Zcash will only ever issue 21 million coins, the same ceiling Bitcoin uses, and it arrives through the same halving schedule on the same roughly four-year rhythm. Blocks come eight times more often, and the halving interval was scaled to match, so the calendar holds. What differs is that a new coin does not go entirely to whoever mined it.
That is where most explanations stop short. A share of every newly issued coin is directed elsewhere by the network's own rules, and who receives that share has been rewritten more than once since launch.
So the durable parts of this subject are the shape and the mechanism. The percentages are not.
The cap, and where the number came from
Twenty-one million is not a figure Zcash arrived at independently. The chain was built from the Bitcoin codebase, and the supply ceiling came across with it, along with the halving structure that governs how coins reach that ceiling. The project states as much plainly, and so does Bitcoin's own documentation.
The supply is fixed at 21 million and the inflation schedules are the same (source: Electric Coin Co.). That framing is worth taking literally rather than as marketing. It is an inherited parameter, not a design decision made on its own merits, and the interesting questions on this chain are the ones where the inheritance stops. There are two of them, and they arrive in the next two sections.
A ceiling on its own is also a weaker claim than it sounds. It tells you how many coins can ever exist. It says nothing about how many exist today, how quickly the remainder arrives, or who receives them along the way. Those are three separate questions and the cap answers none of them.
The lineage is easy to check on the origin chain, where the same ceiling and the same halving structure are documented. That is the same sentence a reader could write about Zcash, which is the point.
The difference is what sits underneath. Two chains can share a ceiling and a curve and still put a holder in a different position, because a schedule is only half a schedule until you know the clock it runs on and who collects along the way. Our guide to the 21 million Bitcoin supply works through the origin case in depth, and the reasoning transfers because the parameter is the same one.
The timeline transfers too, and that surprises people. The next section shows why, because the reason is a deliberate design choice rather than a coincidence.
How new coins arrive, and how that rate falls
New coins are created with each block and paid out as part of it. That payment is the block subsidy. It does not stay constant: at fixed intervals it halves, so issuance falls in steps rather than tapering smoothly. The pattern repeats until the subsidy rounds away and the cap stands as the ceiling.
| Property | What it means here |
|---|---|
| Issuance event | Every block, as part of the block itself |
| Rate change | Halves at fixed intervals, so the curve is a staircase rather than a slope |
| Direction | Only downward. The schedule has no mechanism to increase issuance |
| Endpoint | Issuance stops when the subsidy rounds away, leaving the cap as the ceiling |
| Who sets it | Consensus rules, not a company or a foundation |
The subsidy is a protocol quantity with a defined value at every height rather than a figure anyone sets by hand, and the specification fixes both it and the interval it halves on as named constants (source: Zcash Protocol Specification). The table is the whole mechanism, and the last row is the one people skip. The subsidy itself is a protocol quantity with a defined value at every height, not a figure anyone sets by hand. Nobody decides each year how many coins to issue. The rule sits in the software every node runs, and changing it means changing that software everywhere at once, which is a different kind of problem from changing a policy.
The staircase shape produces a result that surprises people: issuance is heavily front-loaded. Far more coins are created in the early intervals than the late ones, because each interval issues half what the one before it did. Most of a fixed-supply asset's issuance therefore happens long before the cap is anywhere near reached, which means the dilution a holder experiences is highest early and falls away steeply.
That also explains why halvings attract attention out of proportion to their immediate effect. Each one is a step change in the rate at which new supply enters, and there are only so many steps before the remaining issuance stops being material. Our guide to how the Bitcoin halving works covers the mechanics in more depth than belongs here, and the halving on this chain has its own guide with the intervals set out.
Which raises an obvious question, given that Zcash produces blocks far more often than Bitcoin.
Faster blocks, and why the calendar still matches
The schedule is measured in blocks, not years, so a faster block rate would normally compress the calendar. It does not here. When the block target was shortened, the halving interval in blocks was multiplied by the same factor, which holds the emission schedule at roughly the same rhythm as Bitcoin's.
