as a scheduled, block-height-bounded allocation rather than a permanent tax, and should check which ZIP is currently in force. Halvings are triggered by block height, so calendar dates for future ones are estimates rather than fixed.

History

Zcash grew out of academic cryptography rather than out of a company product roadmap. Z.cash credits scientists at MIT, Johns Hopkins, and other institutions with the underlying work, and the chain's history since launch has largely been a sequence of upgrades to the shielded payment protocol as the cryptography improved.

Sapling was the first major overhaul, making shielded transactions fast and light enough to be practical on ordinary hardware rather than a specialist operation. Before it, using the private side of Zcash was slow enough that most users did not.

The next step was Orchard, activated in the NU5 network upgrade in May 2022. Orchard uses the Halo 2 proving system, which z.cash describes as "a new zk-SNARK that's finally capable of solving two outstanding issues in Zcash: removing the trusted setup while hitting performance targets." That mattered because earlier zk-SNARK constructions required a trusted setup ceremony to generate public parameters, and the integrity of the currency depended on participants in that ceremony destroying their secret inputs. Halo 2 removed the requirement.

November 2024 brought the second halving, at block 2,726,400, and with it the funding structure defined in ZIP 1015: 12% of the block subsidy to a deferred lockbox and 8% to the Financial Privacy Foundation for Zcash Community Grants, running to block 3,146,400.

Risks and what to watch

Exchange availability is the risk most likely to affect an ordinary holder. Privacy assets are treated differently across jurisdictions, and some venues have removed them for particular regions or supported only transparent addresses. A delisting can force conversion on short notice. RampAtlas tracks availability by jurisdiction because this shifts more often than the technology.

Privacy is not automatic. Coins in a transparent address are as visible as on any public chain, and moving between pools at identifiable moments can leak information even when individual transactions are shielded. The size of the shielded pool and how many users actually use it are meaningful signals, since a privacy set of a few is not much of a privacy set.

Cryptographic and implementation risk is real for any system this complex. The move to Halo 2 removed the trusted setup, which was the most-discussed structural concern, but shielded protocols remain sophisticated software where bugs are hard to spot.

On funding, watch what happens to the lockbox. ZIP 1015 deliberately left the disbursement mechanism to a later decision, and how that is resolved is a live governance question rather than a settled one.

Frequently asked questions

Is every Zcash transaction private?

No. Zcash supports both shielded and transparent addresses. Z.cash states that "shielded Zcash addresses keep your financial information private. Transparent addresses make that information public." Privacy applies only to funds held and moved in the shielded pool.

What is a zk-SNARK?

Z.cash defines it as a "Zero-Knowledge Succinct Non-Interactive Argument of Knowledge": a proof that lets someone demonstrate they possess information without revealing it. Zcash uses this to verify that a shielded transaction is valid without disclosing the sender, receiver, or amount.

How many Zcash coins will there be?

21 million. Z.cash states that Zcash has "a fixed supply of 21 million coins" and that its inflation schedule matches Bitcoin's, with the block subsidy halving over time.

What is the Zcash development fund?

ZIP 1015 allocates 20% of the block subsidy after the November 2024 halving at block 2,726,400: 12% to an in-protocol lockbox and 8% to the Financial Privacy Foundation for the Zcash Community Grants Committee. The allocation ends at block 3,146,400, roughly four years later.

Where can you buy Zcash?

Availability varies by country and US state, and privacy assets face more jurisdiction-specific restrictions than most. See where to buy Zcash for the venues serving your region, and Exchanges to compare them.