A vulnerability in Zilliqa’s Ledger app, present since 2019, lets attackers rebuild a signer’s private key from data already public on the blockchain.
Original Image Credit: Roderart / commons.wikimedia.org
Posted July 22, 2026 at 3:57 pm EST.
Layer-1 network Zilliqa has suspended all native transactions after disclosing a vulnerability in its Ledger app that lets attackers reconstruct a user’s private key from information already recorded on the blockchain. The flaw affects every version of the app released since 2019, and the team says active exploitation was observed on July 19.
The bug sits in how the app generates Schnorr signatures for native, non-EVM Zilliqa transactions. “The vulnerability causes signatures to be generated with predictably weakened ephemeral nonces, from which an attacker can recover the signer’s private key,” Zilliqa said in a Wednesday post. Because the weakness leaks through signatures that are permanently public on-chain, any account that has broadcast about five or more native transactions signed with the Ledger app should be treated as compromised, regardless of any later software patch, Zilliqa said.
The disclosure follows a warning earlier in the week. Zilliqa on Monday asked exchanges to pause ZIL deposits and withdrawals after identifying a breach that resulted in the theft of an undisclosed amount of the token from a cold wallet. Major South Korean exchange Upbit has since designated ZIL a cautionary asset across its won and bitcoin markets, keeping deposits and withdrawals frozen and warning that trading support could be terminated if the issue is not resolved.
ZIL traded above $0.0024 on Wednesday, down roughly 19% over the week.
Zilliqa said protective measures are in place to prevent further losses and that a coordinated remediation plan is being finalized, including a corrected version of the app published in coordination with Ledger. Users who moved ZIL through EVM-compatible tooling are not affected.
For now, Zilliqa is telling anyone holding a potentially exposed key to wait for instructions before taking any action.
Related Listen: The Chopping Block: Zcash Infinite Mint Bug + AI Hackers vs Formal Verification + NEAR’s Agent Vision
AI-assisted content: This article was produced with the assistance of AI tools and was reviewed, edited, and fact-checked by a member of the Unchained editorial team before publication.
Zilliqa has suspended native ZIL transactions after disclosing a critical flaw in its Ledger application that can allow attackers to recover private keys from public transaction signatures.
Summary
Zilliqa halted native transactions after a Ledger app flaw exposed private keys from public signatures. Accounts signing roughly five native transactions with Ledger devices should be treated as compromised permanently. Upbit flagged ZIL as cautionary while EVM transactions and Zilliqa software development kits remain unaffected. The bug affected every released version of the app from 2019 through 2026 and applies to native, non-EVM transactions signed with Ledger devices.
The network said it observed onchain activity consistent with active exploitation on July 19 and confirmed the root cause on July 21. Zilliqa has prepared a corrected Ledger app build, but the fix cannot protect keys exposed through earlier signatures. Native transactions remained suspended in the latest official update while the team finalized a coordinated recovery plan.
Zilliqa Ledger bug weakened transaction signatures The flaw affected how the Zilliqa Ledger app generated Schnorr signatures for native transactions. Each signature needs a fresh random number, known as a nonce, to protect the private key. Zilliqa said the app generated enough random data but copied the wrong 32 bytes into the signing process. The mistake left the highest 64 bits of every nonce fixed at zero.
The reduced randomness allowed attackers to compare several public signatures from the same account and reconstruct its private key. Zilliqa said accounts that broadcast roughly five or more affected native transactions should be treated as compromised. The project said the recovery process can take seconds on ordinary hardware once enough signatures are available.
Because the signatures remain permanently recorded onchain, updating the Ledger app cannot repair an already exposed key. Zilliqa said affected keys must be retired. It also warned against simply moving funds when transactions restart because an attacker holding the recovered key could try to send a competing transaction.
Native transactions stop while EVM users remain unaffected Zilliqa suspended native transactions after identifying the flaw, blocking further native transfers while the team develops a method to protect affected balances. The project asked Ledger users who signed native transactions to wait for official instructions.
“Users who have signed native Zilliqa transactions with a Ledger device should await official guidance before taking any action,” Zilliqa noted.
The issue does not affect EVM transactions, according to Zilliqa. The project also said its software development kits, including zilliqa-js, gozilliqa-sdk and pyzil, generate nonces correctly. Users who only transact through EVM-compatible tools therefore sit outside the affected signing path.
Nonce-Generation Vulnerability in the Zilliqa Ledger App: A critical vulnerability has been identified in the Zilliqa Ledger application affecting the generation of Schnorr signatures for native (non-EVM) Zilliqa transactions. The vulnerability causes signatures to be generated… https://t.co/sudV7WA3TV
— Zilliqa (@zilliqa) July 22, 2026 Zilliqa credited KuCoin with helping trace the problem. The exchange recovered affected private keys from public signatures, helped confirm active exploitation and assisted in identifying the faulty nonce-generation process. Zilliqa said the cooperation helped it introduce protective measures while preparing a broader recovery plan.
Upbit places ZIL under caution after disclosure South Korean exchange Upbit placed ZIL under cautionary status after the vulnerability became public. The designation covers its KRW and BTC markets, while ZIL deposits and withdrawals remain suspended. Trading support could face further review if the issue is not resolved through the exchange’s monitoring process.
The exchange action comes while Zilliqa works on securing balances controlled by keys that may already be recoverable. A corrected Ledger build has been prepared, but the project has not yet published its full recovery procedure or announced when native transactions will resume.
As crypto.news reported on July 20, Zilliqa had already asked exchanges to pause ZIL deposits and withdrawals after an exchange partner reported a cold-wallet theft. At that stage, the project had not disclosed the stolen amount, affected exchange or attack method. Zilliqa has not publicly stated whether that earlier theft was caused by the Ledger flaw.
Bug follows earlier Zilliqa network disruptions The Ledger vulnerability differs from earlier Zilliqa outages because it affects private-key security rather than block production or node synchronization. Still, the disclosure follows several technical disruptions that affected the network in previous years.
Moreover, Zilliqa announced a permanent fix in September 2024 after a bug halted block production. The network later suffered another outage in January 2025 linked to node synchronization problems before restoring full service. Zilliqa has not connected those incidents to the Ledger app flaw.
The current issue also sits outside Ledger hardware itself. Zilliqa described the problem as a defect in its own Ledger application’s native signing code. The corrected build restores full-width nonce generation and should prevent new weak signatures once released.
For affected users, the old transaction history remains the main risk. Public signatures cannot be removed from the blockchain. Zilliqa said users who signed about five or more native transactions with a Ledger device should consider their keys compromised and wait for recovery instructions. The network has not announced a date for restoring native transactions.
Not financial or tax advice. PANews content is strictly educational and informational and is not investment advice, financial advice, tax advice, legal advice, or a solicitation to buy or sell any digital asset, security, or financial product. Do your own research and consult qualified advisers.
Disclosure. PANews may publish sponsored content, partner content, advertisements, affiliate links, event promotions, and market commentary involving Web3 projects, service providers, or financial products. PANews personnel, contributors, or affiliates may hold digital assets or other interests related to covered topics. See our Terms of Service.
US Senator Cynthia Lummis: In the coming days, she will continue to push for a bipartisan agreement on the CLARITY Act to enact it into law.
US Senator Cynthia Lummis released a statement thanking her Democratic colleagues for their key contributions to the new draft of the CLARITY Act, and pledged to continue pushing for an agreement in the coming days to get the bill enacted into law. Lummis noted that consumer protection and supporting innovation are not mutually exclusive, adding that the draft demonstrates both goals can be achieved simultaneously. Earlier reports indicated that Senate Republicans unveiled the new version of the CLARITY Act following a briefing call with industry stakeholders. The revised text proposes to ban officials including the U.S. president, vice president, members of Congress, federal judges, and their spouses from receiving compensation via issuing or sponsoring digital assets while in office; the relevant provisions will remain in effect until January 20, 2029. Restricted officials must also sell their crypto assets and investments in crypto-related firms, or place them in blind trusts over which they have no control; sales of crypto assets exceeding $1,000 are required to be disclosed.
3 hours ago
The CLARITY Act adds, for the first time, provisions restricting the president and government officials from profiting through crypto assets.
According to CNBC, the new CLARITY Act under consideration by the U.S. Senate would ban the president and other federal officials from issuing or sponsoring cryptocurrencies and other digital assets. Republican lawmakers updated the bill’s text on Wednesday, adding for the first time provisions restricting the president from profiting from crypto assets, with the rules applying to both the president and other federal officials. The CLARITY Act is designed to be the U.S.’s first comprehensive piece of legislation regulating the digital asset market, and remains pending in the Senate.
3 hours ago
The revised CLARITY Act has been officially released, prohibiting the president and government officials from issuing or sponsoring crypto assets for profit.
Crypto journalist Eleanor Terrett reported that U.S. Senate Republicans have released a revised version of the CLARITY Act following a briefing call with industry stakeholders. The ethics framework in the revised bill was developed by the White House in consultation with Republican Senators Cynthia Lummis and Bernie Moreno, and has not yet secured Democratic backing. The new text would bar U.S. officials—including the president, vice president, members of Congress, federal judges—and their spouses from earning compensation during their terms via issuing or sponsoring digital assets; these provisions are set to expire on January 20, 2029. Covered officials must sell their crypto assets and investments in crypto firms, or place them in blind trusts over which they have no control, with sales of crypto assets exceeding $1,000 requiring disclosure. The U.S. Department of Justice would be granted civil enforcement authority for ethics violations, including prosecuting trading platforms that knowingly operate banned tokens. However, Democrats oppose granting the DOJ sole enforcement power without extending authority to state attorneys general, and the relevant provisions could still be adjusted in the coming days. The revised bill retains the BRCA and Keep Your Coins Act, clarifying that non-custodial software developers and blockchain infrastructure providers will not be classified as money transmitters solely for maintaining decentralized networks, while safeguarding individuals’ right to self-custody of crypto assets. Stablecoin provisions remain unchanged: interest on idle payment stablecoin balances is banned, but rewards tied to actual activities like trading or staking are permitted.
3 hours ago
Report: Crypto industry contributes $55 billion to U.S. economy, directly employs 34,000 people
The US National Cryptocurrency Association released a report stating that the US crypto industry directly employs 34,000 people; when including jobs supported by supplier industries and consumer spending of related workers, total employment in the sector is roughly 232,000. The report projects that by 2026, the industry will contribute over $55 billion to US GDP, with around $31 billion flowing to workers as labor income. Of the 232,000 supported jobs, approximately 75,000 come from supplier industries, and another 123,000 are driven by household spending of related employees. These figures are based on multiplier effects from input-output models and do not represent direct hires by crypto firms. Among the 34,000 direct roles, software, blockchain, and data engineering positions are the most numerous, at about 10,100. Regionally, California and New York support 57,649 and 53,766 jobs respectively, totaling over 111,000; Texas accounts for roughly 26,536 jobs. The 12 US heartland states defined in the report collectively support around 17,000 jobs. The report was commissioned and funded by the National Cryptocurrency Association, with analysis conducted by Pragmatic Policy Group. Its estimates are based on the US Bureau of Economic Analysis’ 2024 input-output tables and $23.22 billion in crypto industry revenue data, with model assumptions incorporated into occupational structure and industry mapping.
3 hours ago
The development company behind Pump.fun is hiring a Growth Marketing Lead, offering a base annual salary of up to $1 million.
Baton Corporation, the developer behind Pump.fun, is hiring a Head of Growth Marketing, with a base annual salary of $400,000 to $1,000,000 plus performance-based incentives. Pump.fun founder Alon noted that the platform has grown to become one of the largest in the crypto industry with almost no paid marketing. The company’s next goal is to transition Pump.fun from a crypto-native product to the mainstream market, targeting an application with hundreds of millions of users. The role requires candidates to have hands-on experience in consumer app growth, a proven track record managing multi-million dollar marketing budgets, and familiarity with strategies including digital advertising, user-generated content (UGC), and short-form video clips.
3 hours ago
灰度：若美联储不再加息，比特币或已触底
Zach Pandl, head of research at Grayscale, wrote in a post that the market currently holds two main views on when Bitcoin’s bear market will end: one is adherence to the "four-year cycle" theory, and the other is viewing Bitcoin as a mature asset driven by macroeconomic factors. The "four-year cycle" theory holds that halving events remain the core driver of Bitcoin’s price cycles. Historically, Bitcoin has typically bottomed roughly one year after a cycle peak and about 2.5 years after a halving, with an average cumulative drawdown of around 80%. Based on this pattern, Bitcoin could still decline further in the current cycle and form a bottom in September or October. The other view argues that Bitcoin’s price will, like other major assets, be more influenced by economic growth, real interest rates, and changes in Federal Reserve policy going forward. Past Bitcoin bear markets have typically coincided with slowing economic growth or rising real interest rates, and this current downturn has unfolded against a backdrop of rising rate hike expectations and climbing real interest rates. Pandl noted he leans more toward the macro-driven view. If the Fed stops raising interest rates and economic growth remains stable, Bitcoin’s price may have already bottomed.
A bug that sat quietly in Zilliqa’s Ledger hardware wallet app for seven years just went from dormant to devastating. The flaw, present in every version of the app since its 2019 launch, allowed attackers to recover users’ private keys from publicly available on-chain data.
Zilliqa detected active exploitation on July 19, 2026. Two days later, the team isolated the root cause and immediately suspended all native ZIL transactions.
What went wrong, and for how long The vulnerability lives in how the Ledger app generates nonces for EC-Schnorr signatures during native ZIL transactions. The most significant 64 bits of the ephemeral nonce were fixed at zero, stemming from a mishandling of a 32-byte copy from a 40-byte randomness buffer.
Advertisement
That partial predictability is a death sentence for cryptographic security. An attacker with access to just five or more affected signatures, all of which are visible on-chain to anyone who cares to look, could use a technique called lattice reduction to mathematically reverse-engineer a user’s private key.
This is not a flaw in Zilliqa’s blockchain itself, nor in Ledger’s core hardware security. It’s a bug in the companion app, the software layer that connects the Ledger device to the Zilliqa network. Zilliqa’s SDKs, including zilliqa-js, gozilliqa-sdk, and pyzil, remain completely unaffected. EVM-compatible transactions processed through the Ledger are also fine, since those use a different signing routine.
The fallout so far Upbit, one of the largest crypto exchanges in South Korea, designated ZIL as a cautionary asset and halted both deposits and withdrawals. Other exchanges are reportedly monitoring the situation.
Zilliqa’s response has been a mix of crisis management and damage control. The team confirmed the root cause was isolated on July 21, and they are now collaborating directly with Ledger to develop a fix.
The company has been explicit in its guidance to affected users. Compromised keys need to be retired entirely, not transferred. If an attacker has already derived your private key, they can front-run any transfer you attempt. The recommended path is to generate entirely new keys through a secure method and treat the old ones as permanently burned.
What investors should watch The immediate concern for ZIL holders is whether the suspension of native transactions will be brief or prolonged. A fix requires coordination between Zilliqa and Ledger. Until a patched app is released, audited, and verified, native transactions will likely remain frozen. With Upbit already halting deposits and withdrawals, trading volumes for ZIL are under pressure from multiple directions simultaneously.
For anyone holding ZIL on a Ledger device, the priority is straightforward: do not attempt to move funds using the compromised app. Wait for official guidance from Zilliqa on the key retirement process.
Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.
Layer-1 blockchain network Zilliqa warned that a vulnerability in the Zilliqa Ledger app could allow attackers to recover users’ private keys using publicly available onchain data.
“The vulnerability causes signatures to be generated with predictably weakened ephemeral nonces, from which an attacker can recover the signer’s private key,” Zilliqa said in a Wednesday X post.
Zilliqa said protective measures are in place to prevent further losses and that a coordinated remediation plan is being finalized. Users who signed at least five native Zilliqa transactions with a Ledger device are considered compromised and are advised to await further guidance before taking any action.
