Zcash’s original (“Sprout”) privacy system relied on zk-SNARKs, a kind of zero-knowledge proof that needs public parameters created ahead of time. A multi-party computation “ceremony” generated these parameters, designed so security holds as long as at least one participant destroyed their secret randomness. This was a key trust and security milestone before launch.
The Zcash mainnet launched (genesis block mined), introducing a privacy-focused cryptocurrency that supports shielded transactions using zk-SNARKs. This established the baseline “Sprout” era of the protocol and began real-world testing of privacy tech at scale. Early design choices, including the trusted setup and initial shielded system, shaped later upgrade priorities.
To support newer, more efficient zk-SNARK designs used by Sapling, the Zcash Foundation coordinated the “Powers of Tau” ceremony, a large multi-party computation that produced shared cryptographic parameters. The final parameters and transcript were published so the public could verify the process. This expanded and modernized the trusted-setup approach used for Zcash privacy proofs.
Overwinter was Zcash’s first network upgrade, introducing an explicit upgrade mechanism to make future changes safer to deploy. It also added features like transaction expiry to reduce stuck transactions in the mempool (the queue of unconfirmed transactions). Overwinter primarily prepared the network for the larger Sapling privacy upgrade.
Sapling activated as a major privacy and usability upgrade, introducing new shielded addresses and a more efficient proving system. It greatly reduced the computing and memory cost to create shielded transactions, making private payments more practical for wallets and users. Sapling became the foundation for later privacy protocol improvements on Zcash.
Zcash disclosed a serious counterfeiting vulnerability in earlier shielded cryptography that could have allowed creation of fake ZEC without detection. The project reported that Sapling fully remediated the issue and that there was no evidence it had been exploited. This disclosure highlighted how protocol upgrades can also serve as major security repairs.
Blossom changed Zcash’s block timing to improve user experience and scalability. It cut the target block time roughly in half (to about 75 seconds), so confirmations typically arrived sooner and network throughput increased. This marked a shift toward performance improvements alongside privacy work.
Heartwood added “Shielded Coinbase,” enabling miners to receive newly minted coins directly into shielded addresses, improving on-chain privacy around mining payouts. It also introduced Flyclient support, a technique aimed at making lightweight verification more practical for proof-of-work chains. Together, these changes strengthened privacy options and helped light clients interact with Zcash more efficiently.
Canopy activated at the same time as Zcash’s first block subsidy halving, cutting the newly minted reward per block. It also ended the original “Founders’ Reward” era and moved Zcash to a new development funding structure. This linked economic policy changes with a major protocol upgrade, affecting long-term incentives and governance.
By the early 2021 period, Sapling was the established shielded protocol used across Zcash wallets and infrastructure, and later network upgrades (Blossom, Heartwood, Canopy) had built on top of the Sapling era rather than replacing it. The roadmap focus shifted toward improving usability, scaling, and reducing long-term trust assumptions (e.g., through Halo 2 research). This consolidation stage matters because it shows Sapling’s role as the long-lived privacy layer during 2018–2021.
Electric Coin Company announced work toward integrating Halo 2, a zero-knowledge proving system aimed at removing the need for trusted setups in some designs. The proposal (via a reserved ZIP) framed Halo 2 as a path to more agile upgrades and potentially lower-cost proofs over time. This was an important research-to-roadmap milestone building on Sapling-era privacy foundations.
From 2016 to 2021, Zcash moved from an initial trusted-setup launch (Sprout) to a more usable and secure shielded system (Sapling), then layered in performance and economic-governance changes (Blossom, Heartwood, Canopy). The period closed with active work on next-generation proof systems (Halo 2) aimed at reducing setup trust and making upgrades easier. Taken together, these milestones show how privacy protocols matured through coordinated ceremonies, mandatory network upgrades, and security-driven redesigns.
Zcash Sapling upgrade and privacy protocol milestones (2016–2021)