Zilliqa Warns of Private Key Vulnerability in Ledger App
En resumen
- Layer-1 blockchain Zilliqa warned of a vulnerability in its Ledger app that could allow attackers to recover users’ private keys.
- Users who signed at least five native Zilliqa transactions with a Ledger device are considered compromised and advised to await guidance, following a recent ZIL cold wallet theft.
Resumen generado por IA
Por qué importa
Zilliqa identified a security vulnerability that resulted in the theft of ZIL from a cold wallet, and subsequently warned of a separate vulnerability in its Ledger app.
Layer-1 blockchain network Zilliqa warned that a vulnerability in the Zilliqa Ledger app could allow attackers to recover users’ private keys using publicly available onchain data.
“The vulnerability causes signatures to be generated with predictably weakened ephemeral nonces, from which an attacker can recover the signer’s private key,” Zilliqa said in a Wednesday X post.
Zilliqa said protective measures are in place to prevent further losses and that a coordinated remediation plan is being finalized. Users who signed at least five native Zilliqa transactions with a Ledger device are considered compromised and are advised to await further guidance before taking any action.
The warning comes after Zilliqa on Monday asked exchanges to temporarily pause Zilliqa (ZIL) deposits and withdrawals after identifying a security vulnerability that resulted in the theft of an undisclosed amount of ZIL from a cold wallet.
Zilliqa said it will publish a corrected version of the app in coordination with Ledger. It said that users transacting ZIL through EVM-compatible tooling were not affected.
The ZIL token fell 1.5% in the past 24 hours and 17% over the past week, to trade above $0.0024 at publication, according to CoinMarketCap.
Qué observar
Perspectiva de IA — posibilidades, no hechos
Zilliqa will publish a corrected version of the Ledger app in coordination with Ledger.
Muy probable · En semanas
Zilliqa will provide further guidance to compromised users.
Muy probable · En días
Preguntas abiertas
- What is the undisclosed amount of ZIL stolen?
- What specific actions should compromised users take?
- When will the corrected Ledger app be released?