The warning comes after Zilliqa on Monday asked exchanges to temporarily pause Zilliqa (ZIL) deposits and withdrawals after identifying a security vulnerability that resulted in the theft of an undisclosed amount of ZIL from a cold wallet.
Zilliqa said it will publish a corrected version of the app in coordination with Ledger. It said that users transacting ZIL through EVM-compatible tooling were not affected.
The ZIL token fell 1.5% in the past 24 hours and 17% over the past week, to trade above $0.0024 at publication, according to CoinMarketCap.
Magazine: How a ‘Wrong Number’ message turned into a $3.4M crypto scam
Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph’s Editorial Policy and aims to provide accurate and timely information. Readers are encouraged to verify information independently.
Layer-1 blockchain network Zilliqa warned that a vulnerability in the Zilliqa Ledger app could allow attackers to recover users’ private keys using publicly available onchain data.
“The vulnerability causes signatures to be generated with predictably weakened ephemeral nonces, from which an attacker can recover the signer’s private key,” Zilliqa said in a Wednesday X post.
Zilliqa said protective measures are in place to prevent further losses and that a coordinated remediation plan is being finalized. Users who signed at least five native Zilliqa transactions with a Ledger device are considered compromised and are advised to await further guidance before taking any action.
The warning comes after Zilliqa on Monday asked exchanges to temporarily pause Zilliqa (ZIL) deposits and withdrawals after identifying a security vulnerability that resulted in the theft of an undisclosed amount of ZIL from a cold wallet.
Zilliqa said it will publish a corrected version of the app in coordination with Ledger. It said that users transacting ZIL through EVM-compatible tooling were not affected.
The ZIL token fell 1.5% in the past 24 hours and 17% over the past week, to trade above $0.0024 at publication, according to CoinMarketCap.
Magazine: How a ‘Wrong Number’ message turned into a $3.4M crypto scam
Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph’s Editorial Policy and aims to provide accurate and timely information. Readers are encouraged to verify information independently.
Not financial or tax advice. PANews content is strictly educational and informational and is not investment advice, financial advice, tax advice, legal advice, or a solicitation to buy or sell any digital asset, security, or financial product. Do your own research and consult qualified advisers.
Disclosure. PANews may publish sponsored content, partner content, advertisements, affiliate links, event promotions, and market commentary involving Web3 projects, service providers, or financial products. PANews personnel, contributors, or affiliates may hold digital assets or other interests related to covered topics. See our Terms of Service.
US Senator Cynthia Lummis: In the coming days, she will continue to push for a bipartisan agreement on the CLARITY Act to enact it into law.
US Senator Cynthia Lummis released a statement thanking her Democratic colleagues for their key contributions to the new draft of the CLARITY Act, and pledged to continue pushing for an agreement in the coming days to get the bill enacted into law. Lummis noted that consumer protection and supporting innovation are not mutually exclusive, adding that the draft demonstrates both goals can be achieved simultaneously. Earlier reports indicated that Senate Republicans unveiled the new version of the CLARITY Act following a briefing call with industry stakeholders. The revised text proposes to ban officials including the U.S. president, vice president, members of Congress, federal judges, and their spouses from receiving compensation via issuing or sponsoring digital assets while in office; the relevant provisions will remain in effect until January 20, 2029. Restricted officials must also sell their crypto assets and investments in crypto-related firms, or place them in blind trusts over which they have no control; sales of crypto assets exceeding $1,000 are required to be disclosed.
3 hours ago
The CLARITY Act adds, for the first time, provisions restricting the president and government officials from profiting through crypto assets.
According to CNBC, the new CLARITY Act under consideration by the U.S. Senate would ban the president and other federal officials from issuing or sponsoring cryptocurrencies and other digital assets. Republican lawmakers updated the bill’s text on Wednesday, adding for the first time provisions restricting the president from profiting from crypto assets, with the rules applying to both the president and other federal officials. The CLARITY Act is designed to be the U.S.’s first comprehensive piece of legislation regulating the digital asset market, and remains pending in the Senate.
3 hours ago
The revised CLARITY Act has been officially released, prohibiting the president and government officials from issuing or sponsoring crypto assets for profit.
Crypto journalist Eleanor Terrett reported that U.S. Senate Republicans have released a revised version of the CLARITY Act following a briefing call with industry stakeholders. The ethics framework in the revised bill was developed by the White House in consultation with Republican Senators Cynthia Lummis and Bernie Moreno, and has not yet secured Democratic backing. The new text would bar U.S. officials—including the president, vice president, members of Congress, federal judges—and their spouses from earning compensation during their terms via issuing or sponsoring digital assets; these provisions are set to expire on January 20, 2029. Covered officials must sell their crypto assets and investments in crypto firms, or place them in blind trusts over which they have no control, with sales of crypto assets exceeding $1,000 requiring disclosure. The U.S. Department of Justice would be granted civil enforcement authority for ethics violations, including prosecuting trading platforms that knowingly operate banned tokens. However, Democrats oppose granting the DOJ sole enforcement power without extending authority to state attorneys general, and the relevant provisions could still be adjusted in the coming days. The revised bill retains the BRCA and Keep Your Coins Act, clarifying that non-custodial software developers and blockchain infrastructure providers will not be classified as money transmitters solely for maintaining decentralized networks, while safeguarding individuals’ right to self-custody of crypto assets. Stablecoin provisions remain unchanged: interest on idle payment stablecoin balances is banned, but rewards tied to actual activities like trading or staking are permitted.
3 hours ago
Report: Crypto industry contributes $55 billion to U.S. economy, directly employs 34,000 people
The US National Cryptocurrency Association released a report stating that the US crypto industry directly employs 34,000 people; when including jobs supported by supplier industries and consumer spending of related workers, total employment in the sector is roughly 232,000. The report projects that by 2026, the industry will contribute over $55 billion to US GDP, with around $31 billion flowing to workers as labor income. Of the 232,000 supported jobs, approximately 75,000 come from supplier industries, and another 123,000 are driven by household spending of related employees. These figures are based on multiplier effects from input-output models and do not represent direct hires by crypto firms. Among the 34,000 direct roles, software, blockchain, and data engineering positions are the most numerous, at about 10,100. Regionally, California and New York support 57,649 and 53,766 jobs respectively, totaling over 111,000; Texas accounts for roughly 26,536 jobs. The 12 US heartland states defined in the report collectively support around 17,000 jobs. The report was commissioned and funded by the National Cryptocurrency Association, with analysis conducted by Pragmatic Policy Group. Its estimates are based on the US Bureau of Economic Analysis’ 2024 input-output tables and $23.22 billion in crypto industry revenue data, with model assumptions incorporated into occupational structure and industry mapping.
3 hours ago
The development company behind Pump.fun is hiring a Growth Marketing Lead, offering a base annual salary of up to $1 million.
Baton Corporation, the developer behind Pump.fun, is hiring a Head of Growth Marketing, with a base annual salary of $400,000 to $1,000,000 plus performance-based incentives. Pump.fun founder Alon noted that the platform has grown to become one of the largest in the crypto industry with almost no paid marketing. The company’s next goal is to transition Pump.fun from a crypto-native product to the mainstream market, targeting an application with hundreds of millions of users. The role requires candidates to have hands-on experience in consumer app growth, a proven track record managing multi-million dollar marketing budgets, and familiarity with strategies including digital advertising, user-generated content (UGC), and short-form video clips.
3 hours ago
灰度：若美联储不再加息，比特币或已触底
Zach Pandl, head of research at Grayscale, wrote in a post that the market currently holds two main views on when Bitcoin’s bear market will end: one is adherence to the "four-year cycle" theory, and the other is viewing Bitcoin as a mature asset driven by macroeconomic factors. The "four-year cycle" theory holds that halving events remain the core driver of Bitcoin’s price cycles. Historically, Bitcoin has typically bottomed roughly one year after a cycle peak and about 2.5 years after a halving, with an average cumulative drawdown of around 80%. Based on this pattern, Bitcoin could still decline further in the current cycle and form a bottom in September or October. The other view argues that Bitcoin’s price will, like other major assets, be more influenced by economic growth, real interest rates, and changes in Federal Reserve policy going forward. Past Bitcoin bear markets have typically coincided with slowing economic growth or rising real interest rates, and this current downturn has unfolded against a backdrop of rising rate hike expectations and climbing real interest rates. Pandl noted he leans more toward the macro-driven view. If the Fed stops raising interest rates and economic growth remains stable, Bitcoin’s price may have already bottomed.
Zilliqa (ZIL), one of the popular altcoins of the 2021 bull season, announced that it is facing a significant security crisis due to a critical vulnerability discovered in its Ledger hardware wallet application.
Zilliqa, in a statement made from the X account, stated that the attack stemmed from a security vulnerability in the Ledger application.
At this point, Zilliqa states that a critical vulnerability in the Ledger application makes the private keys used for ZIL transactions vulnerable to recovery attacks.
The team stated that the problem affects all versions released from 2019 to 2026, and that active exploitation was observed on July 19th.
Following this active vulnerability, the team stated that ZIL transactions were suspended, but EVM transactions were not affected by this security flaw.
Following these developments, South Korea-based cryptocurrency exchanges Upbit and Bithumb classified ZIL as a “warning asset” in their trading markets.
Exchanges have announced that they are suspending deposits and withdrawals for ZIL, citing user security concerns.
Upbit and Bithumb made similar statements, warning that trading support for ZIL could be completely terminated if the security issue is not resolved within a reasonable timeframe or if adequate measures to protect investors are not taken.
This development has led to a review of security measures within the Zilliqa ecosystem, and users who conduct ZIL transactions via Ledger are advised to change their addresses and discontinue using their compromised wallets.
As you may recall, Zilliqa previously announced that ZIL held in a cold wallet had been stolen in a security incident at one of its partner exchanges.
*This is not investment advice.
Follow our Telegram and Twitter account now for exclusive news, analytics and on-chain data!
Cover image via U.Today Disclaimer: The opinions expressed by our writers are their own and do not represent the views of U.Today. The financial and market information provided on U.Today is intended for informational purposes only. U.Today is not liable for any financial losses incurred while trading cryptocurrencies. Conduct your own research by contacting financial experts before making any investment decisions. We believe that all content is accurate as of the date of publication, but certain offers mentioned may no longer be available.
Major South Korean cryptocurrency exchange Upbit has flagged Zilliqa (ZIL) as a cautionary asset following the discovery of a critical vulnerability in its Ledger application.
According to Wu Blockchain, Upbit has placed ZIL under cautionary asset status, raising concerns over the token's future trading support on the crypto exchange, with the possibility of delisting it if the security issue isn't resolved.
Zilliqa Ledger App Flaw Exposes Private Keys, Upbit Flags ZIL as a Cautionary Asset
Zilliqa disclosed a critical nonce-generation flaw in its Ledger app that allows private keys to be recovered from public signatures after about five native transactions. The issue affected all… pic.twitter.com/uMfV9ZbepR
— Wu Blockchain (@WuBlockchain) July 22, 2026 Earlier today, July 22, Zilliqa disclosed a critical nonce-generation flaw in its Ledger app that allows private keys to be recovered from public signatures after about five native transactions.
The issue affects all versions released from 2019 to 2026, with active exploitation observed on July 19. Native Zilliqa transactions have been suspended, with affected keys set to be retired, while EVM transactions are unaffected.
HOT Stories
You Might Also Like
Upbit subsequently designated ZIL as a cautionary asset across its KRW and BTC markets. ZIL deposits and withdrawals remain suspended, and trading support may be terminated if the issue is not resolved.
What happened?On July 22, Zilliqa announced the discovery of a nonce-generation vulnerability in its Ledger app in an X post.
You Might Also Like
A critical vulnerability was identified in the Zilliqa Ledger application affecting the generation of Schnorr signatures for native (non-EVM) Zilliqa transactions. The vulnerability causes signatures to be generated with predictably weakened ephemeral nonces, from which an attacker can recover the signer's private key using only publicly available on-chain data.
The Zilliqa team noted that protective measures are already in place to prevent further loss, and a coordinated remediation plan is being finalized.
The vulnerability affects private keys used to sign native Zilliqa transactions with a Ledger device, and any account that has broadcast about five or more native transactions signed through the Zilliqa Ledger app should be considered compromised. This is because their private keys can be reconstructed from signatures already recorded on-chain, regardless of any subsequent software update.
The issue is, however, confined to the Ledger app's native signing path, with EVM transactions unaffected.
22 July 2026 | 16:26 A flaw hidden in Zilliqa’s Ledger app since 2019 let attackers rebuild private keys from public signatures. Now ZIL trades within 1% of its all-time low while Upbit decides its fate by late August.
Key Takeaways A seven-year Ledger app flaw weakened signatures, allowing private keys to be reconstructed after roughly five native transactions. ZIL fell to within about 1% of its all-time low. Zilliqa told affected Ledger users to wait for official guidance rather than move funds on their own. Upbit has placed Zilliqa under formal trading caution after a critical flaw in the Zilliqa Ledger app allowed private keys to be reconstructed from transaction signatures already visible onchain.
The South Korean exchange has not delisted ZIL. Spot trading remains available while Upbit reviews the incident, Zilliqa’s response and the protections being developed for affected balances.
This is important because the current designation gives Zilliqa time to resolve the security issue, but it also opens a direct path toward delisting if the exchange concludes that the vulnerability or its consequences have not been adequately addressed.
Upbit Has Not Delisted ZIL Yet According to Upbit’s official notice, ZIL entered its cautionary review period on July 22. The observation window is expected to continue through the third week of August, covering August 17 to August 21.
During that period, ZIL/KRW and ZIL/BTC trading remains open. Upbit can remove the caution designation if the security concerns are resolved, extend the review if more time is required or terminate trading support if the exchange determines that the risks remain unresolved.
ZIL deposits and withdrawals had already been suspended on July 20. New deposits sent to Upbit while the service is blocked may not be credited and can be returned through the exchange’s recovery process.
Upbit also indicated that withdrawals will receive priority when transaction services begin reopening. Deposits are expected to remain unavailable until the exchange issues a separate announcement.
This creates an unusual position for traders. ZIL can still be bought and sold inside Upbit, but tokens cannot currently move freely into or out of the exchange. Trading therefore continues while the underlying settlement route remains restricted.
ZIL Is Trading Within 1% of Its Record Low The market reaction has pushed ZIL to the edge of uncharted territory. On the ZIL/USD daily chart on OKX, the token traded near $0.0024 as of 13:15 UTC on July 22, down about 7% on the day, after touching an intraday low of $0.00236. That low sits roughly 1% above Zilliqa’s all-time low of $0.002339, according to CoinMarketCap.
The chart also shows when the real damage happened. The heaviest daily selling volume of the past two months arrived on July 20, the day the theft from a partner wallet was disclosed, and the daily Relative Strength Index has fallen to about 28, below the traditional oversold threshold of 30. Price now sits far beneath the 50-day, 100-day and 200-day moving averages, all of which continue to slope downward.
ZIL trades within 1% of its all-time low after the disclosure. Source: TradingView / OKX. The decline reflects more than the possibility of losing an exchange listing. The underlying flaw affects the private keys of some Ledger users and cannot be reversed simply by updating the wallet application.
A Seven-Year Bug Turned Signatures Into a Key Leak The security incident originated in the Zilliqa application used on Ledger hardware wallets, not in the Ledger device’s core hardware and not in Zilliqa’s consensus mechanism.
In its official vulnerability disclosure, Zilliqa said the flaw affected every released version of the app’s native transaction-signing path from 2019 through 2026.
