Buy Crypto
Pay with
USD
USD
Buy & Sell
Hot
Supports Visa, Mastercard, SEPA & more
P2P
0 Fees
Flexible trading, zero fees
Gate Card
Use your crypto for payments worldwide
Markets
Trade
Basic
Advanced
Futures
Futures
Access hundreds of perpetual contracts
CFD
Gold
One platform for global traditional assets
Options
Hot
Trade European-style vanilla options
Unified Account
Maximize your capital efficiency
Demo Trading
Introduction to Futures Trading
Learn the basics of futures trading
Futures Events
Join events to earn rewards
Demo Trading
Use virtual funds to practice risk-free trading
Stocks
CFD
Stock CFD Derivatives
US Stocks
Access real US stocks and ETFs
HK Stocks
Trade quality Hong Kong-listed stocks
Korean Stocks
SK Hynix
Real Korean stocks and top assets
Stock Futures
High leverage, 24/7 trading
Tokenized Stocks
Backed by real stock assets
IPO Access
Unlock full access to global stock IPOs
GUSD
3.8%
Mint GUSD for Treasury RWA yields
Stocks Activities
Trade Popular Stocks and Unlock Generous Airdrops
Earn
Launch
CandyDrop
tag
Collect candies to earn airdrops
Launchpool
Quick staking, earn potential new tokens
HODLer Airdrop
Hold GT and get massive airdrops for free
Pre-IPOs
Unlock full access to global stock IPOs
Alpha Points
Trade on-chain assets and earn airdrops
Futures Points
Earn futures points and claim airdrop rewards
Investment
Square
Square
Post, share, and explore crypto trends
Live
moments live
Live crypto market analysis
Chat
Chat with crypto traders
News
What is happening in crypto
flower_head
More
Promotions
AI
Others
TradFi（新）
GUSD（纯图）
Rewards

Zilliqa Ledger App Flaw Exposes Private Keys; 5 Native ZIL Transactions Needed to Recover Keys

GateNews
Security Incidents
ZIL-4.11%
Zilliqa disclosed today a critical random number vulnerability in its Ledger application affecting native ZIL transaction Schnorr signatures. The flaw generates temporary random numbers with the highest 64 bits fixed at zero, allowing attackers to recover private keys in seconds using approximately 5 related on-chain transaction signatures. The vulnerability has existed in all versions of the Zilliqa Ledger app since 2019. Native transactions have been suspended, and affected keys must be abandoned. EVM transactions and those using zilliqa-js, gozilliqa-sdk, or pyzil SDKs are unaffected. Zilliqa is coordinating with Ledger to release a patched version and develop a fund migration plan, with KuCoin assisting in confirming the vulnerability's cause and ongoing exploitation.
View Source
Disclaimer: The information on this page may come from third-party sources and is for reference only. It does not represent the views or opinions of Gate and does not constitute any financial, investment, or legal advice. Virtual asset trading involves high risk. Please do not rely solely on the information on this page when making decisions. For details, see the Disclaimer.

Related News

2h ago
Wanchain Cross-Chain Bridge Vulnerability Drains 290 Million NIGHT on Monday, Token Recovers 19% in 24 Hours
2h ago
Zilliqa Ledger App Halts Native ZIL Transactions Due to 2019 Vulnerability Affecting Private Keys
5h ago
Zilliqa Ledger RNG Vulnerability Threatens Accounts With 5+ Signatures; Private Keys Recoverable
8h ago
Balance Coin Plunges 99% to $0.001209 on July 22 After Suspected Exploit on BNB Chain
In-Depth Analysis

Zilliqa Ledger App Vulnerability Exposes Private Keys via Onchain Data

Ethan Brooks2h ago

SecondFi Reveals Cause of $2.6M ADA Breach as ZK Recovery Tool Nears Launch

TheNewsCrypto4h ago

Zilliqa Confirms ZIL Token Theft from Exchange Partner Cold Wallet

Ethan Brooks07-21 07:12
Comment
0/400
No comments