July 22, 2026·Bearish·critical issue

Zilliqa Ledger App Leaked Private Keys for 7 Years

A bug in Zilliqa's Ledger app, live since 2019, leaked users' private keys for seven years due to a flaw in random number generation. The vulnerability went unnoticed until last week, potentially compromising all signatures made through the app during that period.

Detected & updated continuously · Source: Nebula

Mentioned

Zilliqa (zil)

Sources

@Jeremybtc

A crypto wallet app LEAKED people's private keys for SEVEN years, and nobody noticed until last week. The app was Zilliqa's Ledger app, live since 2019. Every signature is supposed to be protected by a random number generated fresh each time. Zilliqa's app copied the wrong https://t.co/su1cZCDCYt