Nonce-Generation Vulnerability in the Zilliqa Ledger App: A critical vulnerability has been identified in the Zilliqa Ledger application affecting the generation of Schnorr signatures for native (non-EVM) Zilliqa transactions. The vulnerability causes signatures to be generated… https://t.co/sudV7WA3TV
— Zilliqa (@zilliqa) July 22, 2026
Native Zilliqa transactions use Schnorr signatures. Each signature depends on a temporary secret number, known as a nonce, which must be generated with sufficient randomness and must never be predictable.
The Zilliqa Ledger app generated the required randomness but copied the wrong section of the result into the signing process. That mistake left the most significant 64 bits of each nonce fixed at zero, materially reducing the randomness protecting each signature.
A single weakened signature leaks only part of the information needed to reconstruct a private key. Repeated signatures from the same account reveal more. Zilliqa said an attacker could recover the private key of an affected account after approximately five or more native transactions using publicly available onchain signatures.
The attacker does not need physical possession of the Ledger device, its PIN or the user’s recovery phrase. The necessary signature data is permanently recorded on the blockchain.
What the Vulnerability Does and Does Not Affect Category Status Explanation Native ZIL transactions signed through Ledger Affected The vulnerable signing process generated weakened nonces that can expose the account’s private key. Accounts with roughly five or more affected signatures Potentially compromised The private key may be reconstructed from signatures already recorded onchain. Zilliqa EVM transactions Not affected The flaw is limited to the native Ledger app signing path. Zilliqa software development kits Not affected Zilliqa’s JavaScript, Go and Python development kits generate transaction nonces correctly. Ledger hardware security Not identified as the source The defect was found in Zilliqa’s application-level signing code rather than Ledger’s secure hardware. This scope prevents the incident from being described accurately as a breach of every Zilliqa wallet or of the blockchain itself. The risk is narrower, but it is still critical for users whose native transactions were signed through the affected Ledger application.
Active Exploitation Was Detected Before the Disclosure The sequence moved quickly: suspicious onchain activity was observed on July 19, a theft was reported on July 20, the root cause was isolated on July 21, and Upbit’s caution designation followed on July 22.
The July 20 report involved ZIL stolen from a cold wallet operated by an exchange partner, which Zilliqa did not name. The project contacted exchanges and requested temporary restrictions on native ZIL deposits and withdrawals while the source of the incident was investigated.
Zilliqa credited KuCoin with helping identify the failure, reconstructing affected private keys from public signatures and confirming that exploitation was taking place. Native Zilliqa transactions were then suspended to prevent additional funds from being drained while a recovery procedure was developed.
A corrected version of the Ledger application has also been prepared in coordination with Ledger. The patch restores the full randomness required when producing new signatures.
Why Moving the Coins Is Not a Safe Fix The usual response to a compromised cryptocurrency wallet is to create a new address and move the remaining assets immediately. Zilliqa has warned that the same response may be ineffective or dangerous in this case.
If an attacker has already reconstructed the private key, both the legitimate holder and the attacker can sign valid transactions from the same address. When native transfers resume, an attacker could monitor the account and attempt to submit a competing transaction before the owner’s transfer is confirmed.
That means a standard wallet evacuation could become a race between two parties controlling the same key. It could also alert an attacker to an account that still contains assets.
“Users who have signed native Zilliqa transactions with a Ledger device should await official guidance before taking any action.”
Zilliqa’s official security disclosure
Affected private keys will ultimately need to be retired, but Zilliqa has not advised users to perform that process independently. The project is finalizing a coordinated plan intended to protect affected balances while native transactions remain suspended.
Users should therefore avoid following unverified wallet-migration instructions, entering recovery phrases into new websites or responding to direct messages offering assistance. The remediation process should be followed only through official Zilliqa and Ledger communications.
The Patch Cannot Repair Previously Exposed Keys The permanent nature of blockchain transaction history creates the central challenge. The corrected application only prevents the creation of new weakened signatures; every vulnerable signature already published remains publicly available forever.
An attacker can perform the private-key recovery calculation at any time using old signatures. Updating the app, changing the Ledger PIN or reinstalling wallet software does not change the private key controlling the affected address.
Resetting a hardware wallet with the same recovery phrase would also recreate the same underlying keys. A genuinely retired key would eventually need to be replaced with a newly generated key that is not derived from the compromised recovery material.
Even that technical step does not solve the immediate transfer problem while an attacker may control the old address. The missing piece is a coordinated mechanism for moving or protecting balances without exposing users to a transaction race once the network resumes.
What Decides Whether ZIL Stays on Upbit Upbit’s final decision is likely to depend on more than the release of a patched Ledger application. The exchange must also evaluate how Zilliqa protects balances associated with keys that may already be compromised.
A complete response would need to establish the affected account population, provide a safe recovery process, prevent additional unauthorized transfers and explain how native transaction services can resume without creating another opportunity for attackers.
The approaching August review window therefore creates a clear deadline for Zilliqa. Repairing the signing code addresses the original technical defect, but restoring exchange confidence requires a credible solution for the keys and balances that were exposed before the patch existed.
Until that plan is published, ZIL remains tradable on Upbit but operationally restricted, while affected Ledger users are being asked to wait rather than attempt an independent transfer.
Source review: Based on Upbit’s official notice, Zilliqa’s security disclosures on X, ZIL/USD market data from TradingView (OKX) and all-time-low data from CoinMarketCap, checked July 22, 2026.
This article is provided for informational purposes only and does not constitute financial, investment or legal advice.
Author
Kosta has reported on cryptocurrency markets and blockchain infrastructure since 2020, bringing over six years of hands-on experience in the crypto industry built through daily tracking of markets, trends, and emerging blockchain developments. Specializing in Bitcoin on-chain analysis, institutional ETF flows, and digital asset price action, his work at Coindoo has been cited by other news agencies and consistently covers market developments with a focus on data-driven reporting across Bitcoin, Ethereum, Solana, and XRP. Over the years, Kosta has contributed to multiple crypto media outlets in different regions, authoring over 6,000 articles across the sector. His reporting spans cryptocurrency markets and the broader fintech industry, tracking not only price action but also the technological and regulatory forces shaping the ecosystem. To support his analysis, Kosta actively leverages on-chain data and metrics from leading platforms such as Santiment, Glassnode, and CryptoQuant, enabling deeper, evidence-based market insights. He believes in the power of transparency and the data that underpins the blockchain ecosystem. His academic background in Marketing Management from Denmark further complements his analytical approach, adding a strong understanding of communication strategy and content positioning to his work.
A hardware wallet vulnerability that went undetected for seven years has forced Zilliqa to suspend all native transactions after attackers began exploiting the flaw on July 19. The nonce-generation bug in the Zilliqa Ledger app allowed private keys to be recovered from public signatures after roughly five on-chain transactions, according to the original report. Every version released between 2019 and 2026 was affected.
The disclosure has already triggered a sharp exchange-side response. South Korea’s Upbit designated ZIL as a cautionary asset across both its KRW and BTC trading pairs, suspended deposits and withdrawals, and warned that trading support could end entirely if the problem is not remedied quickly. The move immediately amplifies the pressure on Zilliqa’s development team, who must now contend not only with patching the flaw but also with the specter of losing one of its most important exchange listings.
How the Flaw Compromises Security The vulnerability sits at the intersection of hardware wallet design and Zilliqa’s nonce implementation. A nonce—a number used once—is supposed to ensure that each transaction signature is unique. When nonces are generated incorrectly, an observer who collects multiple signatures from the same private key can reconstruct the key itself. The problem is especially dangerous because it requires no malware on the user’s device; an adversary only needs to see the publicly broadcast signatures from about five native transfers. The exploit timeline suggests active exploitation began before the public advisory, raising the possibility that funds were taken before the network could react.
Zilliqa’s immediate mitigation was to halt native transactions altogether. EVM-based activity on the network is not affected, but for many long-term holders who used the Ledger app, retiring the compromised keys is now a necessity. That process—generating new wallets and moving assets—carries its own risks if users are not careful. Meanwhile, the incident casts a long shadow over trust in hardware wallet integrations for lesser-known chains, where security audits may have been thinner than for Ethereum or Bitcoin.
Upbit’s Cautionary Flag and the Delisting Threat Upbit’s cautionary asset designation is not a full delisting, but it functions as a public warning that the exchange’s risk management team sees a material threat to user funds. Korean exchanges have grown increasingly aggressive with such flags following regulatory guidance and past incidents, where failure to act quickly drew scrutiny. The parallel between this action and the broader push for exchange accountability is hard to ignore—as regulatory pressures on crypto infrastructure intensify, trading platforms have little tolerance for assets that introduce custody-layer risk.
For ZIL’s liquidity, the suspension of deposits and withdrawals on a major venue like Upbit tightens available exit routes for Korean traders. While the token remains listed for now, the warning creates a binary outcome: either Zilliqa patches the flaw and satisfies Upbit’s review, or trading is terminated. In the interim, market participants are watching whether other exchanges follow Upbit’s lead, which would compound the token’s liquidity squeeze.
What Remains Unresolved The extent of the damage is still unclear. Neither Zilliqa nor Upbit has disclosed how many private keys were actually compromised during the exploitation window, nor what the total loss in dollar terms may be. Additionally, the fact that the flaw existed across every Ledger app version for seven years raises questions about the chain’s overall security review process and how many other integrated apps may contain similar nonce-generation weaknesses. Developer confidence metrics have already become a yardstick for chain health, as tracked by efforts like weekly developer activity rankings, and incidents like this one can erode that confidence quickly.
For hardware wallet users, the advisory is a reminder that a Ledger device does not eliminate risk—it only shifts it. A vulnerability in an app that signs transactions can be just as devastating as a compromised seed phrase. The Zilliqa incident will likely prompt a fresh round of audits across Ledger integrations for other chains, particularly those with smaller developer communities where such flaws could persist without notice. Until those audits are complete, the market will have to price in the possibility that similar vulnerabilities are lurking elsewhere.
AUTHOR
Kester is an experienced freelance content writer. His focus is primarily on blockchain technology and cryptocurrency. One might even refer to him as a "blockchain enthusiast." He has been following advancements in the crypto and blockchain area for several years, researching and writing his insights in the media. In addition to being a skilled content writer, Mushumir is also knowledgeable in SEO and digital marketing. He aspires to succeed as a content creator in the digital realm, dealing with customers in the finance and tech industries to generate traffic through engaging taglines and content. Mushumir enjoys traveling, reading, and playing cricket when he is not writing. He now works as a news and article writer for BlockchainReporter.
Zilliqa suspended native transactions after identifying a critical vulnerability in its Ledger wallet application. The flaw could allow attackers to reconstruct private keys from transaction signatures generated over several years. Exchanges have restricted ZIL transfers while the network prepares recovery instructions for affected users. The issue is limited to Zilliqa’s native Ledger application and does not affect Ledger hardware or the EVM network. Zilliqa has suspended all native (non-EVM) transactions after confirming a critical security vulnerability in its Ledger hardware wallet application, a flaw that could allow attackers to recover users’ private keys from publicly available blockchain signatures. The emergency measure comes as the project works with security researchers and exchanges to contain the incident and develop a recovery process for potentially affected users.
According to the announcement in X, the vulnerability is limited to Zilliqa’s native blockchain and does not impact its EVM-compatible network.
Ledger hardware devices themselves also remain unaffected, with the issue confined to the software implementation of the Zilliqa Ledger application.
Investigation traced the flaw to a years-old cryptographic bug According to Zilliqa, the vulnerability originated from an implementation error in its use of Schnorr signatures, the cryptographic scheme used to authorize native transactions.
As our investigation has progressed, we would like to clarify one important point:
At this stage, we have found no evidence that the incident was caused by the exchange’s wallet management or operational processes. We appreciate the exchange’s cooperation in identifying the… https://t.co/i6UQ62m4CM
— Zilliqa (@zilliqa) July 20, 2026
Rather than generating fully random nonces for each signature, a buffer-copy mistake caused the highest 64 bits of every nonce to be overwritten with zeros. That significantly reduced the randomness protecting each signature, creating conditions under which attackers could reconstruct private keys using lattice reduction techniques after observing enough transactions on-chain.
The project said the vulnerable code had existed in every version of the Zilliqa Ledger application since its initial release in 2019, meaning the flaw remained undiscovered for nearly six years.
The investigation accelerated after suspicious on-chain activity was detected on July 19. Working alongside exchange partners, including KuCoin, engineers traced the attacks to the Ledger application’s signing process before publicly confirming the vulnerability on July 21. One day later, Zilliqa suspended all native transactions while mitigation efforts began.
Only a specific group of users is considered at risk The vulnerability does not affect every ZIL holder equally. Based on the project’s guidance, the highest-risk group includes users who:
Used a Ledger device for native (non-EVM) ZIL transactions. Signed transactions between 2019 and July 2026. Generated approximately five or more signatures with the same private key. The project emphasized that several parts of its ecosystem remain unaffected:
Ledger hardware devices were not compromised. Zilliqa’s EVM-compatible blockchain continues operating normally. Software wallets are not impacted by the vulnerability. Zilliqa has urged potentially affected users not to move funds or attempt independent recovery until official migration instructions are published, warning that premature action could complicate the recovery process.
Exchanges move quickly to contain potential fallout The disclosure prompted immediate action across cryptocurrency trading platforms.
South Korea’s Upbit classified ZIL as a cautionary asset, suspended deposits and withdrawals, and placed the token under a delisting review through mid-August under the country’s investor protection framework.
Other centralized exchanges also temporarily restricted native ZIL transfers while evaluating the potential impact of both the Ledger application vulnerability and reports of a separate theft involving ZIL held in an offline cold wallet managed by one of the ecosystem’s exchange partners. Although the incidents are distinct, their close timing intensified concerns across the market.
Investor sentiment deteriorated following the disclosure. ZIL declined roughly 5% over the previous 24 hours and about 17% over the past week, falling to around $0.0024 as traders assessed the scale of the security incident.
Recovery Now Depends on Replacing Exposed Wallets Unlike many software vulnerabilities, this incident extends beyond deploying a patched application. Because the vulnerable transaction signatures have already been permanently recorded on the blockchain, updating the Ledger app cannot eliminate the exposure associated with signatures created over the past six years.
The next phase of the response will therefore focus on migrating affected users to newly generated wallets rather than restoring the compromised ones. That process is expected to require coordination between Zilliqa, Ledger, cryptocurrency exchanges and wallet holders before native network activity can fully normalize.
TL;DR Zilliqa found a Ledger app flaw that exposes private keys after roughly five native transactions. Native ZIL transactions were suspended, while EVM transactions remain unaffected. Upbit designated ZIL as a cautionary asset and warned trading support could be terminated. A patched Ledger app is ready, but compromised wallets will require new keys under a coordinated recovery plan. Zilliqa has suspended native transactions after uncovering a critical vulnerability in its Ledger application that could allow attackers to reconstruct users’ private keys from publicly available blockchain signatures. The security issue, which existed in every released version of the Zilliqa Ledger app between 2019 and 2026, prompted South Korean crypto exchange Upbit to designate ZIL as a cautionary asset, raising the possibility of further trading restrictions if the issue is not fully resolved.
The blockchain team said the flaw affects only native (non-EVM) Zilliqa transactions signed with Ledger hardware wallets. According to the disclosure, any wallet that signed approximately five or more native transactions using the affected Ledger app should be considered compromised because its private key can be mathematically reconstructed from signatures already recorded on-chain.
To limit further losses, Zilliqa has halted all native transactions while it finalizes a coordinated recovery plan. The project stressed that users who may be affected should avoid taking independent action and instead wait for official instructions, warning that simply transferring funds would not adequately protect compromised wallets because attackers could potentially front-run any transaction once the network resumes.
