Zilliqa (ZIL)

Zilliqa revealed a critical nonce-generation vulnerability in its Ledger integration enabling private key recovery from public signatures following roughly five native transactions. Upbit flagged ZIL as a cautionary asset in response to the flaw impacting all users. https://t.co/NFJn9ZD1GK

Zilliqa's Ledger flaw sparks Upbit alert: Could $ZIL face delisting? https://t.co/VK7i6cwL0p

A crypto wallet app LEAKED people's private keys for SEVEN years, and nobody noticed until last week. The app was Zilliqa's Ledger app, live since 2019. Every signature is supposed to be protected by a random number generated fresh each time. Zilliqa's app copied the wrong bytes, and left part of that random number fixed at zero. That tiny predictable piece was enough. Every transaction you signed gave away a little more of your key. After about five transactions, an attacker can rebuild the entire key in seconds on a normal laptop. This sat undetected in every version of the app for seven years. It was only caught last week when someone started actively draining wallets. The worst part is it can't be reversed. Those weak signatures are on the blockchain forever. Affected users can't even move their funds to safety. The attacker already has the key and can beat them to it. Seven years of a hardware wallet app quietly wrote everyone's private keys into public view.

If you invested $10,000 in $ZIL five years ago... You'd have just $94 left today. INSANE 🤯 https://t.co/ExnFITlvd4

Veteran project Zilliqa has once again revealed a massive vulnerability, with the loss currently unknown. An attacker only needs to obtain 5 related transaction signatures to compute your ZIL private key within seconds. Currently, this vulnerability only affects native ZIL transactions on Ledger; transactions using SDKs such as zilliqa-js, gozilliqa-sdk, and those on EVM chains are not affected. The official recommendation is to “discard all affected keys”, and ordinary transfers cannot fully mitigate the risk. The lessons from this incident are very realistic: · Hardware wallets are not an absolute guarantee; software and firmware bugs can still be fatal; · Even long‑standing projects must remain vigilant; · Future asset distribution should be broader, managing native mainnet assets and EVM assets separately, and migrate what can be migrated as early as possible. If you hold ZIL, especially if you have used Ledger native transactions, check the official announcement immediately: migrate what needs migrating and discard what needs discarding. Security first; you can earn more coins, but losing a private key means it’s gone for good.

🔐 VULNERABILITY: ⚠️ Zilliqa suspends native ZIL transactions due to Ledger failure Zilliqa has disclosed a high‑severity security issue affecting its official Ledger application for native ZIL transactions, related to a nonce‑generation vulnerability during operation signing. According to the project, the flaw could allow an attacker to recover private keys by analyzing signatures generated across multiple transactions. Active exploitation was detected on July 19, 2026. The issue impacts Ledger app versions released between 2019 and 2026, while EVM‑compatible transactions are not affected. As a precaution, Zilliqa halted native transactions and advised affected users to withdraw funds from potentially compromised addresses and move them to new wallets. The team is working on a patched Ledger app update to fix the problem. The incident also prompted Upbit to act, placing ZIL under a caution designation on its KRW and $BTC markets, suspending deposits and withdrawals while assessing the situation. The exchange indicated that continued support will depend on the issue’s resolution. The case again shines a spotlight on the security of signing systems used by hardware wallets. Although the impact is limited to native $ZIL transactions, users who employed affected versions should treat those addresses as potentially exposed until the recommended migration is completed.

On the 20th, Zilliqa reported that exchange-related collateral volume was stolen and requested domestic exchanges to suspend deposits and withdrawals. It surged 50% on the same day. Two days later, today Upbit flagged it as a cautionary item. Something smells off!! lol https://t.co/UwNWs7ubES

🚨 $ZIL is under pressure after Zilliqa disclosed a critical security flaw in its Ledger app. The vulnerability could allow attackers to recover private keys from public signatures after just a handful of native transactions. The issue affected Ledger app versions released between 2019 and 2026, prompting native transaction suspensions while users are urged to retire affected wallets. No surprise the market is reacting negatively.