Grayscale Launches Zcash ETF Following Critical Privacy Flaw That Rocked the Cryptocurrency

Grayscale's Zcash Exchange Traded Fund, better known as an ETF, began trading Tuesday on NYSE Arca, listing a nine-year-old investment product months after developers disclosed and patched a critical vulnerability in the privacy coin's shielded transaction system.

Trading under the ticker ZCSH, the world's first exchange-traded product offering spot Zcash exposure allows investors to track the price of ZEC through brokerage accounts without having to buy or store the token themselves.

"Grayscale has a long history of identifying emerging technologies and investment themes early, and our nine-year history operating this fund is the clearest signal of demand," Grayscale Head of Index Steve Vanourny told Decrypt.

ZCSH began as the Grayscale Zcash Trust in October 2017. Grayscale filed with the Securities and Exchange Commission in November to convert the trust into an exchange-traded fund. As an exchange-traded product, shareholders do not own ZEC directly but instead own shares intended to track the value of the fund's ZEC holdings.

Vanourny said Zcash's maturity, privacy features and investor demand for assets beyond Bitcoin and Ethereum made this the right time to list the nine-year-old fund.

"Investors increasingly want exposure to digital assets beyond Bitcoin and Ether through the brokerage accounts they already use, and Zcash occupies a distinctive place in that landscape," Vanourny said. "With its nearly decade-long network history, monetary design derived from Bitcoin, including proof of work and a 21 million coin limit, in addition to optional privacy technology that Bitcoin does not have."

According to Vanourny, Grayscale expects ZCSH to appeal primarily to self-directed and advised investors seeking ZEC exposure through a brokerage account.

"We view ZCSH as a focused, higher-risk satellite position within a broader digital-asset allocation that is complementary to, but not a replacement for, Bitcoin," he said. "It offers a distinct thesis: Bitcoin-like scarcity and proof-of-work economics, plus optional privacy, for investors who see privacy as the next major theme for the industry to address as it scales."

While Vanourny pointed to Zcash's fixed supply and proof-of-work model as similarities to Bitcoin, its optional privacy complicated the response to a critical security flaw.

Zcash's Ironwood upgrade

In May, security researcher Taylor Hornby used Anthropic's Claude Opus 4.8 to discover a four-year-old vulnerability in Zcash's Orchard shielded pool that could have allowed an attacker to create counterfeit ZEC. Developers deployed an emergency patch on June 1, but the network's privacy features made it impossible to determine cryptographically whether the flaw had been exploited.

In July, Zcash activated the Ironwood upgrade, replacing Orchard with a new shielded pool. The upgrade added accounting rules that prevent more ZEC from leaving the retired pool than entered it, trapping any counterfeit coins that may exist.

Looking ahead, Vanourny said Grayscale will judge Zcash's progress by its adoption, utility and network security rather than the token's price.

"On the security and infrastructure side, we will be watching the continued rollout and adoption of the Ironwood upgrade, which closed the vulnerable shielded pool from the June 2026 incident and added independently audited, formally verified supply guarantees," he said. "Grayscale will also be monitoring exchange support and regulatory treatment of Zcash and privacy assets more broadly."

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.