Critical vulnerability exposed in Zilliqa Ledger app; signing 5 native transactions may lead to private key leakage.
3 hours ago
Zilliqa has disclosed a critical random number generation vulnerability in its Zilliqa Ledger application, which impacts Schnorr signatures for native non-EVM Zilliqa transactions. Attackers can recover signers’ private keys from biased ephemeral random numbers using only public on-chain data. Any account that has signed and broadcasted approximately 5 or more native transactions via the Zilliqa Ledger app should be considered compromised. As affected signatures are permanently recorded on-chain, updating the application later will not resolve the risk—compromised private keys must be deactivated. EVM transactions and development tools including zilliqa-js, gozilliqa-sdk, and pyzil are not affected. The vulnerability stems from the app selecting the wrong 32-byte segment when copying random numbers, retaining 8 bytes of zero padding while losing 8 bytes of entropy, leading up to 64 bits of each random number being fixed to zero. Attackers can leverage 5 or more affected signatures to recover private keys in seconds using standard hardware. Zilliqa observed suspected active exploitation on July 19 and confirmed the root cause on July 21. To prevent further fund losses, Zilliqa has suspended native transactions and is collaborating with Ledger to develop a patched application. However, the patch cannot protect already exposed keys; affected users should not transfer assets on their own and must wait for official coordinated disposal plans.
a16z: Tokenized Stock Market Accelerates Expansion, AI and Chip Segments Rise to 15.5%
1 seconds ago
Benchmark cuts Coinbase's performance forecasts; the CLARITY Act could be a key catalyst for its stock price.
1 seconds ago
Amazon has carried out layoffs in its Artificial General Intelligence (AGI) division.
1 seconds ago
A major whale went long on $10.66 million worth of Google stock ahead of the tech giant’s earnings report release.
1 seconds ago
Dow Jones Industrial Average and S&P 500 turn positive, NVIDIA's gain expands to 3%
1 seconds ago
Analyst: $68,000 is a key resistance level for Bitcoin, which may face significant selling pressure.
1 seconds ago
Hot feeds
A trader profits $448K by monitoring #Binance's new listings!
2024.12.13 17:37:29
Last week, funds have flowed into #Bitcoin, #Ethereum, and #Hyperliquid.
2024.12.16 14:48:36
A $PEPE whale that had been dormant for 600 days transferred all 2.1T $PEPE($52M) to a new address.
2024.12.14 10:35:27
When Elon Musk tweeted about Moltbook, the meme coin MOLT experienced a short-term 30% price surge, hitting a new all-time high of $114 million.
2026.01.31 18:37:29
A smart #AI coin trader made $17.6M on $GOAT, $ai16z, $Fartcoin,$arc.
2025.01.05 16:05:18
A sniper earned 2,277 $ETH ($8.3M) trading $SHIRO within 18 hours!
2024.12.03 23:09:08
MoreHot Articles

How did I turn $1,000 into $30,000 with smart money?
2024.12.09

10 promising AI Agent cryptos
2024.12.05

The 30-Year-Old Entrepreneur Behind Virtual, a Multi-Million Dollar AI Agent Society
2025.01.22

10 smart traders specializing in MEMEcoin trading on Solana
2024.12.09

A trader lost $73.9K trading memecoins in just 3 minutes — a lesson for us all!
2024.12.13

What is $SPORE? Let us take you through the on-chain records to show you how it works.
2024.12.25