Nonce-Generation Vulnerability in the Zilliqa Ledger App: A critical vulnerability has been identified in the Zilliqa Ledger application affecting the generation of Schnorr signatures for native (non-EVM) Zilliqa transactions. The vulnerability causes signatures to be generated… https://t.co/sudV7WA3TV
— Zilliqa (@zilliqa) July 22, 2026
Signature Flaw Traced to Weakened Nonce Generation The vulnerability stems from an error in the app’s implementation of Schnorr signatures, which authenticate native Zilliqa transactions.
Each Schnorr signature relies on a unique, randomly generated ephemeral nonce. While the app initially generated enough randomness, a coding mistake copied the wrong 32-byte segment into the signing buffer. As a result, the most significant 64 bits of every nonce were fixed to zero, dramatically reducing the randomness required to keep private keys secure.
Security researchers explained that once around five affected signatures become publicly available, attackers can recover the corresponding private key within seconds using commodity hardware through a well-known cryptographic attack called the Hidden Number Problem solved via lattice reduction techniques. Because those signatures are permanently stored on-chain, updating the Ledger application cannot eliminate the exposure for wallets that have already signed vulnerable transactions. Those keys must ultimately be retired.
Zilliqa emphasized that the issue is isolated to the Ledger application’s native signing path. Users interacting exclusively through the network’s EVM-compatible environment or using official software development kits such as zilliqa-js, gozilliqa-sdk, and pyzil are not affected.
Ziliqa Exploitation Detected Before Public Disclosure According to Zilliqa’s incident timeline, the defect had existed unnoticed across every Ledger app release since 2019.
The team said suspicious on-chain activity consistent with active exploitation was first observed on July 19. Engineers isolated the root cause two days later after reproducing the attack using publicly available blockchain signatures.
A corrected version of the Ledger application has already been prepared in coordination with Ledger and restores proper nonce generation. However, the update cannot secure wallets whose private keys have already been exposed, making a broader remediation process necessary before native transactions can safely resume.
Zilliqa also credited KuCoin’s security team for helping identify the vulnerability, successfully recovering affected private keys from public signatures during the investigation, and confirming that the exploit was actively being abused.
Following the disclosure, Upbit classified ZIL as a cautionary asset across its KRW and BTC markets, citing unresolved security concerns. The exchange has already suspended deposits and withdrawals and warned that trading support could ultimately be terminated if the project fails to sufficiently address the incident.
According to Upbit’s notice, the review period is expected to continue until the third week of August, after which the exchange will decide whether to remove the cautionary designation, extend the review, or delist the token altogether depending on the progress of Zilliqa’s remediation efforts.
Bir dönem kripto para piyasasının en popüler Layer 1 projeleri arasında gösterilen Zilliqa (ZIL), yaşanan güvenlik ihlaliyle yeniden gündeme geldi. Proje ekibi, borsa ortaklarından birinin siber saldırıya uğradığını ve soğuk cüzdanda saklanan ZIL varlıklarının çalındığını doğruladı. Güvenlik ihlalinin ardından olası ek kayıpların önüne geçmek amacıyla tüm kripto para borsalarına ZIL yatırma ve çekme işlemlerini geçici olarak durdurmaları yönünde çağrı yapıldı. Olayın kapsamı henüz netlik kazanmazken, yatırımcılar hem çalınan fonların akıbetine hem de soruşturmadan gelecek resmi açıklamalara odaklanmış durumda.
Zilliqa Güvenlik İhlalini Doğruladı Zilliqa tarafından yapılan resmi açıklamada, borsa ortaklarından birinin güvenlik ihlaline maruz kaldığı ve saldırganların soğuk cüzdanda tutulan ZIL varlıklarına erişim sağladığı belirtildi. Proje ekibi, olayın kapsamının henüz tam olarak belirlenemediğini ve güvenlik ihlalinin nedeninin araştırıldığını ifade ederken, ilgili taraflarla koordineli şekilde çalışmaların sürdüğünü açıkladı. Yaşanan güvenlik ihlalinin ardından Zilliqa ekibi, çalınan varlıkların hareket ettirilmesini önlemek amacıyla tüm kripto para borsalarından ZIL yatırma ve çekme işlemlerini geçici olarak askıya almalarını talep etti.
İlginizi Çekebilir: Bitcoin 65 Bin Dolarda Takıldı: Gözler Yeni Zirvede!
Bu adımın, olası ek kayıpların önüne geçmek ve çalınan fonların izlenmesini kolaylaştırmak amacıyla atıldığı belirtildi. Şirket, saldırıya uğrayan borsa ortağının ismini ve çalınan ZIL miktarını henüz kamuoyuyla paylaşmadı. Yetkililer, soruşturmanın devam ettiğini ve doğrulanmamış bilgilerin paylaşılmasının süreci olumsuz etkileyebileceğini ifade etti.
“Soruşturma aktif olarak devam ediyor. Doğrulanmış bilgiler elde edildikçe yeni güncellemeler paylaşacağız. Kullanıcıların yalnızca resmi Zilliqa kanallarından yapılan açıklamaları takip etmeleri önem taşıyor.”
Bithumb Daha Önce de ZIL İşlemlerini Durdurmuştu Güney Kore merkezli kripto para borsası Bithumb da yaşanan güvenlik endişelerinin ardından ZIL yatırma ve çekme işlemlerini geçici olarak askıya aldığını duyurdu. Bu gelişme, saldırının etkilerinin yalnızca tek bir platformla sınırlı kalmayabileceğine yönelik endişeleri artırırken, yatırımcılar soruşturmadan gelecek yeni açıklamalara odaklandı. Güvenlik ihlalinin duyurulmasının ardından ZIL fiyatında kısa süreli bir satış baskısı görüldü. Ancak panik satışlarının azalmasıyla birlikte altcoin kayıplarının bir bölümünü geri almayı başardı. Analistler, soruşturmanın sonucuna ve çalınan fonların durumuna ilişkin yapılacak resmi açıklamaların ZIL fiyatının kısa vadeli yönü üzerinde belirleyici olacağını ifade ediyor.
Değerlendirme Zilliqa ekosisteminde yaşanan güvenlik ihlali, yatırımcıların güvenlik risklerine yönelik endişelerini yeniden gündeme taşıdı. Proje ekibinin borsalara yaptığı geçici işlem durdurma çağrısı, olası zararların büyümesini önlemeyi hedeflerken, saldırının kapsamına ilişkin belirsizlik sürüyor. Uzmanlar, soruşturmadan gelecek yeni bilgilerin hem ZIL fiyatı hem de yatırımcı güveni açısından kritik önem taşıdığını değerlendiriyor.
Son Dakika kripto para haberleri için hemen tıkla.
Konu ile ilgili yorumlarınızı bize yazabilirsiniz. Ayrıca, bu tarz bilgilendirici içeriklerin devamının gelmesini isterseniz, bizleri Telegram, Youtube ve Twitter kanallarımızdan takip edebilirsiniz.
On July 20, 2026, the Zilliqa blockchain team disclosed a notable security event affecting one of its centralized exchange collaborators. Tokens of the project’s native cryptocurrency, ZIL, were taken from an offline cold wallet managed by the partner. The project has launched a thorough probe in coordination with involved entities to determine exactly what occurred and the extent of the compromise.
Cold wallets represent one of the most protected methods for safeguarding digital assets, as they remain disconnected from the internet and require physical or highly controlled access for any transactions.
A breach at this level has prompted concern across the cryptocurrency sector, highlighting potential weaknesses even in supposedly air-gapped systems. While specifics remain limited, the incident underscores ongoing challenges in third-party custody arrangements within the industry.
In response, Zilliqa promptly reached out to multiple trading platforms, requesting a temporary suspension of all ZIL deposit and withdrawal activities. This precautionary step aims to limit the attacker’s ability to transfer or liquidate the pilfered assets on open markets.
We have been made aware of a security incident involving one of our exchange partners, in which ZIL was stolen from a cold wallet.
The incident is under active investigation, and we are working with the relevant parties to establish the root cause and full scope. As a…
— Zilliqa (@zilliqa) July 20, 2026
Users holding ZIL on affected venues currently face restricted liquidity, meaning they cannot move tokens in or out until the pause lifts.
Trading pairs may continue displaying prices, but actual settlements involving transfers could be blocked during this period.
The project has withheld key details, including the precise quantity of ZIL removed, the identity of the impacted exchange, and any suspected method of intrusion.
Officials stressed that the matter stays under active review and promised additional verified information as it becomes available.
Community members received a clear directive to consult only official Zilliqa communication channels and disregard unconfirmed reports circulating on social media or third-party sites.
Market reaction proved swift. ZIL experienced downward pressure following the announcement, with reports indicating declines of roughly 7% in the initial 24 hours, though some recovery occurred amid broader market movements.
The token traded near the $0.0025 level in the immediate aftermath, reflecting typical volatility when custody incidents surface.
Zilliqa, recognized as an early enabler in sharded blockchain architecture, continues developing its ecosystem with a focus on scalability and enterprise applications.
This event arrives against a backdrop of heightened scrutiny on security practices across digital asset platforms.
Earlier incidents in the broader space have repeatedly demonstrated that even sophisticated storage solutions can face sophisticated threats, whether through advanced persistent attacks, insider risks, or unforeseen technical vulnerabilities.
For holders and participants, the episode serves as a reminder of fundamental risk management principles: diversify custody methods, prefer self-custody for significant amounts when feasible, and remain vigilant about official updates.
The Zilliqa team indicated that further technical findings would be released once validated, potentially shedding light on any systemic issues or recommended safeguards for partners.
As the investigation progresses, the crypto ecosystem will watch closely for resolution steps, potential recovery efforts, and any long-term adjustments to custody or signing protocols. In the meantime, the temporary trading restrictions aim to contain fallout and protect the wider network’s integrity.
FATF Releases Seventh Virtual Asset/VASP Standard Implementation Update: Global Regulation Advances, but Enforcement and DeFi Oversight Still Show Significant Gaps
The international anti-money laundering standard-setter FATF (Financial Action Task Force) recently released a report stating that global regulation of virtual assets (VA) and virtual asset service providers (VASP) continues to progress, with 86% of jurisdictions having completed risk assessments and 83% having legislated to implement the Travel Rule. The proportion of jurisdictions rated “largely compliant” with R.15 rose to 34%. However, significant deficiencies remain in enforcement, VASP identification, offshore VASP regulation, and DeFi regulation. The report also warns of emerging risks such as stablecoin abuse, non-custodial wallet P2P transactions, offshore VASPs, DeFi, and AI-assisted fraud, and calls for strengthened international cooperation, risk-based regulation, and public-private collaboration.
Zilliqa: ZIL Stolen from an Exchange’s Cold Wallet, All Exchanges Notified to Temporarily Suspend ZIL Deposits and Withdrawals
The project team learned that one of its exchange partners suffered a security incident, resulting in some ZIL being stolen from a cold wallet. The incident is currently under joint investigation by multiple parties, and the specific scale and cause of the theft have not yet been disclosed. As a precautionary measure, Zilliqa has notified all exchanges to temporarily suspend ZIL deposits and withdrawals to prevent the stolen funds from being transferred or sold through centralized platforms. The team stated that further updates will be released once accurate information is available, and reminded users to only follow official channels.
White House Has Not Yet Signed the ‘Clarity Act’ Ethics Clause, Legislative Text Still Awaiting Update
The White House and Republican senators have yet to reach an agreement on the digital asset-related ethics provisions in the “Clarity Act,” leaving the bill unable to be scheduled for a Senate vote. President Trump met last week with Chief of Staff Susie Wiles, White House Counsel David Warrington, Crypto Council Executive Director Patrick Witt, Acting Attorney General Todd Blanche, and Senators Cynthia Lummis and Bernie Moreno, but the White House has not yet clarified acceptable ethical boundaries. Technical negotiations continue on the BRCA provisions in the bill and on the Agriculture Committee’s text regarding vertical integration and affiliate transactions of crypto exchanges. Law enforcement concerns that “crypto fuels money laundering and crime” are also affecting the stance of some Democratic lawmakers. If a procedural vote cannot be advanced this week, the window for passing the bill before the August recess will essentially close.
Strategy Did Not Increase Bitcoin Holdings Last Week, Injected $225 Million into Dollar Reserves
Michael Saylor’s Strategy (formerly MicroStrategy) did not purchase any bitcoin over the past week. Meanwhile, the company added $225 million to its dollar reserves, bringing its total dollar reserves to approximately $3.2 billion.
Coinbase to Launch CRCL, HOOD, MSTR Perpetual Contract Trading on July 21
Coinbase announced that it will launch perpetual contract products related to CRCL, Robinhood (HOOD), and MicroStrategy (MSTR). The platform plans to open trading for the CRCL-PERP, HOOD-PERP, and MSTR-PERP perpetual contract markets on or after 9:00 UTC on July 21 (17:00 Beijing time on July 21).
BitMine Increased ETH Holdings by 7,430 Last Week, Repurchased 5.5 Million Common Shares in the Same Period
BitMine added 7,430 ETH last week, bringing its total ETH holdings to 5,777,468 ETH, approximately 4.8% of the total Ethereum supply. The company disclosed that the total value of its crypto, cash, and other investment assets is approximately $11.5 billion, including $385 million in cash and marketable securities, 207 BTC, $180 million in Beast Industries equity, and a $58 million investment in Eightco Holdings (ORBS). BitMine has staked 4,917,189 ETH (about 85% of its ETH holdings), valued at approximately $9.2 billion based on a price of $1,879 per ETH, with current annualized staking income of about $247 million, and earns yield through its self-built MAVAN staking network. Bitmine repurchased 5.5 million common shares last week, carried out under the previously announced $4 billion share repurchase program authorization.
Foreign Media: Google’s ‘Frozen V2’ Chip Expected to Be 6–10 Times More Efficient Than Its Existing TPUs
Two people familiar with the matter revealed that Google is developing a new server chip that can directly integrate the design blueprint of its Gemini AI model, thereby enabling the company to deliver AI model services to users more efficiently. The sources said that Google hopes to leverage this new chip, internally codenamed “Frozen v2,” to alleviate the severe shortage of AI computing power. The lack of computing power has not only triggered internal resource contention but also forced Google Cloud to turn down collaborations with some external customers. According to the sources, Google employees involved in the project expect that once the chip is launched, its efficiency, measured by tokens processed per unit of power consumption, will be 6 to 10 times higher than that of Google’s current latest-generation self-developed AI chip. Engineers are still deciding the main features of the new chip and how the various components will work together. Sources said Google plans to deploy the chip as early as 2028. Alphabet (GOOG.O) rose in pre-market trading, now up 1.2%.
AI Security Control Platform Neo Completes $100 Million Funding Round Led by Andreessen Horowitz and Bessemer Venture Partners
Neo, a company founded by former SentinelOne executives, announced the completion of a $100 million funding round led by Andreessen Horowitz and Bessemer Venture Partners, with participation from Craft Ventures and Merlin Ventures. Neo is positioned as an “Agentic Software Control” platform, providing enterprise SecOps teams with real-time inventory, capability and risk intelligence, behavioral attribution, and fine-grained policy control over AI agents, AI applications, browsers, identities, and traditional software, with native ability to intercept high-risk operations and malicious models. Gartner predicts that by 2026 the proportion of enterprise applications with agentic capabilities will rise from 5% in 2025 to 40%. Neo plans to use this funding to accelerate product development and market expansion, helping enterprises enhance security governance while adopting AI agents at scale.
Hut 8 Signs $9.8 Billion Long-Term Deal to Advance AI Data Center Expansion, Related Computing Power Stocks Rise
Bitcoin miner and AI infrastructure developer Hut 8 (HUT) has signed a second-phase 15-year lease agreement with the same investment-grade tenant, valued at approximately $9.8 billion, for its Beacon Point AI data center campus in Texas. The new agreement will add 352 megawatts of AI computing power based on Nvidia architecture, bringing the tenant’s total contracted computing power at the campus to 704 megawatts and commercializing the campus’s full 1 gigawatt of power capacity, with the total base contract value for the campus rising to approximately $19.6 billion. Boosted by this, shares of IREN, Cipher Mining (CIFR), TeraWulf (WULF), and the CoinShares Bitcoin Miners ETF (WGMI) rose simultaneously in early trading.
