Zilliqa has suspended its native ZIL transactions after discovering a critical flaw in its Ledger application that allows attackers to recover private keys from public transaction signatures. The vulnerability affects all versions of the app from 2019 to 2026 and compromises accounts that signed about five or more native transactions with Ledger devices. While EVM transactions remain unaffected, Zilliqa is working on a recovery plan and has prepared a corrected Ledger app build. Meanwhile, exchanges like Upbit have placed ZIL under caution and suspended deposits and withdrawals to protect users.
Zilliqa has suspended all native transactions after discovering a vulnerability in its Ledger app that allows attackers to reconstruct users' private keys from blockchain data. The flaw, present since 2019, affects Schnorr signature generation for no...
Zilliqa discovered a critical vulnerability in its Ledger app that exposes private keys after about five native transactions, leading to a suspension of all native ZIL transactions. The flaw, caused by a nonce generation error in Schnorr signatures, ...
Zilliqa (ZIL) has been flagged as a cautionary asset by South Korean exchange Upbit due to a critical vulnerability in its Ledger wallet app. The flaw allows private keys to be recovered from public signatures after about five native transactions, pu...
A critical bug in Zilliqa's Ledger hardware wallet app, present since 2019, allowed attackers to recover private keys from just five on-chain signatures. The flaw, related to nonce generation in the app, was detected being exploited on July 19, 2026,...
On July 20, 2026, Zilliqa revealed that ZIL tokens were stolen from an offline cold wallet managed by a centralized exchange partner. This rare breach of a cold wallet, typically highly secure, raises concerns about vulnerabilities in third-party cus...
