Encrypted cash, contested governance, new stewardship

The Story of Zcash

Zcash began as a cypherpunk answer to Bitcoin's transparency problem, then kept reinventing itself through privacy upgrades, governance fights, and an eventual handoff from ECC into Zcash Open Development Lab.

Origins Protocol Governance ZODL
2013 Origins Cypherpunk

Zero-knowledge cash leaves the whiteboard

The Zcash story starts before Zcash itself. In 2013, scientists working on the Zerocoin idea tried to solve what Bitcoin still exposed by default: who paid whom, and how much. That privacy gap became the opening for a new protocol rather than a small Bitcoin add-on.

  • Zcash inherited Bitcoin's monetary shape, but aimed to replace public exposure with cryptographic shielding.
  • The founding pitch was cypherpunk in spirit: privacy is not a feature layer, but part of economic freedom.
Technical detail

Official Zcash material frames the pivot clearly: the original Zerocoin concept began as a privacy extension for Bitcoin, then the team recruited more researchers and moved toward a standalone protocol. That shift matters because it explains why Zcash was designed as its own chain with native shielded value pools rather than as a wallet-side privacy trick.

Who created Zcash? z.cash What is Zcash? z.cash
2015 Origins Institution building

Zerocoin Electric Coin Company forms to build the protocol

The research thread became an operating company in 2015. Zerocoin Electric Coin Company was formed to turn the academic work into a production protocol, with a real launch target, software releases, audits, and an ecosystem strategy.

  • This was the moment the privacy thesis moved from paper design into engineering execution.
  • It also set up the governance tension Zcash would keep revisiting later: how much influence should an original builder retain?
Technical and organizational detail

Official Zcash history notes that the company formed in 2015 to create the protocol and then launched it in 2016. ECC's later roadmap posts describe this early period as a startup-style phase: rapid product execution first, with a recognition that the protocol would eventually need a more distributed stewardship model.

Who created Zcash? z.cash Electric Coin Company z.cash
October 28, 2016 Protocol Sprout

Zcash launches with Sprout

Mainnet went live on October 28, 2016. The launch proved that production money could use zero-knowledge proofs, even if the first generation was still expensive to use and hard to bring onto mobile hardware.

  • Zcash became the first project to deploy zk-SNARK privacy at real network scale.
  • Sprout was powerful but heavy, which meant usability would define the next phase of protocol work.
Technical detail

ECC's launch posts capture both ambition and constraint: Zcash was live, but the team immediately began iterating on the Sprout release series to improve stability and usability. The privacy primitive worked; the remaining challenge was to make shielded usage practical enough for normal users and wallets.

Who created Zcash? z.cash Electric Coin Company z.cash
February 21, 2017 Protocol Roadmap

The road from Sprout to Sapling becomes explicit

A few months after launch, ECC published the next stage: stabilize Sprout, then build Sapling for major efficiency gains. The message was that launch was only the opening chapter, not the finished design.

  • Sapling was framed as the upgrade that could bring shielded Zcash closer to everyday use.
  • 2017 also widened the institutional base around Zcash, including the formation of the Zcash Foundation.
Technical and governance detail

In "The Near Future of Zcash," ECC described Sapling as the first core cryptography upgrade, explicitly aimed at efficiency improvements and new protocol features. Around the same time, the Zcash Foundation was announced as the long-term nonprofit steward needed to avoid concentrating too much power in a single company.

Sapling upgrade z.cash Zcash Foundation z.cash
October 28, 2018 Protocol Sapling

Sapling activates at block 419200

Exactly two years after launch, the Sapling network upgrade activated on mainnet. It made shielded transactions dramatically lighter, which pushed Zcash privacy from "possible" toward "usable."

  • Sapling reduced proving costs enough to make mobile and wallet integration far more realistic.
  • The upgrade marked the first major proof that Zcash could evolve its cryptography without abandoning the chain.
Technical detail

ZIP-0205 defines Sapling activation on mainnet at height 419200. ECC's activation post framed the result in user terms: better performance, lower memory requirements, and a much more credible path to widespread shielded adoption.

ZIP 205 ZIPs Sapling upgrade z.cash
November 10, 2019 -> November 18, 2020 Governance Active

ZIP-1014 turns funding into a protocol-level governance question

ZIP-1014 proposed a new development fund after the original founders' reward era. When Canopy activated on November 18, 2020, that dev fund became consensus reality: miners still received 80% of issuance, while ECC, ZF, and Major Grants split the remaining 20%.