Exodus Lays Off 25% to Cut Costs and Focus on Stablecoin Payments and Card Infrastructure
Exodus Movement (EXOD) will reduce its global workforce by approximately 25% to cut costs and shift its business focus to stablecoin payments and card payment infrastructure. In a recent filing, the company said the restructuring is part of its strategy to build a complete payment stack platform following the acquisitions of e-money institution Monavate and crypto payment company Baanx. Exodus expects to record pre-tax restructuring charges of approximately $2.5 million to $3.5 million, primarily for severance and employee-related costs, and anticipates annual cash operating expense savings of about $10 million to $13 million through 2027. EXOD shares rose about 2.2% in early trading but remain down nearly 85% from the same period last year.
ZachXBT: TeleSwap suspected of $735,000 attack, still undisclosed 5 days later
The cross-chain bridge TeleSwap is suspected of suffering an attack exceeding $735,000 on July 15, 2026. As of July 20, 2026 Beijing time, the project team has still not publicly disclosed the incident. Shortly after the attack, TeleSwap’s Bitcoin hot wallet stopped processing transactions; about two hours ago, the attacker transferred the stolen funds into Tornado Cash, suspected of mixing. ZachXBT also disclosed suspected addresses involved and TeleSwap’s Bitcoin hot wallet address for community tracking.
Skyfall AI plans to use AI to take over SME operations, verifying feasibility of “AI CEO”
Founded by a former Microsoft AI team, Skyfall AI plans to spend up to $1 million to acquire a small B2B SaaS or e-commerce company, with an AI acting as “CEO” responsible for key decisions such as pricing, marketing, customer service, finance, and operations. The goal is to double revenue while gradually reducing human intervention. Its founders Sam Pasupalak and Kaheer Suleman believe that existing enterprise AI paths centered on LLMs and “digital employees” struggle to continuously learn in dynamic environments. Skyfall is instead developing “Enterprise World Models,” simulating the long-term impact of decisions on business by building enterprise evolution world models and latent world models, and will publicly verify in real business scenarios whether this architecture can support highly autonomous enterprises.
Superseed to abandon its own Layer2 and return to Ethereum mainnet, users need to bridge assets out before August 15
The project announced it will abandon its own Layer2 and focus on launching a self-repaying loan product on the Ethereum mainnet. The team will deploy a native lending protocol and stable asset suprUSD, and automatically repay users’ debts and improve collateral utilization through “Super Strategies” yield strategies. The native token SUPR will be used for strategy efficiency and potential fee sharing. Officials require users to bridge all assets such as USDC, USDT, oUSDT, cbBTC, OP, and ETH on the Superseed chain to other chains before August 15, 2026; after the deadline, all assets except SUPR (which will be distributed later via a subsequent contract) may be irrecoverable.
Bloomberg: Correlation between Korean stocks and Nasdaq approaches two-year high, becoming a global AI investment sentiment bellwether
As the correlation between the South Korean stock market and U.S. tech stocks continues to strengthen, global fund managers are viewing the Korean market as a leading indicator of AI investment sentiment. Monitoring the trends of Korean tech stocks such as Samsung Electronics and SK hynix before the market opens has become a new normal in the industry. The 60-day correlation coefficient between the Korea Composite Stock Price Index (KOSPI) and the Nasdaq 100 Index has risen to 0.46, close to the highest level in the past two years and about three times the five-year average of 0.16. Especially during market downturns, the sensitivity of the Nasdaq to Korean stock moves has increased significantly, with the relevant indicator hitting its highest level since 1990 on the 7th of this month.
Analyst: Declining stablecoin reserves signal liquidity contraction, Bitcoin’s breakout still lacks capital support
CryptoQuant analyst Darkfost published a note pointing out that Bitcoin has been oscillating around the $60,000 key support level for nearly 165 days, failing to hold above it and reignite upward momentum. A core reason is the lack of new liquidity in the market. Over the past 30 days, the net outflow of stablecoin reserves on Binance and Bybit approached $2.3 billion. New demand, whether flowing into Bitcoin or the broader crypto market, has been relatively weak. Exchange stablecoin reserves have been declining continuously this year. This relatively bearish market sentiment is still limiting the capital support needed for Bitcoin to break out of its current consolidation range. However, as regulatory measures such as the GENIUS Act require stablecoins to improve compliance, the decentralized nature of the stablecoin ecosystem may be weakened. In the long term, Bitcoin’s decentralized characteristics may become more prominent as a result.
Analysis: Bitcoin “volatility storm” may be coming, market could face a new round of turbulence
Market analysts are reminding traders to pay close attention to a potential Bitcoin “volatility storm” — a rapid spike in volatility — which often accompanies price declines. This warning is primarily based on the trend of Bitcoin’s 30-day Implied Volatility Index (BVIV), often seen as the crypto market’s version of the “fear index” (VIX), whose changes are influenced by options demand. Options are derivatives used by investors to hedge against the risk of sharp market fluctuations; the higher the demand, the higher the implied volatility usually is, and vice versa. Currently, BVIV is hovering in the 34%-38% range. Historical data shows this area has repeatedly been a critical juncture before volatility outbreaks, often followed by Bitcoin price pullbacks. Although past performance does not guarantee future recurrence, the market generally believes volatility exhibits mean-reverting characteristics. Typically, a low-volatility phase is easily followed by a volatility expansion, while a high-volatility phase may gradually return to stability.
Tom Lee responds to slowing ETH purchases: Due to large-scale stock buybacks
Bitmine Chairman Tom Lee stated that Bitmine’s recent ETH purchase pace has slowed somewhat due to large-scale stock buybacks during the same period. However, since launching its ETH Treasury Strategy on June 30, 2025, it has maintained a weekly ETH buying rhythm. Bitmine repurchased approximately 5.5 million common shares over the past week at an average repurchase price of $15.6156 per share, and this stock buyback will help enhance shareholder value. In addition, Bitmine’s proprietary staking business generated a yield of 2.67% (annualized) over the past 7 days, and it will continue to strengthen its digital asset treasury strategy by expanding ETH holdings and staking yields.
Analysis: Memory chip trio hit by sell-off, Samsung’s low valuation may become a new choice for investors
The share prices of the three major memory chip companies — Samsung Electronics, SK hynix, and Micron Technology — all fell this month, providing an opportunity for investors to reposition in the rapidly growing memory chip sector. The market is concerned that the current memory chip boom driven by AI demand may slow in the coming years, repeating the familiar “expansion—oversupply—downturn” pattern seen in cyclical industries. Analysts note that if investors choose to enter the memory chip sector at this stage, they need to believe that AI-driven memory demand growth can be sustained and will be able to withstand the risks brought by industry cyclical fluctuations. In terms of investment choice, one strategy is to focus on the company with the lowest valuation. Samsung currently trades at a relatively low valuation among the three major memory chip firms, potentially making it a choice for some investors seeking exposure to memory sector growth.
Arthur Hayes bought another 1,332.5 ETH 3 hours ago, worth about $2.53 million
BitMEX co-founder Arthur Hayes bought another 1,332.5 ETH ($2.53 million) 3 hours ago.
Ethereum pre-mine address dormant for 11 years activated, containing 2,000 ETH
At 03:30 Beijing time today, a dormant pre-mine address containing 2,000 ETH was activated after 11 years of inactivity. The address was worth about $620 in 2015 and is currently worth about $3.785 million.
Grayscale has submitted a Worldcoin ETF registration statement to the U.S. SEC
Grayscale has submitted a Grayscale Worldcoin ETF registration statement to the U.S. Securities and Exchange Commission (SEC). The fund will hold WLD, the native token of the World Network, as a passive investment vehicle, aiming for each share’s value to reflect the value of the held WLD minus expenses and liabilities. If approved, the ETF will list on Nasdaq, with Bank of New York Mellon serving as transfer agent and BitGo Bank & Trust as custodian.
The Russian State Duma will conduct the second and third readings of the crypto market regulation bill on July 21
Anatoly Aksakov, Chairman of the Russian State Duma Financial Market Committee, stated that the crypto market regulation bill will undergo its second and third readings on July 21. Aksakov said the bill will “combat the illegal use of cryptocurrencies” while providing legal space for international settlements. Under the bill, non-professional investors wishing to purchase cryptocurrencies must pass a special test, with an annual limit of 300,000 rubles, can only trade through licensed institutions, and may only buy the most liquid crypto assets. The bill was originally scheduled to take effect on July 1, but was postponed to September 1. The Duma Financial Market Committee had previously rejected multiple amendments to relax the rules, including increasing the purchase limit for non-professional investors and allowing the use of non-custodial wallets. If passed on the 21st, the bill still needs approval from the Federation Council and the president’s signature.
Trump did not sign ethics provisions, Clarity Act negotiations deadlocked
Last Thursday, President Trump held a meeting with Republican Senators Bernie Moreno and Cynthia Lummis, and White House crypto advisor Patrick Witt on the ethics provisions of the Clarity Act, but the meeting details were not disclosed. Industry sources revealed that Trump did not sign the ethics provisions at the meeting, and the two sides failed to reach agreement on any provisions, with concerns that the clauses could have adverse effects on Trump in the future. Lummis' spokesperson declined to comment, and Moreno's team and the White House did not respond. The ethics provisions are one of the last obstacles to passing the Clarity Act, aimed at restricting senior officials including the president, vice president, and members of Congress from profiting from digital assets during their tenure, with the core controversy centering on Trump’s meme coin and his family company World Liberty Financial. Politico previously reported that the current text lacks Democratic support, and Senator Ruben Gallego stated there will be no Democratic votes without strong ethics provisions. The bill text is expected to be released in the coming days, and the Senate needs to vote by the first week of August, but industry sources say the text may not be released until an ethics deal is reached.
Coinbase executive: US Democrats have added consumer protection rules to the CLARITY Act
Coinbase Vice Chairman Ryan VanGrack said that Democratic lawmakers in the US have added customer protection provisions to the digital asset market structure bill, the CLARITY Act, which is under consideration in the Senate. The new provisions are designed to ensure that digital asset trading platforms better protect consumer rights during their operations, including strengthening transparency requirements, preventing fraud, and ensuring the security of customer funds. He added that these consumer protection measures are the result of bipartisan cooperation, reflecting legislators' growing attention to the digital asset market. The bill is still under Senate review and has not yet reached the final voting stage. VanGrack's comments were made during a public discussion on digital asset regulation, and he emphasized that Coinbase supports establishing a balanced regulatory framework that both promotes innovation and protects investors.
Total marked suspicious trades on prediction market Polymarket in H1 this year about $200 million
As prediction markets like Kalshi and Polymarket become increasingly popular and scaled, the use of insider information for trading is surging. Bloomberg’s analysis of about 34,000 suspicious trades on Polymarket flagged by Polysights shows that from January to June 2026, the total volume of suspicious trades flagged on Polymarket was about $200 million, with geopolitical and war-related bets being the main driver, and Iran-related bets peaking in late February. Among the flagged trades, as many as 71% were funded through US-regulated crypto exchanges. Profits from flagged suspicious trades are highly concentrated, with the top 1% of profitable wallets reaping over half of the profits, and 57% of these wallets created within 24 hours before trading. Several cases have already triggered investigations: a US soldier was accused of using military secrets to profit over $400,000 on Polymarket; Israeli reserve soldiers were accused of using secret intelligence to bet on Iran events. Although Polymarket bans US users, users can bypass restrictions via VPN. Goldman Sachs has banned employees from trading prediction markets, and the US Senate prohibits lawmakers and staff from participating.
South Korea's KOSPI index volatility surpasses 60%, higher than Bitcoin, AI chip duopoly and leveraged ETFs the main causes
South Korea's KOSPI index volatility has exceeded 60% this year, almost twice that of the Nikkei 225, even higher than Bitcoin, known for its volatility. The Korea Exchange has triggered circuit breakers seven times this year (zero in 2025, only once in 2024). The root cause of the volatility lies in Samsung Electronics and SK Hynix, the two AI chip giants that together account for over 50% of the KOSPI market cap. The AI boom has driven their stock prices soaring, but the sector’s valuation is highly dependent on investor sentiment, while AI has yet to generate enough revenue to cover construction costs. The proliferation of leveraged ETFs has exacerbated market volatility. Korean retail investors actively use leveraged products, with over $4 billion flowing into leveraged ETFs tracking individual stocks this year, accounting for more than 70% of the daily trading volume of the related stocks, amplifying price swings. Retail investors net purchased over 100 trillion won (about $67 billion) of KOSPI stocks this year, while foreign investors net sold about $108 billion. Goldman Sachs strategists noted that “leveraged ETFs are a major risk to watch.” Although margin debt has retreated from its June peak, it remains significantly higher than the same period last year.
A new wallet withdrew 74,000 ETH from Gemini and staked all, worth about $136 million
A newly created wallet withdrew 74,033 ETH ($136.17 million) from Gemini and staked all of it.
Japanese media: US Big Five tech giants' "hidden debt" soars to $1.65 trillion
A study by Nikkei shows that with the surge in AI investment, the hidden debt of US tech giants has grown eightfold in just four years, estimated to reach $1.65 trillion. This figure exceeds their actual on-book debt, making it harder for investors to assess the associated risks. Nikkei analyzed recent financial statements and other materials of Google parent Alphabet, Microsoft, Amazon, Meta, and Oracle. Among them, Meta’s off-balance-sheet debt is particularly high, at about $420 billion, nearly three times its recorded debt.
London Stock Exchange plans to launch round-the-clock trading in H1 2027 to win back retail market
London Stock Exchange Group (LSEG) plans to launch an independent night trading venue in the first half of 2027 to win back retail investors and compete with crypto platforms that operate 24/7. Initially, this after-hours market will offer trading services for exchange-traded products (ETPs), including funds tracking UK and US stock markets.
Solv: BTC+ contract attacked due to deployer private key leak, subscriptions and redemptions expected to resume within two weeks
Solv Protocol posted on X platform stating that on July 13, the BTC+ contract on BNB Smart Chain suffered a security incident. After investigation, the attacker compromised the deployer’s private key and upgraded the BTC+ minting proxy contract on BSC, minting unauthorized BTC+ tokens. The team completed emergency response within three hours, isolated the malicious contract, and froze, burned, or isolated all unauthorized BTC+. All underlying BTC assets are safe. As a precaution, BTC+ subscriptions and redemptions have been suspended and are expected to resume within two weeks. BTC+ has never established official liquidity pools on any DEX, and users should only obtain and hold BTC+ through Solv’s official channels. The team has upgraded deployer security measures, rotated all affected access credentials and signing keys, and initiated a comprehensive external re-audit. A detailed post-mortem report will be released later.
A whale spent 20 million USDC to buy 10,500 ETH
A whale just transferred 20 million USDC into Binance, bought 10,501 ETH at $1,904, and withdrew it back to an on-chain wallet.
Trump has agreed to ethics provisions, clearing the last obstacle for the Clarity Act
U.S. President Trump has agreed to the ethics provision, clearing the final hurdle for the passage of the Clarity Act. Industry sources say that after months of negotiations, the two sides reached an agreement on the ethics provision. The provision was discussed during Trump’s July 16 meeting with Republican senators and White House crypto advisors, when no agreement was reached, but on Monday the provision was signed by Trump. The bill text is expected to be released in the coming days, and the Senate needs to vote by the first week of August. If passed, the bill will return to the House and then be sent to Trump for signature. The ethics provision was the final obstacle to the Clarity Act’s passage, and it aims to restrict senior officials such as the president, vice president, and members of Congress from profiting from digital assets while in office. The core controversy revolves around Trump’s Meme coin and his family company World Liberty Financial. White House crypto advisor Patrick Witt has postponed military training to remain at the White House to push the bill, and his deputy Harry Jung will leave in two weeks.
