The ledger shows 11.96 million ZEC sitting in transparent addresses. That is approximately 70% of the 16.98 million coins currently in circulation, and it is the most consequential figure in Zcash's post-quantum roadmap — not because it validates the upgrade, but because it quantifies precisely how much of the network the upgrade will not touch.
Contrary to the prevailing narrative, Zcash's post-quantum signature work does not make the network quantum-resistant. It makes one half of it quantum-resistant: the transparent half. The shielded pool — the entire reason Zcash exists as a distinct asset — remains exposed.
I have spent the better part of a decade tracing wallet clusters and dissecting incentive structures, and I have learned to distrust a headline the moment it overstates its own scope. The announcement reads as a cryptographic milestone. The architecture reads as a phased retrofit, scoped to the simplest transaction type on the chain. Both descriptions can be true simultaneously. Only one of them is being marketed.
Mapping the yield vectors before the Summer peak has always meant reading the structure before the story. So let us read the structure.
Context
Zcash launched in 2016 as the first production implementation of zk-SNARKs, a zero-knowledge proof system that allows a transaction to be validated without revealing sender, receiver, or amount. The network offers two transaction types: transparent transactions, which behave like Bitcoin and expose addresses and values on-chain; and shielded transactions, which conceal them. This duality was a deliberate regulatory compromise — it lets exchanges process transparent addresses under existing compliance frameworks while preserving an opt-in privacy mode.
The post-quantum (PQ) upgrade introduces new signature opcodes that verify hash-based signatures rather than the elliptic-curve signatures (ECDSA/Schnorr) that secure the transparent pool today. Hash-based schemes such as SPHINCS+ and Winternitz derive their security from the collision resistance of hash functions — a conservative, well-reviewed assumption that does not collapse under Shor's algorithm. This is a generational difference from ECC signatures, which rest on the discrete-logarithm problem that a sufficiently large quantum computer would break.
The engineering is attributed to Roman Akhtariev, working under an entity called "Zakura." The source material does not disclose Zakura's funding, governance standing, or relationship to Electric Coin Company (ECC) and the Zcash Foundation — a gap that matters more than it first appears. A network-level cryptographic upgrade led by an unidentified development body carries execution and accountability risk that a headline cannot capture.
Separately, and technically independent of the PQ work, a "Private Queries" tool has shipped in experimental form inside the Vizor wallet. It addresses a real and underappreciated leak: when a wallet queries a server for its balance, it exposes address linkage. Private Queries mitigates that. It is, notably, the only component of this announcement that is actually live.
There is no confirmed network activation date. The target is January. That is a roadmap commitment, not a delivered fact.
Core Insight
Here is where the on-chain evidence chain diverges from the press release.
Start with the pool distribution. Of 16.98 million ZEC issued against a hard cap of 21 million, roughly 11.96 million — about 70% — sit in the transparent pool, with approximately 5.02 million (about 30%) in the shielded pool. These figures are being used as a justification: because the transparent pool holds the majority of funds, protecting it first is the pragmatic choice. That logic is defensible. It is also an admission.
The 70/30 split is not a strength. It is a confession that Zcash's privacy narrative has never been validated by demand. After nine years, the overwhelming majority of the asset has never entered the shielded pool at all. The privacy feature that distinguishes Zcash from Bitcoin is used by a minority of a minority. The transparent pool's dominance is being repackaged as engineering prudence when it is, at root, evidence of adoption failure.
Now the harder problem. The shielded pool's quantum exposure cannot be patched with a signature opcode, because the shielded pool's security rests on zk-SNARKs built over elliptic curves — Halo 2's Pasta curves, in Zcash's case. Post-quantum-ifying the shielded pool means replacing the entire proof system, not adding a verification opcode. That is a multi-year program of cryptographic research, not a January release. The upgrade's timeline covers only the simpler half of the problem, and the framing does not say so.
Then there is block bloat. Hash-based signatures — SPHINCS+, Winternitz, and their relatives — are orders of magnitude larger than ECC signatures. A single SPHINCS+ signature can run into the tens of kilobytes; ECC signatures are measured in dozens of bytes. Multiply that across every transparent transaction in a block and you get a block-size problem the source material never mentions. Unless Zcash adjusts block parameters or fee markets in tandem, the PQ upgrade imports a throughput and cost regression into the transparent pool it is trying to protect. That omission is not a detail. It is a structural gap in the plan.
Here is what I would actually verify, based on the methodology I used during my 2017 ICO forensics work: I traced fund flows by clustering wallets and watching transaction velocity, because teams consistently overstated what their code did and understated where the value sat. The same discipline applies here. Watch the activation commit. Watch the block-parameter proposal. Watch for an independent audit. None of those are confirmed in the announcement.
The one concrete deliverable — Vizor's Private Queries — is a wallet-layer privacy fix, not a consensus-layer one. It is genuinely useful. It is also a passenger on the PQ narrative, not part of it.
Contrarian Angle
The ledger does not lie, only the narrative does. And this narrative has been carefully assembled.
Consider the sequencing. Justin Drake's warning that quantum machines could break wallet security "in months, not years" has been amplified across crypto media. That claim is highly speculative and lacks verifiable evidence, yet it functions as the fear backdrop against which Zcash's upgrade is positioned as the solution. A crisis and its remedy, packaged together. This is narrative engineering, not coincidental timing.
The real gap is between the implied scope — "Zcash adds post-quantum signatures," read by most audiences as full quantum resistance — and the delivered scope, which is transparent-pool-only, with no activation date and no audit. That is the largest expectation gap in this story, and it is invisible in the headline.
Do not confuse correlation with causation here. The presence of a quantum warning adjacent to a PQ upgrade does not mean the upgrade neutralizes the threat. It means the threat is being monetized as a narrative catalyst. The honest mechanism behind PQ migration is "harvest now, decrypt later" — adversaries recording encrypted traffic today to decrypt once quantum hardware matures. That is a legitimate, long-horizon concern. It is not a January concern, and it is not solved by protecting the transparent pool.
There is a second-order risk worth naming: "post-quantum" is graduating from a technical topic into an investable narrative track for 2025-2026. If Zcash delivers first, it earns a narrative-anchor premium regardless of fundamentals. If it slips past January, the same narrative reverses into a sell-the-news vacuum.
Takeaway
Watch three signals over the next quarter: the activation commit, the block-parameter proposal that hash-based signatures will force, and any independent audit. If January passes without the first, the narrative cools fast. If the block-size question goes unanswered, the upgrade protects the transparent pool by degrading it. Which of those outcomes the market is actually pricing — the milestone, or the retrofit — is the question nobody is asking yet.