Zilliqa has halted native ZIL transactions following the invention of a essential vulnerability within the community’s Ledger utility, which permits the non-public keys of sure accounts to be recovered from public signatures on the blockchain. The incident was disclosed after an undisclosed quantity of ZIL was stolen from an trade accomplice’s chilly pockets, forcing the mission to request centralized platforms to pause ZIL deposits and withdrawals to curb the motion of funds.
In response to Zilliqa, the flaw lies within the native transaction signing course of utilizing the Ledger app and doesn’t have an effect on EVM transactions or official SDKs. The mission said that the vulnerability had existed in app variations relationship again to 2019, with on-chain exploitation indicators detected on July 19, 2026, two days earlier than the basis trigger was remoted.
Change Theft and Preliminary Response
Zilliqa publicly disclosed the incident on July 20, stating that an undisclosed quantity of ZIL had been stolen from an trade accomplice’s chilly pockets. On the time, the mission didn’t specify the technical trigger or the size of damages, noting that an investigation was ongoing to find out the basis trigger and the scope of impression.
We have now been made conscious of a safety incident involving considered one of our trade companions, through which ZIL was stolen from a chilly pockets.
The incident is underneath energetic investigation, and we’re working with the related events to determine the basis trigger and full scope. As a…
— Zilliqa (@zilliqa) July 20, 2026
Exchanges had been subsequently notified and requested to pause ZIL deposits and withdrawals as a precautionary measure to forestall the stolen funds from being transferred or bought by centralized platforms whereas the verification course of continued.
On July 21, Zilliqa up to date that it discovered no proof suggesting the incident originated from pockets administration procedures or operational actions of the trade. The investigation then shifted to a technical concern affecting transaction signing in a gaggle of legacy ZIL1 wallets, earlier than the mission disclosed detailed details about the vulnerability within the Zilliqa Ledger app a day later.
Affected Wallets and Transaction Scope
Zilliqa restricted the scope of impression to personal keys that had been used to signal native Zilliqa transactions through a Ledger machine. In response to the mission’s advisory, accounts which have broadcast roughly 5 or extra native transactions utilizing the Zilliqa Ledger app must be thought of compromised.
This danger applies to signatures already publicly recorded on-chain, which means subsequent software program updates can not reverse the publicity stage of affected non-public keys. Customers with accounts on this group should cease utilizing the compromised keys, somewhat than merely updating the transaction-signing app.
EVM transactions are unaffected, whereas transactions signed by official SDKs similar to zilliqa-js, gozilliqa-sdk, and pyzil are additionally exterior the scope of the flaw. The incident is due to this fact remoted to the native signing path of the Zilliqa Ledger app.
Zilliqa has not disclosed the quantity of ZIL stolen, the variety of affected accounts, or the entire worth of belongings held in susceptible addresses. In consequence, the general monetary extent of the incident stays unclear.
Ledger App Vulnerability
The foundation trigger lies in how the Zilliqa Ledger app generates nonces for EC-Schnorr signatures on the secp256k1 curve. For every signature, the app must generate a contemporary, random, and unpredictable 256-bit nonce; if the nonce is biased or lacks entropy, a number of signatures can expose the non-public key.
The app’s signing routine generates 40 bytes of randomness after which reduces this worth modulo the order of the curve to provide a 256-bit quantity. Nevertheless, when copying the end result into the nonce buffer, the code mistakenly extracted 32 bytes from the 40-byte output, retaining 8 bytes of zero-padding whereas discarding 8 bytes of entropy.
This flaw leaves the 64 most vital bits of every nonce mounted at zero. With roughly 5 or extra affected signatures, the non-public key could be recovered in seconds on commodity {hardware} utilizing Hidden Quantity Downside fixing and lattice discount strategies.
Native Transaction Halt
Zilliqa halted native non-EVM transactions as a protecting measure whereas finalizing a remediation plan. The transfer goals to forestall additional asset losses from susceptible accounts whereas limiting the motion of stolen ZIL by the native transaction circulation.
Affected accounts can’t be protected by an ordinary switch transaction both. If a personal key can already be recovered from on-chain knowledge, an attacker holding the identical key can detect and front-run the person’s asset switch transaction. Subsequently, trying to maneuver funds independently could also be ineffective and improve danger, whereas EVM transactions proceed to stay unaffected.
Remediation Plan and Person Steering
A set construct of the Ledger app is being ready in coordination with Ledger. This repair will restore the total nonce era course of to forestall the app from creating additional weakened signatures sooner or later. Nevertheless, the patch can not reverse the danger for personal keys which have already signed the required variety of affected native transactions beforehand.
Keys belonging to the affected group in the end must be retired from use. Zilliqa is finalizing a remediation plan to safeguard balances in related accounts and can publish separate directions for customers who’ve signed native Zilliqa transactions utilizing Ledger. Till official steerage is supplied, customers are suggested to not act independently and to observe solely the mission’s official channels.
KuCoin was credited by Zilliqa for helping in figuring out the basis trigger inside the Ledger app’s nonce era course of, recovering affected non-public keys from on-chain knowledge, and confirming ongoing exploitation exercise. Nevertheless, Zilliqa has not publicly confirmed whether or not KuCoin was the trade accomplice that misplaced ZIL within the preliminary announcement.
