Zcash says Ironwood proof rules out undetectable counterfeiting bugs

Zcash researchers published more than 2,700 machine-checked theorems designed to rule out undetectable counterfeiting bugs in Ironwood.Zcash researchers have completed formal verification of Ironwood, publishing a machine-checked proof that the network’s new shielded pool does not contain undetectable counterfeiting bugs under its stated cryptographic assumptions. On Tuesday, Project Tachyon said that the proof, written in the Lean programming language, comprises over 2,700 theorems and took three teams of researchers and cryptographers over a month to complete. The work establishes a security property known as balance integrity, designed to ensure the shielded pool cannot pay out more value than has publicly entered it.The researchers said the proof covers the components needed for that property, including Ironwood’s zero-knowledge proof system, circuit rules and ledger-level accounting. It does not cover Ironwood’s separate privacy guarantees. Ironwood was introduced through Zcash’s NU6.3 upgrade in response to a vulnerability discovered in its Orchard shielded pool that could theoretically have enabled undetectable ZEC counterfeiting. Zcash developers said they found no evidence...