Robinhood Opens Its Platform to AI Agents, Users Can Authorize AI to Trade and Manage Portfolios
Robinhood announced on X that Robinhood is now open to AI agents. Users can open an agent account and connect an AI agent, authorizing it to research, trade, and manage their portfolio on their behalf. Users only need to add the Robinhood MCP server to the agent platform, and the entire setup takes less than a minute.
Anchorpoint, Led by Standard Chartered, Expected to Launch Hong Kong Dollar Stablecoin HKDAP as Soon as This Month
Anchorpoint, a fintech company formed under the leadership of Standard Chartered Bank (Hong Kong), is expected to announce the launch of a stablecoin by the end of this month at the earliest. Anchorpoint plans to launch HKDAP, a stablecoin pegged to the Hong Kong dollar. Virtual asset trading platforms including OSL Group and HashKey Exchange will serve as distributors. An Anchorpoint spokesperson told the Hong Kong Economic Journal that preparations for the phased issuance of the regulated Hong Kong dollar-pegged stablecoin HKDAP are proceeding as planned, and further updates will be announced in due course.
Zilliqa asks exchanges to pause ZIL transfers after suspected cold wallet theftZilliqa said exchanges paused ZIL deposits and withdrawals after an exchange partner’s cold wallet was compromised, with the amount stolen still undisclosed.
Zilliqa, a layer-1 blockchain network, said it is investigating a security incident involving an exchange partner after ZIL was stolen from a cold wallet.
In an X post on Monday, Zilliqa said it had asked exchanges to temporarily pause ZIL deposits and withdrawals as a precaution while it investigates the incident.
Zilliqa did not disclose the amount of ZIL stolen, identify the affected exchange partner or explain the possible cause of the incident. “We understand the community will have questions. We will share further updates as soon as we have verified information,” it said.
Zilliqa was launched in 2017 as a blockchain designed around sharding, a technology that splits transaction processing across multiple groups of nodes to improve scalability. The project was co-founded by researchers Amrit Kumar and Xinshu Dong, with the network’s mainnet going live in January 2019.
Zilliqa’s native token, ZIL, is used for transaction fees and smart contracts on the network. According to CoinGecko, ZIL was trading at around $0.0025 at the time of writing, down 7.1% over the past 24 hours.
Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph’s Editorial Policy and aims to provide accurate and timely information. Readers are encouraged to verify information independently.
Zilliqa asks exchanges to pause ZIL transfers after suspected cold wallet theftZilliqa said exchanges paused ZIL deposits and withdrawals after an exchange partner’s cold wallet was compromised, with the amount stolen still undisclosed.
Zilliqa, a layer-1 blockchain network, said it is investigating a security incident involving an exchange partner after ZIL was stolen from a cold wallet.
In an X post on Monday, Zilliqa said it had asked exchanges to temporarily pause ZIL deposits and withdrawals as a precaution while it investigates the incident.
Zilliqa did not disclose the amount of ZIL stolen, identify the affected exchange partner or explain the possible cause of the incident. “We understand the community will have questions. We will share further updates as soon as we have verified information,” it said.
Zilliqa was launched in 2017 as a blockchain designed around sharding, a technology that splits transaction processing across multiple groups of nodes to improve scalability. The project was co-founded by researchers Amrit Kumar and Xinshu Dong, with the network’s mainnet going live in January 2019.
Zilliqa’s native token, ZIL, is used for transaction fees and smart contracts on the network. According to CoinGecko, ZIL was trading at around $0.0025 at the time of writing, down 7.1% over the past 24 hours.
Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph’s Editorial Policy and aims to provide accurate and timely information. Readers are encouraged to verify information independently.
Zilliqa has asked cryptocurrency exchanges to temporarily suspend ZIL deposits and withdrawals after an exchange partner suffered a suspected cold wallet compromise.
Summary
Zilliqa asked exchanges to halt ZIL transfers after a partner’s cold wallet was reportedly compromised. The network has not disclosed the stolen amount, affected exchange, or suspected cause of theft. ZIL fell about 9% as transfer suspensions and unanswered questions weighed on short-term market sentiment. The layer-1 blockchain project said ZIL had been stolen from the affected wallet and that it had started investigating the incident with the unnamed partner. Zilliqa has not disclosed how many tokens were taken, their value or how the attacker gained access to the wallet.
“We understand the community will have questions. We will share further updates as soon as we have verified information,” Zilliqa said.
The project also asked users to rely on its official channels while investigators establish what happened.
The announcement points to a compromise involving an exchange partner rather than a confirmed breach of the Zilliqa blockchain itself. However, the team has not yet released a technical review or identified the affected company, leaving the exact attack method unknown.
Exchanges pause ZIL deposits and withdrawals Zilliqa said it contacted exchanges and requested temporary restrictions on ZIL transfers as a precaution. The measure limits the ability to deposit or withdraw the token through participating trading platforms while the investigation continues.
We have been made aware of a security incident involving one of our exchange partners, in which ZIL was stolen from a cold wallet.
The incident is under active investigation, and we are working with the relevant parties to establish the root cause and full scope. As a…
— Zilliqa (@zilliqa) July 20, 2026 Bitget separately announced that it would suspend deposits and withdrawals on the Zilliqa network from July 20 at 18:15 UTC+8. The exchange cited “wallet maintenance” and said it would announce a reopening time later. Bitget did not publicly link its maintenance notice to the theft in the announcement.
The transfer restrictions do not stop the Zilliqa blockchain from processing transactions between onchain addresses. Instead, participating exchanges can prevent users from moving ZIL into or out of their platforms until they complete their own checks or receive further information.
Meanwhile, ZIL faced fresh selling pressure following the security announcement. CoinGecko data showed the token trading near $0.00254 at the time of writing, down about 9% over 24 hours. Market prices can change quickly while details about the incident remain limited.
Cold wallet compromise raises questions over the theft Cold wallets keep private keys away from constantly internet-connected systems and are widely used by exchanges to store larger crypto balances. However, cold storage does not remove every security risk. Problems involving signing devices, private-key access or internal operational controls can still expose assets.
A major example came in February 2025, when Bybit lost about $1.4 billion after attackers compromised a cold wallet transaction process. As crypto.news previously reported, the incident showed that attackers can target the systems and people involved in authorizing transactions even when assets sit in offline storage.
More recent security cases have also shifted attention toward wallet access and key management. Crypto.news reported in May that a roughly $520,000 incident connected to Polymarket activity was linked to a compromised private key used for an internal operations wallet rather than the platform’s core contracts.
Zilliqa has not said whether the latest theft involved a stolen private key, compromised signing system or another type of security failure. It has also not said whether the stolen ZIL has moved to other wallets or reached centralized exchanges.
Until investigators release wallet addresses or transaction records, the amount stolen and the movement of the funds cannot be independently assessed from Zilliqa’s public statement alone.
Zilliqa waits for verified findings before releasing details The latest incident comes after Zilliqa faced several technical problems in previous years, although those events involved network operations rather than a disclosed exchange wallet theft.
As previously reported by crypto.news, Zilliqa announced a permanent fix in September 2024 after a bug interrupted block production. The network had also dealt with other disruptions involving block generation and node synchronization during that period.
Those earlier technical problems have not been publicly connected to the current exchange partner incident. Zilliqa’s latest statement specifically describes the event as the theft of ZIL from a cold wallet controlled by a partner.
The project launched its mainnet in 2019 and became known for using sharding to divide transaction processing across groups of nodes. ZIL serves as the network’s native asset and is used for transaction fees and smart contract activity.
For now, the main unanswered questions concern the identity of the affected exchange, the amount of ZIL stolen and the method used to compromise the wallet. Zilliqa has not provided a timeline for completing its investigation or said when exchanges should restore normal transfers.
Zilliqa (ZIL), one of the most popular altcoins during the previous bull run, announced that one of its exchange partners suffered a security breach and that ZIL assets held in a cold wallet were stolen.
The Layer 1 blockchain reported that a security incident involving ZIL and its exchange partner led to the theft of ZIL from a cold wallet, and that the investigation is ongoing.
With this announcement, the ZIL team requested that all exchanges temporarily suspend ZIL deposit and withdrawal transactions to prevent further damage and stop the movement of stolen funds through exchanges.
The company has not yet publicly disclosed the name of the exchange affected by the security breach or the amount of ZIL stolen. The team stated that the investigation is ongoing and that they are actively investigating the incident and coordinating with relevant parties to determine the cause and extent of the security breach.
Zilliqa stated that it will provide further updates as verified information becomes available and advised users to rely only on official Zilliqa channels for relevant information.
Previously, the South Korean exchange Bithumb had also temporarily suspended ZIL deposits and withdrawals due to suspected security concerns.
Although the price of ZIL dropped after the incident, it subsequently recovered.
*This is not investment advice.
Follow our Telegram and Twitter account now for exclusive news, analytics and on-chain data!
A security incident at one of Zilliqa’s exchange partners has forced the network to ask all centralized platforms to halt ZIL deposits and withdrawals, freezing liquidity for the native token of one of the industry’s earliest sharding blockchains. The breach, first reported by WuBlockchain in the original report, targeted a cold wallet, raising immediate questions about how an offline storage system could be compromised.
The Zilliqa team confirmed that the stolen funds were ZIL tokens held in a partner exchange’s cold wallet, but neither the name of the exchange nor the precise amount taken has been disclosed. In a public statement, the project said it is working with the affected party and other stakeholders to determine the root cause and full scope of the loss. The decision to temporarily pause all centralized exchange deposits and withdrawals is a containment measure, aimed at preventing the attacker from moving or selling the stolen assets through regulated order books.
A Confirmed Breach, Few Details The absence of key details means traders and liquidity providers are operating in the dark. Cold wallet thefts are rare because they typically require physical access, insider compromise, or a sophisticated attack on the custody infrastructure that eventually connects the wallet to hot systems for processing withdrawals. Zilliqa did not say whether the cold wallet belonged to a large-tier exchange or a smaller regional partner, leaving wide uncertainty over the potential market impact.
The chain, launched in 2017, has faced its share of technical and adoption hurdles despite being an early adopter of sharding. Projects that have been around for nearly a decade often rely on a handful of exchanges for liquidity, so a breach at even one partner can ripple through the market. ZIL is listed on several major exchanges, and the deposit freezes mean that arbitrageurs and market makers cannot rebalance positions, which could widen spreads or lead to brief dislocations once trading resumes.
Cold Wallets Are Not Always Cold Cold wallets are supposed to be impervious to internet-based attacks because their private keys are stored offline. But recent history shows that even offline environments are vulnerable. In 2024, WazirX lost over $230 million after a multi-signature cold wallet was drained in what investigators believe was a combination of social engineering and compromised offline signers. While no connection to that event exists here, the pattern of cold wallet breaches is unsettling a market that has spent years being told that offline storage equals safety.
What makes this case particularly opaque is that Zilliqa’s disclosure labels the victim as an “exchange partner,” which likely means a third-party custodian or liquidity provider using Zilliqa’s infrastructure. The lack of transparency is not necessarily suspicious—forensic investigations often require silence—but it adds to the anxiety. If the exploit was due to a vulnerability in Zilliqa’s own transaction signing or multisig logic, it would be a systemic risk. If it was a purely operational failure at the exchange level, the damage might be more contained.
As institutions globally push for clearer custody rules—a debate captured by legislation like the GENIUS Act in the U.S., where banks are trying to kill the biggest crypto bill—incidents like this provide ammunition for those demanding that exchanges be held to bank-grade security standards. The incident also comes at a time when some altcoin foundations are aggressively marketing their chains to institutional staking services. Notably, Sui’s recent price surge was driven partly by institutional staking demand, as detailed in BlockchainReporter’s coverage. Cold storage failures erode the trust that such institutional interest is built on.
Market Freeze and Ecosystem Reaction ZIL’s on-chain activity remains unaffected; the blockchain itself processes transactions as normal. The freeze only applies to centralized exchange interfaces, which still account for the bulk of retail volume. Decentralized exchanges like ZilSwap continue to operate, although liquidity is limited compared to major CEX venues. The incident is unlikely to cause a protocol-level downgrade, but it will test how the Zilliqa community and its remaining validators handle the reputational hit.
Meanwhile, developer activity on Zilliqa has been subdued relative to competing chains. According to recent data, networks like Ethereum, Solana, and BNB Chain dominate by developer activity, as shown in BlockchainReporter’s weekly ranking. For a chain that once positioned itself as a high-throughput alternative, the combination of a security shock and a shrinking developer footprint leaves it in a precarious spot.
What Comes Next Zilliqa’s investigation will likely focus on whether the cold wallet’s signing process was subverted, whether a multisig threshold was bypassed, or whether physical media holding keys were accessed without authorization. Until that report surfaces, exchanges will keep deposit channels closed, effectively quarantining the ZIL that sits in their hot and cold wallets. That quarantine may last days or weeks, depending on the complexity of the forensic work and the legal implications if the exchange partner is subject to regulatory oversight in multiple jurisdictions.
For traders, the main risk is not necessarily a large-scale dump of stolen ZIL—centralized platforms are now gate-locked—but rather the overhang of uncertainty. When an investigation reveals systemic flaws, the affected asset can trade at a discount to broader market moves. For now, ZIL holders are waiting for clarity on a theft that should not have happened in the first place: a cold wallet breach, from a partner whose name they do not yet know.
AUTHOR
Brenda is a writer with three years of experience specializing in cryptocurrency, artificial intelligence and emerging technologies. She graduated from the University of Mombasa with a degree in Psychology. She has worked at Cryptopolitan and Blockchain Reporter.
WTI and Brent crude oil continue to slump, with both down over 2% intraday.
According to Bitget market data, both US and Brent crude oil continue to slump. Brent crude has fallen below $85 per barrel, down more than 2% on the day; WTI crude oil dropped over $2 intraday, currently trading at $80.29 per barrel, a 2.5% decline.
1 seconds ago
SemiAnalysis: Kimi K3 Ranks Third Globally, Could Reveal Hidden Profit Margins of OpenAI and Anthropic
SemiAnalysis analysts Jordan Nanos and Max Kan recently analyzed Kimi K3, the model developed by Chinese AI startup Moonshot AI, concluding that it outperforms Google Gemini in comprehensive benchmark tests. This not only reflects the narrowing gap between Chinese and U.S. AI models but also offers new insights into the business models of closed-source AI firms like Anthropic and OpenAI. According to SemiAnalysis’s overall assessment, Kimi K3 currently ranks third globally, trailing only Fable 5 and GPT-5.6, and surpassing Google Gemini. The analysts noted that while this result does not signal major issues for Google’s AI business, Kimi K3’s publicly disclosed parameter count, performance, and pricing provide a reference for external estimates of the economic value of closed-source models. Kimi K3 has 2.8 trillion parameters, far exceeding most open-source models. Jordan Nanos stated that a model of this size cannot be deployed on a single NVIDIA B200 GPU, requiring higher-spec hardware such as GB300, B300-class systems, or AMD MI355X. Based on this, he speculated that Anthropic and OpenAI’s flagship closed-source models likely operate at a similar parameter scale, rather than holding an order-of-magnitude advantage. In terms of business models, Kimi K3’s launch price is close to Anthropic’s Sonnet series: input pricing is approximately $3 per million tokens, and output pricing is around $15 per million tokens, a roughly threefold increase over the previous Kimi generation. Max Kan argued that if Moonshot AI is not operating at a long-term loss, then Anthropic and OpenAI charging higher prices for models of comparable size suggests their API business may have high profit margins. “Selling API tokens could be more profitable than SaaS,” he said. However, the two analysts emphasized that these judgments are not based on the AI companies’ public financial data, but rather on reverse inference drawn from Kimi K3’s parameters, pricing, and performance.
