Zilliqa (ZIL) has been flagged as a cautionary asset by South Korean exchange Upbit due to a critical vulnerability in its Ledger wallet app. The flaw allows private keys to be recovered from public signatures after about five native transactions, putting affected accounts at risk. As a result, ZIL deposits and withdrawals are suspended on Upbit, and trading support may be terminated if the issue is not resolved. The vulnerability affects only native Zilliqa transactions signed via Ledger, with EVM transactions unaffected. Zilliqa is working on remediation and has retired compromised keys to prevent further losses.
Zilliqa discovered a critical vulnerability in its Ledger app that exposes private keys after about five native transactions, leading to a suspension of all native ZIL transactions. The flaw, caused by a nonce generation error in Schnorr signatures, ...
A critical bug in Zilliqa's Ledger hardware wallet app, present since 2019, allowed attackers to recover private keys from just five on-chain signatures. The flaw, related to nonce generation in the app, was detected being exploited on July 19, 2026,...
On July 20, 2026, Zilliqa revealed that ZIL tokens were stolen from an offline cold wallet managed by a centralized exchange partner. This rare breach of a cold wallet, typically highly secure, raises concerns about vulnerabilities in third-party cus...
Zilliqa announced that a security breach occurred at one of its partner exchanges, resulting in the theft of ZIL tokens from a cold wallet. The team is actively investigating the incident with the affected parties to determine the cause and full impa...
Zilliqa revealed that an unnamed exchange partner experienced a security breach resulting in the theft of ZIL tokens from a cold wallet. To prevent further losses, Zilliqa has asked all exchanges to suspend ZIL deposits and withdrawals while investig...
