❯Privacy

Turnstile Audit

Every shielded pool is sealed by a turnstile: value can only enter or leave by crossing into the transparent layer, and a pool can never hold less than zero. That single rule is the only on-chain surface where counterfeit notes would ever show. This page checks it, every pool, every day — and is honest about what the softer signals can and cannot say.

▍Integrity index

live

Weighted composite of the four components on the right. A turnstile breach is the only hard proof and pins the index to zero; the other three are confounded by ordinary behaviour and can only ever lower it into the inconclusive band.

▍Components

Turnstile breachproofcleanweight 0.40 · score 100

No pool has ever paid out more than it received (0 breach-days across 4 pools).

Post-disclosure draincleanweight 0.25 · score 100

Orchard deshielding averaged 19,094 ZEC/day in the 30 days after 2026-06-05 vs 20,414 in the 90 days before (z = -0.16).

Masked-deshield signaturecleanweight 0.15 · score 99

25.4% of Orchard days (386 of 1520) saw deshields of at least 95% of that day's shielding — a pattern that would hide a slow drain, but also describes ordinary exchange churn.

Benford first-digit fitinconclusiveweight 0.20 · score 74

χ² = 23.3 across 1566 daily outflow values (8 df; 15.5 is the 5% line). Fabricated or throttled outflows tend to bunch first digits.

Read this before the numbers

In June 2026 a value-balance flaw in the Orchard proving circuit was disclosed and fixed. Because Orchard hides note values, nobody can say from the outside whether it was exploited before the fix. Counterfeit value would only become visible at the moment it tried to leave the pool — the turnstile check — and the sharpest attack would hide that exit under legitimate inflows. The soft signals below are built to look for that shape. None of them can prove innocence; only the turnstile can prove guilt.

▍Every pool, hard facts

Computed from the node's per-block value pools. Gap should read 0.00 ZEC: inflows minus outflows must equal the balance exactly.

Pool	Active since	Balance	Lowest balance ever	Ever negative	Cumulative in	Cumulative out	Out ÷ in	Flow − balance gap
Sprout	2016-10-29	22,534 ZEC	277 ZEC 2016-10-29	no	911,356 ZEC	888,822 ZEC	97.5%	-0.00 ZEC
Sapling	2018-10-28	521,613 ZEC	965 ZEC 2018-10-28	no	12,612,619 ZEC	12,091,006 ZEC	95.9%	0.00 ZEC
Orchard	2022-05-31	467,332 ZEC	426 ZEC 2022-05-31	no	15,018,240 ZEC	14,550,908 ZEC	96.9%	-0.00 ZEC
Ironwood	2026-07-29	3,880,322 ZEC	175,877 ZEC 2026-07-29	no	4,446,478 ZEC	566,156 ZEC	12.7%	0.00 ZEC

▍Cumulative in versus out

The out line may approach the in line but can never cross it. Switch pools with the chips.

Pool

ZECSCOPE

▍Net flow around the disclosure

Daily net flow (7-day mean) with the fix and the public disclosure marked. A drain that started between the two would be the signature of someone who knew.

Pool

ZECSCOPE

▍Orchard deshield / day, 90d before

20,414 ZEC

▍Orchard deshield / day, 30d after

19,094 ZEC

▼ 6.5%

▍Drain z-score

-0.16

vs pre-disclosure variance

▍Masked-deshield days

386 / 1520

25.4% of Orchard days

▍Benford first-digit test

χ² 23.3 · limit 15.5

Daily Orchard outflow values (1,566 days) against the logarithmic first-digit distribution that natural, multiplicative quantities follow. Throttled or fabricated outflows bunch on a few leading digits. This is a weak test — but a cheap one, and it is free to be clean.

▍Largest single-day Orchard exits

Date	ZEC out	USD	Share of pool	Price move
2026-07-28	145,223 ZEC	$78.34M	3.7%	+5.4%>5%
2026-08-06	60,095 ZEC	$30.28M	2.4%	-2.0%
2026-08-07	55,913 ZEC	$28.11M	2.4%	-0.2%
2026-08-03	54,955 ZEC	$31.11M	1.8%	+4.8%
2026-07-19	51,067 ZEC	$29.47M	1.3%	-7.1%>5%
2026-08-04	50,080 ZEC	$26.75M	1.8%	-5.6%>5%
2026-02-23	48,094 ZEC	$12.95M	1.4%	-1.1%
2026-08-09	46,844 ZEC	$22.94M	2.3%	-2.2%
2026-07-29	46,818 ZEC	$25.10M	1.3%	-0.6%
2026-02-21	46,095 ZEC	$12.44M	1.3%	-0.6%
2026-05-15	43,439 ZEC	$22.75M	1.2%	+0.1%
2026-08-08	43,024 ZEC	$21.55M	2.0%	-0.4%
2026-08-10	42,976 ZEC	$19.48M	2.3%	-7.4%>5%
2026-04-04	42,271 ZEC	$12.72M	1.2%	+5.2%>5%
2026-07-31	42,075 ZEC	$23.54M	1.2%	+2.8%

Big exits that coincide with big price moves are the market, not an exploit. Big exits on quiet days are the ones worth a second look.

Method and JSON: GET /api/v1/turnstile · related: Pool Migration, Net flow by pool.