Critical vulnerability exposed in Zilliqa Ledger app; signing 5 native transactions may lead to private key leakage.
3 hours ago
Zilliqa has disclosed a critical random number generation vulnerability in its Zilliqa Ledger application, which impacts Schnorr signatures for native non-EVM Zilliqa transactions. Attackers can recover signers’ private keys from biased ephemeral random numbers using only public on-chain data. Any account that has signed and broadcasted approximately 5 or more native transactions via the Zilliqa Ledger app should be considered compromised. As affected signatures are permanently recorded on-chain, updating the application later will not resolve the risk—compromised private keys must be deactivated. EVM transactions and development tools including zilliqa-js, gozilliqa-sdk, and pyzil are not affected. The vulnerability stems from the app selecting the wrong 32-byte segment when copying random numbers, retaining 8 bytes of zero padding while losing 8 bytes of entropy, leading up to 64 bits of each random number being fixed to zero. Attackers can leverage 5 or more affected signatures to recover private keys in seconds using standard hardware. Zilliqa observed suspected active exploitation on July 19 and confirmed the root cause on July 21. To prevent further fund losses, Zilliqa has suspended native transactions and is collaborating with Ledger to develop a patched application. However, the patch cannot protect already exposed keys; affected users should not transfer assets on their own and must wait for official coordinated disposal plans.
Analyst: $68,000 is a key resistance level for Bitcoin, which may face significant selling pressure.
2 minutes ago
伊朗回应特朗普威胁:打击基建将面临报复
2 minutes ago
Supermicro's gains expanded to 25%, notching its largest single-day increase since 2024.
2 minutes ago
NVIDIA challenger CBRS's gains narrowed to 2.5%, after surging over 18% earlier.
2 minutes ago
The semiconductor sector has become the main driver of S&P 500 earnings growth, and it may contribute a record 48% to that growth in the second quarter.
2 minutes ago
US SEC Commissioner: Crypto custody and lending strategies may violate federal securities laws.
2 minutes ago
Hot feeds
A trader profits $448K by monitoring #Binance's new listings!
2024.12.13 17:37:29
Last week, funds have flowed into #Bitcoin, #Ethereum, and #Hyperliquid.
2024.12.16 14:48:36
A $PEPE whale that had been dormant for 600 days transferred all 2.1T $PEPE($52M) to a new address.
2024.12.14 10:35:27
When Elon Musk tweeted about Moltbook, the meme coin MOLT experienced a short-term 30% price surge, hitting a new all-time high of $114 million.
2026.01.31 18:37:29
A smart #AI coin trader made $17.6M on $GOAT, $ai16z, $Fartcoin,$arc.
2025.01.05 16:05:18
A sniper earned 2,277 $ETH ($8.3M) trading $SHIRO within 18 hours!
2024.12.03 23:09:08
MoreHot Articles

How did I turn $1,000 into $30,000 with smart money?
2024.12.09

10 promising AI Agent cryptos
2024.12.05

The 30-Year-Old Entrepreneur Behind Virtual, a Multi-Million Dollar AI Agent Society
2025.01.22

10 smart traders specializing in MEMEcoin trading on Solana
2024.12.09

A trader lost $73.9K trading memecoins in just 3 minutes — a lesson for us all!
2024.12.13

What is $SPORE? Let us take you through the on-chain records to show you how it works.
2024.12.25