The block target is fixed in the specifications rather than left to chance. A network upgrade shortened it to 75 seconds, and that same proposal states its intent directly: the emission schedule would be approximately the same in terms of time, with the per-block emission adjusted to account for the change. Bitcoin adds a block roughly every ten minutes on average (source: Bitcoin Project), so Zcash produces about eight blocks for each Bitcoin block.
The mechanism is arithmetic rather than approximation. The same proposal that shortened the block target sets the new halving interval by multiplying the old one by the ratio the spacing shrank, so the block count rises by exactly the factor the block time fell. Multiply either pair out and the same number appears.
Every figure in the diagram is a protocol constant, so it does not date the way a subsidy figure would.
| Configuration | Halving interval | Block target | Interval in seconds |
|---|---|---|---|
| Zcash, before the upgrade | 840,000 blocks | 150 seconds | 126,000,000 |
| Zcash, after the upgrade | 1,680,000 blocks | 75 seconds | 126,000,000 |
Both rows land on the same figure, which is a little under four years. The block rate doubled and the calendar never moved, because the interval absorbed the change. That is the whole mechanism, and it is derivable from the specification's own constants without reference to any other chain.
So the Bitcoin-shaped intuition is right about the timeline and wrong about the reason. Faster blocks do not pull the schedule forward, because the interval absorbed the change. What faster blocks buy is lower latency and more transactions per unit of time, which is what the upgrade was for. Anyone who reasons from block speed to a compressed emission curve has skipped the step where the interval was rescaled to prevent exactly that.
None of which says who receives a new coin.
Where a new coin actually goes
Not all of it goes to the miner. A portion of every block subsidy goes to funding streams defined in the consensus rules. Those streams route part of the issuance toward development and grant recipients rather than to whoever produced the block.
That reframes the asset. On most proof-of-work chains the newly issued coin is payment for the work of securing the network and nothing else, which our guide to what mining actually does sets out. Here the work takes the majority and the remainder is allocated elsewhere by rule.
The arrangement has a documented history rather than a fixed value. One specification established a development fund with named categories of recipient. A later one changed how that allocation works, introducing a deferred portion held rather than paid out immediately (source: Zcash Improvement Proposals). The consensus rules governing the fund carry a revision status in the specification repository, which is that repository's own way of recording that a rule has been rewritten.
This is why this guide gives you no percentages. Any split you read carries the date of the page it sits on. The highest-ranked page for this subject still names a category of recipient that a network upgrade retired (source: CoinMarketCap). A well-maintained encyclopedia entry carries a different split, scoped to the era between one upgrade and the first halving (source: Wikipedia). Neither is careless. Both are older than the rule they describe.
What survives is the structure. A majority goes to the miner. The remainder is allocated by a rule whose recipients have changed and can change again. If you need the current figure, read it from the specification repository at the moment you need it, and note which upgrade it applies to.
That split is not a policy someone announced. It is a rule.
Why the split is written into the rules
Funding written into consensus is a different animal from funding agreed between organizations. An off-chain arrangement depends on the parties honoring it. A consensus rule is enforced by every node that validates a block. A block paying the wrong allocation is simply invalid. The network discards it, and nobody has to object.
The enforcement itself is ordinary proof of work validation, which is what makes the rule binding rather than advisory. That gives the arrangement two properties at once, and they pull against each other.
It is durable. Nobody can quietly stop paying it, no single party can redirect it, and the rule keeps executing whether or not the people who wrote it are still involved. For a project that expects to outlive its founding organizations, that is the point.
It is also contested, for exactly the same reason. Because the allocation lives in the rules, changing it requires the same process as any other consensus change, which turns a funding question into a protocol question. Debates about who should receive what become debates about what the network is for, and they are settled by the same mechanism that settles cryptographic changes. Our guide to how Monero is governed sets out the alternative on a chain that made a different choice.
