Critical vulnerability exposed in Zilliqa Ledger app; signing 5 native transactions may lead to private key leakage.
2026.07.22 20:20:29
Zilliqa has disclosed a critical random number generation vulnerability in its Zilliqa Ledger application, which impacts Schnorr signatures for native non-EVM Zilliqa transactions. Attackers can recover signers’ private keys from biased ephemeral random numbers using only public on-chain data. Any account that has signed and broadcasted approximately 5 or more native transactions via the Zilliqa Ledger app should be considered compromised. As affected signatures are permanently recorded on-chain, updating the application later will not resolve the risk—compromised private keys must be deactivated. EVM transactions and development tools including zilliqa-js, gozilliqa-sdk, and pyzil are not affected. The vulnerability stems from the app selecting the wrong 32-byte segment when copying random numbers, retaining 8 bytes of zero padding while losing 8 bytes of entropy, leading up to 64 bits of each random number being fixed to zero. Attackers can leverage 5 or more affected signatures to recover private keys in seconds using standard hardware. Zilliqa observed suspected active exploitation on July 19 and confirmed the root cause on July 21. To prevent further fund losses, Zilliqa has suspended native transactions and is collaborating with Ledger to develop a patched application. However, the patch cannot protect already exposed keys; affected users should not transfer assets on their own and must wait for official coordinated disposal plans.
Binance will distribute dividends for Microsoft (MSFT) and Applied Materials (AMAT) via bStocks.
10 minutes ago
Changxin Technology's stock rose more than 10% in afternoon trading, hitting a new high since its listing.
10 minutes ago
After $牛来 was listed on @Aster_DEX Perps, its price surged by over 150%. The 24-hour trading volume has reached $4.47M.
10 minutes ago
Glassnode: Bitcoin is being sidelined amid the ongoing capital rotation, as risk capital continues to flow into U.S. stocks and AI assets.
10 minutes ago
TD Cowen raises Berkshire Hathaway's price target from $481 to $529
10 minutes ago
Hyperliquid’s USDC reserve fund revenue sharing mechanism will launch on August 26, with an expected annual contribution of $200 million for HYPE token buybacks.
10 minutes ago
Hot feeds
A trader profits $448K by monitoring #Binance's new listings!
2024.12.13 17:37:29
Last week, funds have flowed into #Bitcoin, #Ethereum, and #Hyperliquid.
2024.12.16 14:48:36
A $PEPE whale that had been dormant for 600 days transferred all 2.1T $PEPE($52M) to a new address.
2024.12.14 10:35:27
When Elon Musk tweeted about Moltbook, the meme coin MOLT experienced a short-term 30% price surge, hitting a new all-time high of $114 million.
2026.01.31 18:37:29
A smart #AI coin trader made $17.6M on $GOAT, $ai16z, $Fartcoin,$arc.
2025.01.05 16:05:18
A sniper earned 2,277 $ETH ($8.3M) trading $SHIRO within 18 hours!
2024.12.03 23:09:08
MoreHot Articles

How did I turn $1,000 into $30,000 with smart money?
2024.12.09

10 promising AI Agent cryptos
2024.12.05

The 30-Year-Old Entrepreneur Behind Virtual, a Multi-Million Dollar AI Agent Society
2025.01.22

10 smart traders specializing in MEMEcoin trading on Solana
2024.12.09

A trader lost $73.9K trading memecoins in just 3 minutes — a lesson for us all!
2024.12.13

What is $SPORE? Let us take you through the on-chain records to show you how it works.
2024.12.25

