Beware the Jubjub bird
A nonsense creature from Lewis Carroll became the title-page emblem of the Zcash protocol, then the name of an elliptic curve inside Sapling, then — separately — a Solana meme. This page is about that chain of meanings.
7tFbGa9wt4Q4yxNAdaDcTKahv4WPrJtXh6ty7gjWyKx3
8myc52qh4zCDWXBnW9UxbJMs1cu6aNMcsa4VCK5Hw9R3
What the drawing means
The jaws that bite, the claws that catch!
Beware the Jubjub bird, and shun
The frumious Bandersnatch!” — Lewis Carroll, Jabberwocky, 1871
The Jubjub is not a corporate mascot in the original sense. It is a warning inside a poem that pretends to be nonsense and is actually a machine for making meaning without definitions. Carroll never describes the bird. The name is the creature.
In 1902 Peter Newell drew it for Harper’s edition of Through the Looking-Glass: a gangly, startled fowl on stilts, wings half-raised, as if it had been asked a question it did not intend to answer. The Zcash protocol specification puts a descendant of that drawing on its title page. The spec itself credits the image:
“Jubjub bird image credit: Peter Newell 1902; Daira-Emma Hopwood 2018.”
Hopwood’s 2018 edit removed the background and the Bandersnatch, restored a clipped wing, and set the bird in a fedora. Formal, slightly ridiculous, exact. That is the tone of the spec.
Why a bird on a math paper
Zcash names curves after Carroll. Jubjub, Baby Jubjub, Bandersnatch, Tweedledee, Tweedledum. The joke is serious: these are the shapes that make shielded money possible. Putting the bird on page one says the document is literature as well as law.
What the hat is doing
The hat is costume. Privacy is costume in the other direction: you keep the person and hide the trail. The bird looks at you. The protocol looks away. Both are forms of poise.
What Jubjub means in the protocol
In the Sapling upgrade, Jubjub is a complete twisted Edwards elliptic curve designed to be cheap inside a zk-SNARK circuit. The spec introduces it with another Carroll quote, this time from The Hunting of the Snark:
You condense it with locusts and tape:
Still keeping one principal object in view—
To preserve its symmetrical shape.”
That is the whole engineering brief. Keep the shape. Hide the value. The curve’s group is used for Sapling key agreement, note commitments, RedJubjub signatures, and the hashes that turn diversifiers into points. Orchard later moved this role to Pallas/Vesta so proofs could recurse. Jubjub remains the older shielded pool’s skeleton.
| Object | Role |
|---|---|
| Jubjub | Embedded curve for Sapling arithmetic in-circuit |
| Form | Complete twisted Edwards, also a Montgomery form |
| a, d | a = −1, d = −10240/10241 (mod q) |
| Cofactor | 8 |
| RedJubjub | RedDSA instantiated on Jubjub |
| ZIP 216 | Canonical Jubjub point encodings |
So the word has two official lives: a bird that cannot be defined, and a curve that must be defined down to the last bit. The protocol is the place those two lives were allowed to share a name.
What the token is — and is not
The mint below is a Solana Token-2022 coin that borrowed the name and the picture. It is not issued by the Electric Coin Company, the Zcash Foundation, Shielded Labs, or the authors of the protocol spec. “Official mascot” is a meme sentence, not a license.
People trade it against wrapped ZEC because the joke is tighter that way: the bird that stands on the spec, priced in the asset the spec specifies. That is all the poetry the market needs. The rest is supply, fees, and whoever still holds the metadata key.
| Field | Snapshot |
|---|---|
| Name / ticker | Zcash Official Mascot / JUBJUB |
| Chain | Solana |
| Program | Token-2022 (metadata + transferFeeConfig) |
| Supply | ~1,000,000,000 |
| Launch | Raydium LaunchLab, paired with ZEC |
| Explorer notes | Mutable metadata. Treat every print as stale. |
SIMULATED TAPE
How to read it
If you came for Zcash, read the spec. If you came for the drawing, look at Newell. If you came for a ticker, paste the mint and assume you can lose the money. The bird does not endorse the pool.