The contrast worth drawing is that both arrangements are deliberate, and each buys something at a cost. Monero answered the end-of-issuance question by never ending issuance. Its block rewards will not drop to zero. After the schedule wound down they settled at a small fixed amount per block (source: Monero Project). That is a permanent, mild dilution bought in exchange for permanent security funding. Zcash kept the hard cap and funds development from the issuance that exists while it lasts. Our guide to Monero's tail emission works through that design properly.
Which leaves the question a holder actually asks.
How to check any of this yourself
Every figure above is published, which means none of it needs taking on trust. Four checks, in the order that makes them easiest.
Start with the cap and the schedule. The protocol specification states the maximum supply and the issuance curve in normative language, and it is the document every other source is paraphrasing. Everything downstream of it, including this page, is a reading of that text.
Then check the current issued supply. The project publishes a network page carrying the circulating figure alongside the pool balances, and dividing one by the other gives you the public and private split without any intermediate step. If a number here disagrees with that page, the page is right and this one is stale.
Then check the block height and the reward. A block explorer shows the height the chain is at right now, and the reward for a recent block shows what issuance currently pays per block. Multiplying the per-block reward by the number of blocks in a day gives daily issuance, which is a figure almost nobody publishes directly and which anyone can compute in about a minute.
Then check where the non-miner share goes. The allocation is written into a consensus rule rather than into anyone's policy document, and the rule names the recipients and the proportions (source: Zcash Improvement Proposals). That is what makes the split checkable rather than promised.
The habit worth forming from those four is narrower than the arithmetic. Supply claims about any asset are either derived from a document that anyone can read, or they are not. When they are not, the number is somebody's assertion regardless of how precise it looks.
What this means if you hold ZEC
Three quantities get confused with one another, and separating them is most of the value in understanding any supply schedule. The cap, the circulating supply and the reachable supply are different numbers answering different questions, and only the first is a protocol constant.
The cap is the ceiling: the most that can ever exist. It does not move, and it is the only one of the three you can state without a date attached.
The circulating supply is how much exists now. It rises with every block, quickly at first and slowly later. The project publishes the running figure rather than leaving it to be inferred (source: Electric Coin Co.). It approaches the cap without arriving for a very long time.
The reachable supply is how much can actually move, and on this chain that is a genuinely separate question rather than a rounding note. Coins sit in states with different visibility. Coins are lost permanently when keys are lost. Any issuance figure counts what was created rather than what is available. Anyone reasoning about scarcity from the cap alone is working from the least informative of the three.
The practical consequence for a holder is narrow and worth stating plainly. Issuance dilutes existing holders. The dilution rate falls in steps and only ever falls. The steps land on roughly the same four-year rhythm as Bitcoin's, so a Bitcoin-shaped intuition about timing is a reasonable guide here, which is not true of most things on this chain. That is a supply fact. It is not a price argument, and our guide to building a crypto portfolio is a better starting point than any supply chart for deciding what to do about it. If you do hold, custody choices for investors matters more to your outcome than the issuance curve does.
The schedule reaches a venue's customers far more slowly than they expect. New supply enters block by block and in public, so it is one of the few things about this asset that nobody has to discover; what actually moves a position is liquidity and access. BloFin lists ZEC on both books, spot and perpetual, so issuance reaches the venue as coins as well as contracts, and the distinction between the two is set out in our guide to spot versus perpetual futures.
Before drawing a conclusion from any of it, note what it does not tell you.
What the supply schedule leaves out
A fixed cap is a fact about issuance and nothing else. It does not price the asset, does not measure what exists today, and does not fix how new coins are shared out. Four inferences get drawn from it anyway. Each is repeated confidently, and each costs somebody something real.
| What people infer | What the schedule actually says |
|---|---|
| A capped supply makes the asset scarce | It caps issuance. Scarcity also needs demand, which no rule addresses |
| A capped supply supports the price | Supply is one input, and this schedule has been public since launch |
| The published breakdown is how it works | The allocation is a consensus rule carrying a revision status, so any named recipient carries a date (source: Zcash Improvement Proposals) |
| The cap tells me how much exists | It gives the ceiling. Circulating and reachable supply are separate |
Each row also carries a consequence the table has no room for.