  • Zcash governance stopped being abstract and became encoded in block subsidy policy.
  • The arrangement funded continuity, but it also sharpened concerns about concentration, accountability, and long-term legitimacy.
Governance detail

ZIP-1014 was created on November 10, 2019 and remains marked Active. The Zcash Foundation's protocol decisions page records Canopy on November 18, 2020 as the major decision point that adopted the Dev Fund. That pairing matters: proposal in 2019, consensus activation in 2020, and then years of debate over whether direct organization funding should continue.

ZIP 1014 ZIPs Canopy upgrade z.cash Protocol agreements and major decisions ZF
May 31, 2022 Protocol Orchard

NU5 activates Orchard and removes trusted setup dependence

Network Upgrade 5 was the next big privacy leap. Orchard launched on mainnet using Halo-based proving, which removed reliance on complex setup ceremonies and opened a new cryptographic era for Zcash.

  • Orchard improved the security and sustainability story by ending dependence on a trusted setup for the new pool.
  • It also made Zcash feel less like a one-off privacy coin and more like a reusable proving stack with wider interoperability potential.
Technical detail

ZIP-0252 defines NU5 activation at mainnet block 1687104, which ECC tied to May 31, 2022. The Orchard protocol entered with ZIP-0224, while ECC's own announcement emphasized the bigger strategic point: Halo removed the trusted setup burden and positioned Zcash for better scalability and product usability.

ZIP 224 ZIPs ZIP 252 ZIPs NU5 activates on mainnet z.cash
August 26, 2024 -> post-November 2024 halving Governance Final

ZIP-1015 replaces direct org funding with ZCG plus a lockbox

ZIP-1015 marked a clear governance turn. Instead of continuing direct protocol funding for ECC and ZF, it routed 8% to Zcash Community Grants and 12% into an in-protocol lockbox, leaving future disbursement design to the community.

  • The development fund became more deferred and more decentralized, at least in intent.
  • The November 2024 halving and NU6 activation made the new non-direct funding model live on-chain.
Governance detail

ZIP-1015 is marked Final and was created on August 26, 2024. Its design is explicit about the tradeoff: keep funding flowing, but move away from direct payments to named US-based organizations. ECC's November 23, 2024 post framed NU6 as the start of that new era, with ZCG funded immediately and lockbox funds held until the community reaches consensus on how to release them.

ZIP 1015 ZIPs NU6 upgrade z.cash Network information z.cash
February 19, 2025 Governance Proposed

ZIP-1016 proposes a community and coinholder funding split

ZIP-1016 is not settled policy. It is a proposal for the next governance step: keep a community-directed grants stream, but give coinholders a distinct voice over a larger fund seeded by the deferred lockbox.

  • The proposal makes explicit that the lockbox was always a bridge, not a final governance destination.
  • It also shows how Zcash funding debates evolved from "who gets paid?" into "who should decide?"
Governance detail

ZIP-1016 is marked Proposed and was created on February 19, 2025. Its abstract describes a model where community grants and coinholder-directed decisions sit beside each other, rather than collapsing all authority into one body. It is a live governance path, not a final rule.

ZIP 1016 ZIPs Protocol agreements and major decisions ZF
January 2026 -> March 9, 2026 ZODL Institutional handoff

The ECC team leaves, forms ZODL, and keeps shipping

In January 2026, the entire ECC team left and formed Zcash Open Development Lab. On February 16, 2026, Zashi became Zodl. On March 2, 2026, Zodl launched on Android under the new brand. On March 9, 2026, ZODL announced more than $25 million in seed funding.

  • This was not just a rebrand; it was a restructuring of who carries wallet and protocol momentum forward.
  • The shift also aligned with the broader move away from direct protocol funding and toward market-backed execution.
Product and organizational detail

ZODL's official posts tie the sequence together directly: the company formed in January 2026, the wallet rebrand was announced on February 16, 2026, the Android rollout landed on March 2, 2026, and the seed raise was announced on March 9, 2026. The important continuity point is that the same team says it is still building both the flagship wallet experience and core protocol work around Zcash.

About ZODL zodl.com Zashi Is Becoming Zodl zodl.com Zodl Is Live on Android zodl.com ZODL Raises $25M+ in Seed Funding zodl.com
What stayed constant

Privacy stayed the mission. Everything around it changed.

Cryptography matured

Sprout proved shielded money could exist. Sapling made it practical. Orchard and Halo made it easier to trust and extend.

Governance decentralized by stages

The funding story moved from founders' reward to direct dev fund to lockbox and grant structures, with more emphasis on who decides and how.

Stewardship kept moving

The institutions changed names and shapes, but the core argument remained that private digital cash needs both open cryptography and durable builders.