Nobody knows how many zcash tokens actually exist. Shielded assets like zcash are hard to audit. In March 2019, an infinite mint bug was detected in zcash shielded assets. It was fixed in October 2019 but there is no guaranteed way to tell if the bug was ever exploited.(Mudit Gupta)