Zilliqa discovered a critical vulnerability in its Ledger app that exposes private keys after about five native transactions, leading to a suspension of all native ZIL transactions. The flaw, caused by a nonce generation error in Schnorr signatures, allows attackers to reconstruct private keys from on-chain signatures. While EVM transactions remain safe, affected wallets must retire compromised keys as a patched app cannot fix past exposures. South Korean exchange Upbit has flagged ZIL as a cautionary asset, suspending deposits and withdrawals and warning of possible delisting if the issue isn't resolved by August.
Zilliqa (ZIL) has been flagged as a cautionary asset by South Korean exchange Upbit due to a critical vulnerability in its Ledger wallet app. The flaw allows private keys to be recovered from public signatures after about five native transactions, pu...
A critical bug in Zilliqa's Ledger hardware wallet app, present since 2019, allowed attackers to recover private keys from just five on-chain signatures. The flaw, related to nonce generation in the app, was detected being exploited on July 19, 2026,...
On July 20, 2026, Zilliqa revealed that ZIL tokens were stolen from an offline cold wallet managed by a centralized exchange partner. This rare breach of a cold wallet, typically highly secure, raises concerns about vulnerabilities in third-party cus...
Zilliqa announced that a security breach occurred at one of its partner exchanges, resulting in the theft of ZIL tokens from a cold wallet. The team is actively investigating the incident with the affected parties to determine the cause and full impa...
Zilliqa revealed that an unnamed exchange partner experienced a security breach resulting in the theft of ZIL tokens from a cold wallet. To prevent further losses, Zilliqa has asked all exchanges to suspend ZIL deposits and withdrawals while investig...
