A critical Ledger wallet bug that zeroed part of the signature random number exposed Zilliqa private keys after roughly five native transactions, with exploitation beginning July 19 and a theft reported July 20 and confirmed July 21; native ZIL transfers are suspended and affected keys must be retired while EVM and software wallets remain safe. Upbit froze ZIL deposits and withdrawals on July 20 and placed ZIL on delisting watch through the week of August 17, driving the token to trade near $0.0025 (record low $0.00235), down about 17% this week and leaving market cap near $49 million. The security failure increases CEX delisting risk and hurts token performance, adoption and broader crypto confidence unless Zilliqa’s recovery plan restores trust.

Bearish

Predictions Markets

See what traders are focused on

View analytics →

In Brief

Upbit put the altcoin on delisting watch after a critical Ledger wallet flaw.
The Ledger flaw exposed private keys after roughly five native transactions.
ZIL fell about 10% on exploit risks and potential delisting concerns.

Upbit has put Zilliqa (ZIL) on delisting watch. The trigger was a critical Ledger flaw that exposed users’ private keys. ZIL fell about 10% as traders reacted.

Zilliqa is a layer-1 blockchain that launched in 2019. On Wednesday, it revealed that every version of its Ledger wallet app since launch carried the bug.

How the Ledger Flaw Exposed Zilliqa Private Keys

The app made a simple copying mistake. It zeroed out part of the random number that protects each signature. That leak adds up fast. After roughly five native transactions, attackers can work out a private key in seconds on an ordinary computer.

Exploitation began on July 19. A day later, an exchange partner reported ZIL stolen from a cold wallet. KuCoin then helped trace the bug, confirmed on July 21. The episode joins a string of key compromise attacks this year.

“Any account that has broadcast approximately five or more native transactions signed through the Zilliqa Ledger app should be considered compromised,” Zilliqa said in its disclosure.

Native ZIL transfers are now suspended. Affected keys must be retired because the leaked signatures live on-chain forever. Ethereum Virtual Machine (EVM) transactions and software wallets are safe.

Zilliqa (ZIL) Price Performance. Source: TradingView

Upbit Review Puts ZIL Trading Support at Risk

Upbit acted under Korea’s Virtual Asset User Protection Act, a 2024 investor safety law. The tag covers the ZIL/KRW and ZIL/BTC pairs. Deposits and withdrawals have been frozen since July 20, per the exchange’s notice. The review runs until the week of August 17.

Risk labels like this often hit prices hard. Wanchain fell 34% after Binance’s monitoring tag. Flow’s backers even went to court over Korean exchange delistings.

ZIL now trades near $0.0025, per ZIL markets data. It hit a record low of $0.00235 on Wednesday. The token is down about 17% in a week and 99% from its May 2021 peak. Its market cap sits near $49 million.