Retroactive grant application - Ironwood External Audits

Hello all!

We’ve submitted a retroactive grant application to the Coinholder Retroactive Grants Program for Valargroup’s funding of external audits and AI tools on the Ironwood emergency response. Note, none of this grant request is payment to team members or company margin, and are solely to external third parties.

GitHub issue: Retroactive Grant Application - Ironwood external audit re-imbursement · Issue #56 · Financial-Privacy-Foundation/ZcashCoinholderGrantsProgram · GitHub

Requested Amount: $599,000

The External audits for:

  • All Ironwood changes (Zellic)
  • Any Orchard Soundness bug (Zellic, Ottersec)
  • Any soundness bug in the stack (Ottersec)
  • Sapling (Zellic)

were a total cost of $499,000.

The remaining $100k cost was spent on v12.sh, to help review all of the Zcash stack and the rapid Ironwood developments.

The Zellic Ironwood reports can be found here: Release Zcash Reports (July) by justin-chon · Pull Request #245 · Zellic/publications · GitHub
The current Ottersec audit report draft can be found here: https://zakura.com/audits/ottersec/ottersec-zcash-stack-2026-07-v1.pdf
The current Sapling audit report draft can be found here: https://zakura.com/audits/zellic/Zcash-sapling.pdf

These audits were coordinated in an emergency, starting ASAP and interfering with the auditors existing engagements.

8 Likes