The first does the most damage, because it sounds like arithmetic rather than an argument. A ceiling on issuance is a statement about one side of a market, and plenty of assets have tiny fixed supplies and no demand at all. Our guide to fixed supply against fiat inflation works through why that comparison is narrower than it is usually made to sound.
The second follows from the first and fails for an additional reason. The schedule is not news. It has been published and unchanged in shape since launch. Nobody gains an edge from knowing it. A fact available to everyone for a decade is already in whatever price exists.
The third is the practical one, and it is why this guide names no percentages anywhere. Two of the highest-authority pages on this subject currently disagree about the split, and both are accurately describing real arrangements from different points in the chain's history.
The fourth quietly distorts every calculation built on it. A cap is a ceiling, not an inventory, and treating the two as interchangeable produces confident numbers that are wrong by whatever the difference happens to be.
There is also a plainer point that has nothing to do with Zcash specifically. Every supply schedule is a claim about the future made by people who cannot see it, and the only part that binds is the part written into the rules. Everything else is a plan, and plans get revised.
Frequently asked questions
Is Zcash inflationary?
It depends which quantity you mean, and the word does more harm than good here. New coins are still issued, so the circulating supply grows, which is inflation in the narrow sense. The rate at which it grows falls in steps and only ever falls, so the inflation rate declines toward zero over time. And the total is capped, so it is not inflationary in the sense of an open-ended money supply. Three different answers, all correct, depending on which question is actually being asked.
Will all 21 million ever exist?
Effectively yes, but the last coins arrive extraordinarily slowly. Because the subsidy halves repeatedly, each interval issues half as much as the one before, so the remaining supply is approached in ever-smaller increments rather than in a final payment. Coins are also lost permanently whenever keys are lost, which no schedule accounts for and no rule can recover. In practice the circulating supply converges toward the cap without a meaningful moment of arrival, and the shape of that approach matters far more than the endpoint.
Does the supply cap make ZEC scarce?
Not on its own. A cap limits how much can ever be issued, which is one half of what scarcity means; the other half is how much people want, and no protocol rule addresses that. Plenty of assets have fixed or tiny supplies and almost no demand. Treat the cap as a durable, verifiable fact about issuance and a weak foundation for any argument about value: it is one input among several rather than the conclusion people often make it.
What happens to issuance when the schedule runs out?
Block rewards stop and the network has to be paid for another way, which on a proof-of-work chain means transaction fees carrying the cost of security alone. Bitcoin's own documentation expects miners to be supported exclusively by transaction fees once issuance halts, so this is a shared open question rather than a Zcash-specific one. It is also why some chains chose a small permanent issuance instead. Far enough off that no current holder is affected, near enough to be worth knowing about.
Can the supply cap be changed?
In principle any consensus rule can change, since the rules are software that participants run by agreement rather than law handed down. In practice the cap is the least likely parameter to move, because it is the one most holders believe they are buying, and changing it would break that expectation openly. The funding split has already been rewritten more than once, which is a useful demonstration of the difference between what is technically changeable and what is politically changeable.
Researched and written by the BloFin Academy editorial team with AI-assisted drafting. Primary sources include the Zcash Improvement Proposals repository, the Bitcoin Project documentation, and the Monero Project documentation. All facts independently verified against cited documentation current as of August 2026. Issuance figures and funding-split percentages change with network upgrades, so read the current values from the specification repository rather than from any article, including this one.
This article is for educational purposes only and is not financial advice. Cryptocurrency is volatile and you can lose money. Regulatory treatment of privacy assets differs by jurisdiction and changes over time. Do your own research before making any decision.