A critical bug in Zilliqa's Ledger hardware wallet app, present since 2019, allowed attackers to recover private keys from just five on-chain signatures. The flaw, related to nonce generation in the app, was detected being exploited on July 19, 2026, prompting Zilliqa to suspend all native ZIL transactions. This vulnerability affects only the Ledger app software layer, not Zilliqa's blockchain or Ledger hardware. Exchanges like Upbit have halted ZIL deposits and withdrawals, and users are advised to retire compromised keys and wait for a secure fix from Zilliqa and Ledger before moving funds.
On July 20, 2026, Zilliqa revealed that ZIL tokens were stolen from an offline cold wallet managed by a centralized exchange partner. This rare breach of a cold wallet, typically highly secure, raises concerns about vulnerabilities in third-party cus...
Zilliqa announced that a security breach occurred at one of its partner exchanges, resulting in the theft of ZIL tokens from a cold wallet. The team is actively investigating the incident with the affected parties to determine the cause and full impa...
Zilliqa revealed that an unnamed exchange partner experienced a security breach resulting in the theft of ZIL tokens from a cold wallet. To prevent further losses, Zilliqa has asked all exchanges to suspend ZIL deposits and withdrawals while investig...
