Zec.rocks is proud to announce that Zecd is the first zcashd wallet alternative to pass an independent security audit.
In June I hired Zellic to perform an independent security audit of zecd, the Zcash wallet server built by Zec.rocks. The audit found zero critical issues. All findings are remediated.
I hope that the report is a useful reference for all teams securing wallets:
Zellic - zecd: Application Security Assessment (click the download icon)
Audit Timeline
2026-06-03 - Zecd is open-sourced by Overpay (Zec.rocks)
2026-06-18 - Overpay engages Zellic for an independent security audit
2026-07-03 - The audit is completed
2026-07-12 - Remediations are released (v0.3.4 for Orchard, v0.5.0-rc3 Ironwood)
2026-07-23 - Audit published
Zecd Features
- Stateless: all funds are recoverable from a seed phrase.
- Transparent, Ironwood, Orchard, and Sapling support. (including T-to-T)
- Connects directly to Zebra or Zakura with no indexer required.
- Large gap limits are supported (millions of unfunded transparent addresses).
- Built for dev and LLM productivity, speaking the familiar Bitcoind RPC
- Proven in production on Overpay.com since January 2026, open sourced in June.
We would love for you to try it out!
Github: zecrocks/zecd
ZEC rocks!
Demo zecd with your favorite LLM in minutes:
Build a website that sells something for shielded Zcash,
using zecd (https://zecd.org) pointed at a self-hosted
Zakura node. (https://zakura.com)