Digital Asset
Intelligence
Security Incident · Wallet

Zilliqa exchange partner Private Key Leak

·Historical incident record

Incident Overview

Zilliqa announced that ZIL was stolen from a cold wallet of one of its exchange partners. Investigation confirmed the root cause was a nonce-generation vulnerability in the Zilliqa Ledger app (present since 2019), allowing private key recovery from on-chain Schnorr signatures (after ~5+ native transactions). It was not due to the exchange’s operations. Native transactions were suspended and a fix is being coordinated.

Sources & References

Original incident referencehttps://x.com/zilliqa/status/2079847348780536050 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodOracle Misassignment
    Reported loss$ 73,400
  2. Incident date
    Target

    Bankrbot

    Attack methodAccount Compromise
    Reported loss$ 479,885
  3. Incident date
    Target

    ZEUS

    Attack methodInfrastructure Compromise
    Reported loss0
  4. Incident date
    Attack methodFlash Loan Price Manipulation
    Reported loss$ 1,650,000
  5. Incident date
    Target

    Across

    Attack methodDeposit signal spoofing
    Reported loss0