1 seconds ago
Goldman Sachs warns that inflationary pressures are spreading across the US, with Fed Chair Walsh facing mounting pressure to raise interest rates.
Goldman Sachs’ latest research report shows that U.S. inflationary pressure is spreading from a narrow set of sectors to a broader range of areas. While current inflation levels have not yet hit their 2022 peak, the expanding scope of price increases is posing greater challenges to the Federal Reserve’s policy efforts. Goldman Sachs economist Jessica Rindels analyzed the extent of inflation spread using the six-month annualized change rate of the Personal Consumption Expenditures (PCE) price index, a key metric closely watched by the Fed. The data shows that, compared to the average inflation level between 1990 and 2019, the pressure index for inflation categories exceeding 3% has reached around 6, while it stood at 10 during the 2022 inflation peak. The report points out that sectors such as audio-visual equipment, financial services, healthcare, and transportation have become key drivers of current price increases. Meanwhile, housing rent inflation, which carries a significant weight in the PCE index, is projected to fall below 3% in the fourth quarter of this year, potentially serving as a key factor easing inflationary pressure. Goldman Sachs’ analysis aligns with recent concerns from new Fed Chair Kevin Warsh about the "broadening of inflation". Warsh stated that preventing price hikes from spreading to more sectors of the economy is a key task for the Federal Reserve. However, unlike former Chair Jerome Powell’s relatively clear policy communication style, Warsh has so far refused to provide specific interest rate path guidance. Jeremy Schwartz, senior U.S. economist at Nomura Securities, noted that the Fed is reducing forward guidance to the market, and this policy uncertainty has heightened concerns on Wall Street. Meanwhile, hawkish voices within the Fed are growing. Dallas Fed President Lorie Logan has expressed support for moderate interest rate hikes, arguing that the current economic resilience is inconsistent with inflation risks.
1 seconds ago
Iranian sources: Mediators have proposed a 10-day pause on strikes to seek ways to restore the temporary agreement between Iran and the United States.
Senior Iranian sources said the mediator has proposed a 10-day pause in strikes to find ways to revive the interim agreement between Iran and the U.S. (Jinshi)
1 seconds ago
OKX's World Cup prediction campaign has concluded, with the X Layer ecosystem recording over 136 million total transactions in the past 30 days.
According to official data, OKX’s World Cup prediction campaign officially concluded on July 19 alongside the final match, drawing a total of 433,590 participants, with a prize pool of approximately $4.2 million and covering 104 matches. As of July 20, the total number of transactions in OKX’s X Layer ecosystem over the past 30 days reached 136,048,079, with on-chain latency and block settlement frequency both under 100 milliseconds. It is reported that OKX’s World Cup prediction campaign launched on June 3, and was the first self-operated application of Exchange OS, the trading infrastructure built by OKX based on X Layer. Leveraging match prediction as its use case, the campaign further demonstrates X Layer’s capabilities in high-frequency interaction, low-latency settlement, and on-chain trading infrastructure.
1 seconds ago
Hacken: Crypto institutions no longer rely solely on audits; security assessments are shifting to continuous monitoring and operational resilience.
Blockchain security firm Hacken has released a report stating that crypto institutions are re-evaluating project security standards, as traditional smart contract audits and operational histories are no longer sufficient as trust benchmarks. Investors are now focusing on continuous monitoring, signature permission management, and incident response capabilities. According to Hacken’s Q2 2026 Security & Compliance Report, among the 1,427 projects it tracks, only 9% have deployed third-party continuous monitoring mechanisms, and just 4% have all three elements: monitoring, bug bounty programs, and security audits. The report shows that of the approximately $764 million in crypto asset losses recorded in Q2 2026, 88.3% came from private key leaks, signature permission issues, and infrastructure security problems, rather than smart contract vulnerabilities. Hacken noted that institutional investors are increasingly adding assessments of signer changes, collateral support, third-party dependencies, incident response capabilities, and audit scope and timeliness to their due diligence processes. The report points out that the 14 projects attacked in Q2 had all undergone audits before, but most losses stemmed from areas outside the coverage of traditional audits, including signature devices, cross-chain bridge validation nodes, backend infrastructure, administrator keys, and old contracts still in operation. Hacken stated that as institutional capital enters the crypto market, projects lacking continuous security proof may face higher risk premiums, fewer investment opportunities, and greater difficulty obtaining insurance and partner support. Federico Bagiotti, Head of Risk Management at Abraxas Capital, said that whether a project’s security level matches its funding scale has become a key criterion for institutional investment, surpassing project potential.
Not financial or tax advice. PANews content is strictly educational and informational and is not investment advice, financial advice, tax advice, legal advice, or a solicitation to buy or sell any digital asset, security, or financial product. Do your own research and consult qualified advisers.
Disclosure. PANews may publish sponsored content, partner content, advertisements, affiliate links, event promotions, and market commentary involving Web3 projects, service providers, or financial products. PANews personnel, contributors, or affiliates may hold digital assets or other interests related to covered topics. See our Terms of Service.
Zilliqa, a high-performance layer 1 blockchain built to deliver fast, low-cost transactions, on Monday announced that one of its exchange partners suffered a security breach in which ZIL tokens were stolen from a cold wallet.
According to the project, the incident is under investigation as it works alongside the relevant parties to identify the cause of the attack and determine its overall impact.
Advertisement
We have been made aware of a security incident involving one of our exchange partners, in which ZIL was stolen from a cold wallet.
The incident is under active investigation, and we are working with the relevant parties to establish the root cause and full scope. As a…
— Zilliqa (@zilliqa) July 20, 2026
In response, exchanges have been alerted and requested to temporarily halt ZIL deposits and withdrawals as a safeguard against the movement or liquidation of stolen assets on centralized exchanges.
The team said more details will be released once confirmed information becomes available.
ZIL fell from around $0.0028 to a low of $0.0024 before rebounding to $0.0026 by press time, marking a 7% decline over the past 24 hours, per CoinGecko.
Disclosure: This article was edited by Vivian Nguyen. For more information on how we create and review content, see our Editorial Policy.
Institutional blockchain finance has always had the same problem: you settle first, then you check compliance. If the counterparty wasn't who they said they were, you find out afterwards. Every reconciliation process, every post-trade compliance check, every remediation workflow exists because the infrastructure runs in the wrong order.
Zilliqa is built to change that at the infrastructure level.
The Mediation Layer runs the check before a transaction settles — confirming both
parties are permitted to transact, on any chain or settlement rail. Compliance enforced before settlement, not reconciled after the fact. The credential check runs first. Everything else follows.
Today we're publishing the roadmap that shows how we build that infrastructure from Q2 2026 through mid-2027, in four phases.
Phase 01 — Credential Infrastructure LiveThe settlement network goes live. The Mediation Layer architecture specification is
published. The first public report on ZIL economics sets the baseline.
Phase 02 — First Live Regulated FlowsReal transactions run through the Mediation Layer in production. Volume, latency, and revenue data are published — the first hard evidence the architecture works at scale.
Phase 03 — Cross-Chain and Cross-JurisdictionCredential-verified settlement extends beyond a single chain and single jurisdiction.
The mediation model is no longer single-chain.
Phase 04 — The Model ProvenRevenue exceeds subsidy — audited and published. The flywheel running in public,
not projected.
One rule governs every milestone: no claim without something shipped behind it.
The roadmap names the direction. Each phase publishes the evidence.
Zilliqa is currently trading at range lows within a critical support region marked by the value area low and swing low. A bullish broadening wedge is forming, indicating a potential structural reversal if the resistance level is broken.
Zilliqa (ZIL) is forming a potential bottoming pattern at a historically significant price zone. The asset is currently consolidating near the value area low, which also aligns with a prior swing low, making this area structurally important for any upcoming bullish reversal.
The technical formation in play is a bullish broadening wedge. While the upper resistance of this pattern has not yet broken, a decisive breakout with strong volume would likely signal the start of a bullish expansion phase. Price action is coiling, and historical data suggests that breakouts from this region often result in aggressive upside moves.
Key technical points Bullish Broadening Wedge: Developing at value area low and swing low region Resistance Not Yet Broken: Pattern remains inactive until dynamic resistance is breached Volume Profile Below Average: Breakout needs strong volume influx to confirm activation ZILUSDT (1W) Chart, Source: TradingView ZIL is trading within a broadening wedge structure near the value area low, which historically has acted as a springboard for upward moves. This type of wedge is considered a bullish continuation pattern, especially when found at range lows. However, for it to be considered active, price must first break above the dynamic upper resistance that defines the wedge’s expanding shape.
Currently, the price remains inside the pattern, and volume is below average. This suggests that bulls have not yet stepped in with conviction. However, the setup remains constructive. A reclaim of the value area low, combined with a breakout above the wedge’s resistance, would be the key trigger for pattern activation.
Once confirmed, the price could rally quickly toward the value area high and the next point of control. This is supported by past price behavior, where similar setups led to explosive upside moves. Traders should closely watch for a rise in volume, as this will be the first indication that the pattern is transitioning from development to breakout.
What to expect in the coming price action Zilliqa remains in a consolidation phase, trading within a bullish broadening wedge at the value area low.
The pattern has not yet activated, but a breakout above resistance with strong volume could kickstart a powerful rotation toward higher levels.
Until then, ZIL remains on watch, with the potential for significant upside once the structure confirms.
PANews reported on September 12th that Binance announced that it will suspend deposits and withdrawals of Zilliqa (ZIL) tokens at 01:00 on September 25, 2025, to facilitate its network upgrade and hard fork. The upgrade is expected to take place at block height 10,153,271, at 02:00 on September 25, 2025 (Beijing Time).
Major cryptocurrency exchange Binance has announced its support for the upcoming network update and hard fork of the altcoin Zilliqa (ZIL). The update, scheduled for September 24, 2025, will temporarily suspend ZIL coin deposits and withdrawals on the Zilliqa network. However, trading of the altcoin on Binance will continue without interruption during this period.
Zilliqa Network Update and Hard Fork DetailsAccording to Binance, the Zilliqa network update and hard fork are set to occur around 21:00 Turkish Standard Time on September 24, 2025, when the blockchain reaches a height of 10,153,271. Binance will manage all technical aspects of this process, ensuring that users do not need to take any action.
Once the network update and hard fork are complete and stability is restored, ZIL coin deposit and withdrawal services through the network will resume. Binance has indicated that there will not be an additional announcement to inform users of the resumption of these services.
Impact on User TransactionsBinance reassured that throughout the network update and hard fork, ZIL coin trading operations will remain unaffected. Only ZIL coin deposits and withdrawals through the network will experience a temporary halt. As a result, users will not be able to conduct deposit or withdrawal transactions during this period.
Binance noted that services will be restored after the network update is complete. Thus, while trading will continue uninterrupted, deposit and withdrawal functions will also become operational again.
Disclaimer: The information contained in this article does not constitute investment advice. Investors should be aware that cryptocurrencies carry high volatility and therefore risk, and should conduct their own research.
Analyst: Micron’s financial report indicates short-term fluctuations can be ignored as long as earnings prospects underpin its high valuation.
Senior Market Analyst Daniela Hathorn stated, "As Micron Technology's earnings report once again confirms that the AI investment cycle remains solid, the U.S. stock market has recouped some of its losses. This has boosted market sentiment across the entire semiconductor sector—after high-growth individual stocks underperformed earlier—indicating that as long as profit prospects continue to support high valuations, investors are still willing to overlook short-term fluctuations."
4 minutes ago
Circle partners with Nomura Securities to enter the Japanese yen foreign exchange settlement service market.
Stablecoin issuer Circle plans to collaborate with Nomura Securities to launch instant foreign currency settlement for Japanese corporate clients as early as 2027. The initiative will enable large cross-border transactions to be completed immediately, aiming to boost cross-border investment and trade. This will mark the first entry of a major stablecoin issuer into Japan’s corporate transaction market, allowing companies to convert yen into US dollar-denominated stablecoins for investment and instant transfers.
4 minutes ago
Institutions' Preview: Overview of US May Core PCE Price Index Monthly Rate
The US May core Personal Consumption Expenditures (PCE) Price Index monthly rate will be released tonight at 20:30 (UTC+8). Below are the forecasts from multiple institutions: Sumitomo Mitsui Banking Corporation: 0.2%; Royal Bank of Canada: 0.2%; JPMorgan Chase: 0.3%; Goldman Sachs Group: 0.3%; Bank of Montreal: 0.3%; Moody's Corporation: 0.3%; Standard Chartered: 0.3%; UniCredit: 0.3%; ING Group: 0.3%; HSBC Holdings: 0.3%; BNP Paribas: 0.4%; Wells Fargo: 0.4%; Capital Economics: 0.4%; Citigroup: 0.4%; Deutsche Bank: 0.4%; Nomura Securities: 0.4%; Pantheon Macroeconomics: 0.4%; Société Générale: 0.4%; Scotiabank: 0.4%; Morgan Stanley: 0.4%
4 minutes ago
DA Davidson Raises Micron’s Price Target to $2,000, Retains Buy Rating
U.S. investment bank DA Davidson released a research note stating that Micron Technology has entered a new phase with one of the best performance visibility in the semiconductor industry, a stark contrast to its past standing in the sector. Driven by another quarter of results that handily exceeded expectations and positive forward guidance, Micron’s stock price surged sharply. These signals indicate that the current memory chip boom cycle is far from over. While the company is ramping up capacity investments (with capital expenditure (CAPEX) projected to hit $10 billion in the fourth quarter of fiscal 2026, which will bring additional supply), management expects the memory market to remain tight on supply and demand at least through 2027. Against this backdrop, DA Davidson reiterated its "Buy" rating on Micron and raised its price target from $1,500 to $2,000, equivalent to a 20x price-to-earnings (P/E) ratio based on the company’s 2026 calendar year expected earnings per share (EPS).
4 minutes ago
Morgan Stanley raises Micron's price target to $1,200, maintains 'Overweight' rating.
Morgan Stanley released a report raising Micron Technology (MU.O)’s price target from $1,050 to $1,200, while maintaining an "Overweight" rating. The investment bank lifted its fiscal 2027 earnings per share (EPS) forecast for the chipmaker by roughly 40% to $168, and upgraded its free cash flow (FCF) projection from $104 billion to $140 billion. Aligning with Micron’s management, the bank holds that AI will push DRAM demand to consistently outpace supply significantly after 2027. Micron’s last fiscal quarter results matched this trend, with both its quarterly performance and outlook showing notable upside potential.
Binance, one of the world's largest cryptocurrency exchanges, announced that it will support the planned network upgrade and hard fork process on the Zilliqa (ZIL) network.
Binance to Support Zilliqa (ZIL) Network Upgrade and Hard Fork According to the exchange's announcement, the network upgrade will occur at block height 13,514,400 and this process is expected to begin approximately at around 10:18 AM on 17-11-2025.
To protect the user experience during the upgrade and hard fork, Binance will temporarily suspend all token deposits and withdrawals on the Zilliqa (ZIL) network starting November 17, 2025, at 09:18. However, the exchange stated that this will not affect the trading of ZIL tokens.
The statement stated that Binance will manage all technical requirements on behalf of users, and once the upgrade is complete and the network is confirmed to be stable and secure, deposits and withdrawals will be reopened. The company also stated that no additional announcements will be made after this process is complete.
Zilliqa, a high-performance Layer-1 blockchain, stands out for its scalability and transaction efficiency. This update is expected to enhance network security and optimize transaction speed. Binance's technical support initiative is considered a significant step that will contribute to the development of the Zilliqa ecosystem.
*This is not investment advice.
Follow our Telegram and Twitter account now for exclusive news, analytics and on-chain data!
