# Impacts of transparent migrations for Zcash users **URL:** \ **Category:** Education\ **Created:** [January 24, 2020, 5:14pm UTC](https://forum.zcashcommunity.com/t/impacts-of-transparent-migrations-for-zcash-users/35846 "2020-01-24T17:14:26Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![sgp](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/sgp/32/17421_2.png) [@sgp](https://forum.zcashcommunity.com/u/sgp)\ **Post date:** [January 24, 2020, 5:14pm UTC](https://forum.zcashcommunity.com/t/impacts-of-transparent-migrations-for-zcash-users/35846/1 "2020-01-24T17:14:26Z")
> **[Impacts of transparent migrations for Zcash users](https://medium.com/@JEhrenhofer/impacts-of-transparent-migrations-for-zcash-users-8ba4bead6456?source=friends_link&sk=fa683a8b9877c16479a8afbba4965675)** > > When Zcash upgraded from Sprout to Sapling, they introduced a requirement for a transparent migration, or a “turnstile” as they call it… ---
**Author:** ![Autotunafish](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/autotunafish/32/7827_2.png) [@Autotunafish](https://forum.zcashcommunity.com/u/Autotunafish)\ **Post date:** [January 24, 2020, 6:23pm UTC](https://forum.zcashcommunity.com/t/impacts-of-transparent-migrations-for-zcash-users/35846/2 "2020-01-24T18:23:03Z")
My only critique would be a little more on who (potentially) benefits and who is harmed by the possible exploit just to shed a little more light on “why”, but otherwise good 👍 ---
**Author:** ![sgp](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/sgp/32/17421_2.png) [@sgp](https://forum.zcashcommunity.com/u/sgp)\ **Post date:** [January 24, 2020, 6:38pm UTC](https://forum.zcashcommunity.com/t/impacts-of-transparent-migrations-for-zcash-users/35846/3 "2020-01-24T18:38:11Z")
Thanks for your feedback! Can you please elaborate on what you feel is unclear? What do you understand and what do you not understand? ---
**Author:** ![Autotunafish](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/autotunafish/32/7827_2.png) [@Autotunafish](https://forum.zcashcommunity.com/u/Autotunafish)\ **Post date:** [January 24, 2020, 6:52pm UTC](https://forum.zcashcommunity.com/t/impacts-of-transparent-migrations-for-zcash-users/35846/4 "2020-01-24T18:52:39Z")
Like I said not much perhaps just a link to here which is the details of CVE-2019-7167 > **[Zcash Counterfeiting Vulnerability Successfully Remediated - Electric Coin...](https://electriccoin.co/blog/zcash-counterfeiting-vulnerability-successfully-remediated/#technical-details)** > > Eleven months ago we discovered a counterfeiting vulnerability in the cryptography underlying some kinds of zero-knowledge proofs. This post provides details on the vulnerability, how we fixed it and the steps taken to protect Zcash users. ---
**Author:** ![sgp](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/sgp/32/17421_2.png) [@sgp](https://forum.zcashcommunity.com/u/sgp)\ **Post date:** [January 24, 2020, 6:54pm UTC](https://forum.zcashcommunity.com/t/impacts-of-transparent-migrations-for-zcash-users/35846/5 "2020-01-24T18:54:15Z")
Link added, thanks for the recommendation. ---
**Author:** ![barbra](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/barbra/32/15533_2.png) [@barbra](https://forum.zcashcommunity.com/u/barbra)\ **Post date:** [January 24, 2020, 8:25pm UTC](https://forum.zcashcommunity.com/t/impacts-of-transparent-migrations-for-zcash-users/35846/6 "2020-01-24T20:25:59Z")
Thanks for sharing, I would like to note a few things: - There is a fundamental friction between Privacy (P) and Supply Integrity (SI) - ZCash is a network of money, _money with privacy_. - The extent to which shielded users are affected by transparent migrations is an open question ^1. - _Everyone_ benefits from transparent migrations ^2 Now to elaborate, ^1: I am not familiar with the _state-of-the-art_ on how vulnerable the network is, so _please_ correct me if I’m wrong, but how _bad_ is this really? I sync a full-node somewhere, encapsulate traffic, broadcast migration (maybe in chunks and over time) and then GTFO cleaning after me. Maybe I do these steps locally or offline (?) and use a third-party service for the broadcast part (send a usb key? disclose through Tor?) etc. Correct me if I’m wrong but there are lots of ways to mitigate surveillance of network activity. And the problem gets easier to solve when the UX-part gets nailed down. I believe making the blockchain succinct is on the horizon for ZCash (?). That line of effort alone can do a lot. Reducing the operational complexity and cost of operating a full node will free a lot of room for defensive measures and privacy at the network level. ^2: As I understand it, your line of reasoning is that t-users benefit from migrations because 1/ they are not at risk of having their coin frozen in case of a supply leakage 2/ privacy is not a concern for them. From there you conclude that shielded users _do not benefit_ because 1/ they are at risk of compromising their privacy (suppose) 2/ they shoulder a risk of getting their coins frozen in case of supply leakage. But you forget to mention that in fact _everyone_ benefits from derisking the Zcash supply integrity and moving the intra-adoption of newer ZCash technology. If ZEC get counterfeited, then we are going to zero at a speed directly proportional to the extent the bug has been abused. Whether the “benefit - cost” of a migration is negative or positive is highly user specific and I wager that for the overwhelming majority of people it is positive and the privacy cost can be addressed. tl;dr - keep de-risking shielded pools. Supply Integrity is paramount. In ZCash, _Privacy_ is a property of the interactions and state of users’ balance and identity. It all comes crashing down if the underlying is worthless. SI is the bedrock on which it builds. Hard private _money_. LMK what are your thoughts 😃 ---
**Author:** ![sarang](https://avatars.discourse-cdn.com/v4/letter/s/bc79bd/32.png) [@sarang](https://forum.zcashcommunity.com/u/sarang)\ **Post date:** [January 24, 2020, 8:31pm UTC](https://forum.zcashcommunity.com/t/impacts-of-transparent-migrations-for-zcash-users/35846/7 "2020-01-24T20:31:47Z")
> [@barbra](#): > > If ZEC get counterfeited, then we are going to zero at a speed directly proportional to the extent the bug has been abused. Whether the “benefit - cost” of a migration is negative or positive is highly user specific and I wager that for the overwhelming majority of people it is positive and the privacy cost can be addressed. “You lost access to all of your funds, but just think of the overall benefit to the asset” wouldn’t be much consolation. And whether or not the privacy issues can be addressed in the future, they weren’t for the first migration. ---
**Author:** ![barbra](https://sea2.discourse-cdn.com/zcash/user_avatar/forum.zcashcommunity.com/barbra/32/15533_2.png) [@barbra](https://forum.zcashcommunity.com/u/barbra)\ **Post date:** [January 24, 2020, 8:45pm UTC](https://forum.zcashcommunity.com/t/impacts-of-transparent-migrations-for-zcash-users/35846/8 "2020-01-24T20:45:30Z")
It’s not about consolation but damage control. I acknowledge the friction between SI and P. But you can let everyone arbitrage what’s best for them. Also the fact that we can improve the process to make the P cost very small is important because that means that shouldering the risk of staying in a deprecated shielded pool is not worth it. There are no perfect solution but “stopping migrations” does _no one_ a favour. Shielded funds are still worthless in case of leakage supply and risk increase for all the other users. ---
**Author:** ![sarang](https://avatars.discourse-cdn.com/v4/letter/s/bc79bd/32.png) [@sarang](https://forum.zcashcommunity.com/u/sarang)\ **Post date:** [January 24, 2020, 9:00pm UTC](https://forum.zcashcommunity.com/t/impacts-of-transparent-migrations-for-zcash-users/35846/9 "2020-01-24T21:00:33Z")
For what it’s worth, I see your points. However, I agree with @sgp that regardless of how you feel about the balance of privacy and supply integrity guarantees, the Sprout-Sapling migration was handled very poorly from a user safety and experience perspective. Should the community decide a future migration is worth it, I hope that there is _much_ more research and engineering work conducted, as well as more comprehensive user education.