Zilliqa has suspended all native transactions after discovering a vulnerability in its Ledger app that allows attackers to reconstruct users' private keys from blockchain data. The flaw, present since 2019, affects Schnorr signature generation for non-EVM Zilliqa transactions, compromising accounts with five or more signed transactions. Exploitation was observed on July 19, prompting exchanges like Upbit to freeze ZIL deposits and withdrawals. Zilliqa is coordinating a fix with Ledger and advises affected users to await further instructions.
Zilliqa has suspended its native ZIL transactions after discovering a critical flaw in its Ledger application that allows attackers to recover private keys from public transaction signatures. The vulnerability affects all versions of the app from 201...
Zilliqa discovered a critical vulnerability in its Ledger app that exposes private keys after about five native transactions, leading to a suspension of all native ZIL transactions. The flaw, caused by a nonce generation error in Schnorr signatures, ...
Zilliqa (ZIL) has been flagged as a cautionary asset by South Korean exchange Upbit due to a critical vulnerability in its Ledger wallet app. The flaw allows private keys to be recovered from public signatures after about five native transactions, pu...
A critical bug in Zilliqa's Ledger hardware wallet app, present since 2019, allowed attackers to recover private keys from just five on-chain signatures. The flaw, related to nonce generation in the app, was detected being exploited on July 19, 2026,...
On July 20, 2026, Zilliqa revealed that ZIL tokens were stolen from an offline cold wallet managed by a centralized exchange partner. This rare breach of a cold wallet, typically highly secure, raises concerns about vulnerabilities in third-party cus...
