Security Incident · Wallet
Zilliqa exchange partner Private Key Leak
Zilliqa announced that ZIL was stolen from a cold wallet of one of its exchange partners.
- Attack category
- Private Key Leakage
Incident Overview
Investigation confirmed the root cause was a nonce-generation vulnerability in the Zilliqa Ledger app (present since 2019), allowing private key recovery from on-chain Schnorr signatures (after ~5+ native transactions). It was not due to the exchange’s operations. Native transactions were suspended and a fix is being coordinated.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.