Zilliqa (ZIL) price trades above $0.0058 on Wednesday, up more than 13% over the last two days. Bullish sentiment strengthens as trading volume and Open Interest (OI) rise, alongside positive funding rates. On the technical side, indicators suggest a rally continuation, targeting the $0.0065 mark.
Zilliqa on-chain and derivatives data suggest bullish biasSantiment data indicate that the ZIL ecosystem’s trading volume (the aggregate trading volume generated by all exchange applications on the chain) reached $92.59 million on Monday, the highest level since July 4, and steadied at around $27.46 million on Wednesday. This volume rise indicates a surge in traders’ interest and liquidity in Zilliqa, boosting its bullish outlook.
Zilliqa trading volume chart. Source: SantimentDerivatives data further support the positive view for ZIL. CoinGlass’s data show that ZIL futures OI across exchanges reached $13.48 million on Tuesday, the highest level since October 11. An increasing OI represents new or additional money entering the market and new buying, which could fuel the current ZIL price rally.
ZIL open interest chart. Source: CoinglassCoinglass’s OI-Weighted Funding Rate data shows that the number of traders betting that the price of ZIL will slide further is lower than those anticipating a price increase.
The metric has flipped to a positive rate, standing at 0.0059% on Wednesday, indicating that longs are paying shorts. Historically, as shown in the chart below, when the funding rates have flipped from negative to positive, Zilliqa’s price has rallied sharply.
ZIL funding rate chart. Source: CoinglassZilliqa Price Forecast: ZIL bulls aiming for the $0.0065 markZilliqa price surged more than 9% on Monday and closed above the 50-day Exponential Moving Average (EMA) at $0.0055. ZIL continued its rally the next day, finding support around the 50-day EMA and closing above the daily resistance at $0.0058. As of Wednesday, ZIL is trading at around $0.0058.
If ZIL continues its upward trend, it could extend the rally toward the next resistance at $0.0065, its 100-day EMA.
The Relative Strength Index (RSI) on the daily chart is 65, above the neutral level of 50, indicating bullish momentum is gaining traction. Moreover, the Moving Average Convergence Divergence (MACD) shows a bullish crossover that remains intact, with rising green histogram bars above the neutral level, further supporting the positive outlook.
ZIL/USDT daily chartHowever, if ZIL faces a correction, it could extend the decline toward the 50-day EMA at $0.0055.
Zilliqa (ZIL) is nearing key resistance, trading at $0.0050 on Wednesday; a rejection could trigger a deeper correction. The weakening derivatives positioning among traders further supports the bearish price action in ZIL. In addition, the technical outlook suggests further correction as momentum indicators turn negative.
Zilliqa’s waning investor participationZilliqa derivatives show signs of weakness, with futures Open Interest (OI) on the Binance exchange dropping to $2.25 million on Wednesday, levels not seen since mid-December, reflecting waning investor participation.
Zilliqa open interest chart at Binance exchange. Source: CoinglassZilliqa Price Analysis: ZIL bears are in control of the momentumZilliqa price closed below the ascending trendline (drawn by connecting multiple lows since December 19) on Tuesday, indicating a shift in market structure. As of Wednesday, ZIL is nearly at this breakout zone, which roughly coincides with daily resistance at $0.0051 and the 50% price level (drawn from the December low of $0.0042 to the January 12 high at $0.0061) at $0.0052, making this a key reversal zone.
If ZIL faces rejection from these resistance levels, it could extend the decline toward the December 31 low of $0.0046.
The Relative Strength Index (RSI) on the daily chart reads 45, below the neutral level of 50, indicating bearish momentum is gaining traction. The Moving Average Convergence Divergence (MACD) also showed a bearish crossover on Tuesday, further supporting the negative outlook.
ZIL/USDT daily chartHowever, if ZIL recovers and closes above the daily resistance at $0.0051 on a daily basis, it could extend the advance toward the 50-day Exponential Moving Average (EMA) at $0.0054.
As Zilliqa 2.0 enters its next phase, the challenge is no longer about core technology. The network is live, EVM-compatible, and Production-ready. The real question now is simple: how do we help more builders get from zero to mainnet?
“More on-chain activity starts with better builder onboarding.”
Funded as part of gZIL Collective Season 1, Plunder Academy aims to solve this challenge. It is a free, hands-on learning platform designed to help anyone - from complete beginners to experienced developers - start building real applications on Zilliqa EVM.
A Practical Learning Path for Zilliqa EVMPlunder Academy is a structured, end-to-end learning journey built specifically for Zilliqa’s EVM environment, guiding learners from fundamentals to production-ready deployments.
Five Themed Learning ZonesThe curriculum is organised into 23 core modules across five themed areas:- Jungle Island (fundamentals), Arctic (advanced Solidity), Desert (token and NFT launchpads), Castle (on-chain systems), and Future (frontend integration).
Built to Solve a Real Ecosystem NeedPlunder Academy was created to lower the barrier to entry for Developers building on Zilliqa 2.0, enabling faster experimentation and real mainnet deployments.
“Education should lead to execution — not just theory.”
Free, Open, and AccessiblePlunder Academy is completely free and open to anyone at https://plunderacademy.com
AI-Powered Learning and SecurityThe platform includes AI-driven Solidity code review, Exploit detection, and a Chatbot trained on Zilliqa EVM resources, reinforcing security-first development.
Who Is It For?Plunder Academy supports beginners, founders, non-technical users, and experienced developers exploring Zilliqa EVM.
Standing Apart from Other PlatformsNFT-based achievements, real-world security training, and Zilliqa-specific tooling set Plunder Academy apart from generic Solidity courses.
Real Usage and TractionUsage metrics and milestone results are available at https://plunderacademy.com/presentation.
From Learning to On-Chain ImpactPlunder Academy shows how community-led funding can translate into real ecosystem impact. By lowering the barrier to building on Zilliqa EVM and reinforcing secure development practices, it helps turn learning into deployment — and builders into contributors.
As the ecosystem grows, initiatives like this will continue to play a key role in driving sustainable, on-chain innovation.
Zilliqa (ZIL) price is extending its gains, rallying over 20% to $0.006 on Tuesday after soaring nearly 34% the previous day. The upcoming Cancun upgrade this week is boosting investor sentiment, despite broader weakness in the crypto market. ZIL continues to attract strong buying interest, supported by rising trading activity and improving derivatives metrics.
Zilliqa’s Cancun EVM version support boosts sentimentZilliqa’s upcoming Cancun Ethereum Virtual Machine (EVM) version support, which will activate on the mainnet through a hard fork, is scheduled for this week on Thursday. This update aims to deliver faster communication and finer-grained control, as posted by Zilliqa’s X.
In addition, Zilliqa’s community updates blog on Monday announced that Liechtenstein Trust Integrity Network (LTIN) will join the Zilliqa network as the first government-backed institutional validator, reinforcing Zilliqa’s regulatory-readiness direction.
These developments and announcements have boosted bullish sentiment among investors, as ZIL has rallied more than 60% so far this week despite broader weakness in the crypto market.
ZIL’s on-chain and derivatives data show bullish biasSantiment data indicates that the Zilliqa ecosystem’s trading volume (the aggregate trading volume generated by all exchange applications on the chain) reached $278.07 million on Tuesday, the highest volume since December 2024. This volume rise indicates a surge in trader interest and liquidity in Zilliqa, boosting its bullish outlook.
ZIL trading volume chart. Source: SantimentCoinGlass data shows that futures OI in Zilliqa at exchanges reached $47.76 million on Tuesday, up from $5.72 million on Monday, the highest levels since December 9, 2024. An increasing OI represents new or additional money entering the market and new buying, which could fuel the current ZIL price rally.
ZIL open interest chart. Source: CoinglassZilliqa Price Forecast: ZIL bulls in control of the momentumZilliqa price started the week on a positive note, rallying more than 34% on Monday and closing above the 50-day Exponential Moving Average (EMA) at $0.005. As of writing on Tuesday, ZIL is extending its gains by more than 20%, trading above the 100-day EMA at $0.006.
If ZIL continues its upward trend, it could extend the rally toward the 200-day EMA at $0.007.
The Relative Strength Index (RSI) on the daily chart reads 67, above the neutral level of 50, indicating bullish momentum gaining traction. The Moving Average Convergence Divergence (MACD) showed a bullish crossover on Tuesday, further supporting the bullish view.
ZIL/USDT daily chartIf ZIL faces a correction, it could extend the decline toward the 50-day EMA at $0.005.
This is a general announcement. Products and services referred to here may not be available in your region. Fellow Binancians, Starting at approximately 2026-02-05 09:00 (UTC), Binance will suspend the deposits and withdrawals of token(s) on the Zilliqa (ZIL) network to support its network upgrade and hard fork to ensure the best user experience. The network upgrade and hard fork will take place at the block height of 19,486,411, or approximately at 2026-02-05 10:00 (UTC). Please note: The trading of token(s) on the aforementioned network will not be impacted.Binance will handle all technical requirements involved for all users.Deposits and withdrawals for token(s) on the aforementioned network will be reopened once the upgraded network is deemed to be stable. No further announcement will be posted.There may be discrepancies between this original content in English and any translated versions. Please refer to the original English version for the most accurate information, in case any discrepancies arise. For more information, please refer to the announcement from the project team. Thank you for your support! Binance Team 2026-02-04
Cryptocurrency exchange Binance has announced it will support the planned network upgrade and hard fork process on the Zilliqa (ZIL) network.
According to the exchange’s statement, token deposits and withdrawals on the Zilliqa network will be temporarily suspended to protect user experience and ensure a smooth technical transition.
Binance will suspend deposits and withdrawals on the Zilliqa (ZIL) network on February 5, 2026, at approximately 12:00 PM. The network upgrade and hard fork are expected to take effect at block height 19,486,411. Binance stated that this block height will be reached around 1:00 PM.
The exchange stated that the technical work would only affect transaction processing on the network. Accordingly, trading of Zilliqa (ZIL) and related tokens on the Binance platform will continue uninterrupted. Users will be able to continue trading in spot and other markets during the upgrade period.
Binance also stated that all technical requirements that may arise during the upgrade process will be automatically handled by the exchange, and users will not need to take any extra action. In other words, users are not obligated to migrate their tokens to the new network or perform manual updates.
It has been announced that deposits and withdrawals will be reopened after the upgrade on the Zilliqa network is complete and its stable operation is confirmed. Binance also noted that there will be no further announcement regarding the resumption of transfers. Therefore, users are advised to take the temporary suspension hours into account when planning their transactions.
*This is not investment advice.
Follow our Telegram and Twitter account now for exclusive news, analytics and on-chain data!
Stablecoins play a foundational role in decentralized ecosystems, enabling liquidity, trading efficiency, and interoperability across markets.
As Zilliqa continues building Regulatory-ready and Institutionally aligned blockchain infrastructure, we are strengthening how stablecoin liquidity operates within the network.
Today, we are introducing zUSDC, a USDC representation powered by Zilliqa’s native XBridge infrastructure.
This transition strengthens Zilliqa’s control over critical financial infrastructure while ensuring stablecoin liquidity continues to operate seamlessly across the ecosystem.
What is zUSDC?zUSDC is a representation of USDC bridged to Zilliqa through the network’s native XBridge infrastructure.
Bridging existing USDC liquidity back to EthereumMinting zUSDC under Zilliqa-managed infrastructureRe-bridging funds to Zilliqa via XBridgeRedeploying liquidity into ecosystem trading pools For users, zUSDC continues to support the same core functionality, including:
Stablecoin trading liquidityDEX liquidity pool participationArbitrage opportunities across stable pairs such as kUSDC, zUSDT, and zUSDCWhy This Change Is Being Made?USDC liquidity has historically been available on Zilliqa through third-party bridging infrastructure. While this enabled early ecosystem access, current usage patterns show that most stablecoin liquidity is concentrated within DEX pools supporting trading and arbitrage activity.
Operating external infrastructure under these conditions introduces operational dependency without proportional ecosystem benefit.
To improve long-term reliability and infrastructure sovereignty, Zilliqa is transitioning stablecoin liquidity to native infrastructure through XBridge. This ensures sustainable operations while maintaining uninterrupted ecosystem functionality.
This transition also aligns with Zilliqa’s broader strategy of building Institutionally compatible blockchain infrastructure, where critical financial rails are operated directly by the network.
Migration TimelineThe transition occurs in phased stages designed to minimize ecosystem disruption.
Phase 1 - Preparation (Completed)
Deployment of zUSDC support via XBridgePhase 2 - Liquidity Migration (Completed)
Existing bridged USDC unwound via EthereumLiquidity re-bridged through XBridgeDeployment of zUSDC liquidityPhase 3 - Ecosystem Rollout (Completed)
Public introduction of zUSDCLaunch of zUSDC trading pair on PlunderswapPhase 4 - Legacy Infrastructure Sunset
Debridge support on Zilliqa will sunset on 31 March 2026Impact on UsersUsers holding USDC on Zilliqa should bridge their assets out via Debridge as soon as possible.
Available Debridge widget:
https://plunderswap.com/bridgehttps://stakezil.com/?tab=bridgeAfter 31 March 2026, Debridge will no longer operate on Zilliqa.
Any user holding USDC on Zilliqa after this date will need to email Zilliqa team for support, [email protected].
This transition does not remove stablecoin liquidity from Zilliqa. Instead, liquidity is being migrated to network-operated infrastructure to improve long-term stability and operational resilience.
Operational EnhancementsAlongside the launch of zUSDC, Zilliqa is improving XBridge operations to enhance reliability and processing efficiency.
Xbridge UI overhaul has already started. Check out Xbridge with brand new and clean UI https://xbridge.zilliqa.com.
While XBridge settlements are not instant, we currently work on progressive automation of bridge transaction processing that will bring back seamless token transfer across all supported chains.
Looking AheadThe launch of zUSDC marks another step in Zilliqa’s evolution toward Native financial infrastructure.
As the ecosystem expands across Institutional integrations, RWA platforms, and Cross-chain financial infrastructure, maintaining control over critical network components becomes increasingly important.
Long-term ecosystems are built on infrastructure they own and operate.
TLDR: Zilliqa launches zUSDC via XBridge, shifting USDC liquidity from third-party bridges to native network infrastructure. The zUSDC contract is live at 0xe59f97Fac09ee00AEEF320485ee45D5CcfbBC1E9, supporting DEX pools and stablecoin trading pairs. Debridge support on Zilliqa permanently ends March 31, 2026, requiring all legacy USDC holders to act immediately. XBridge receives a full UI overhaul as Zilliqa works toward automated, seamless cross-chain token transfer processing. zUSDC is now live on Zilliqa through the network’s native XBridge system. This change moves USDC liquidity away from third-party bridging toward Zilliqa-operated infrastructure.
The transition is designed to improve long-term reliability and give Zilliqa direct control over stablecoin operations.
Users currently holding USDC on Zilliqa must act before March 31, 2026. After that date, Debridge support on the network will permanently end, affecting all remaining legacy USDC holders.
Zilliqa Transitions USDC Liquidity to Its Own XBridge Infrastructure zUSDC is a USDC representation bridged to Zilliqa through the network’s own XBridge system. Its contract address is 0xe59f97Fac09ee00AEEF320485ee45D5CcfbBC1E9.
The token supports stablecoin trading, DEX liquidity pool participation, and arbitrage across pairs such as kUSDC and zUSDT. Zilliqa now holds direct operational control over this stablecoin liquidity within its ecosystem.
Previously, USDC liquidity on Zilliqa depended on external bridging infrastructure from third-party operators. Most of that liquidity was concentrated in DEX pools supporting trading and arbitrage activity.
Running external infrastructure under those conditions created an operational dependency. That dependency came without proportional benefit to the broader network, making this transition a practical move for the ecosystem.
The migration followed a phased process. Existing USDC was first bridged back to Ethereum as the starting point. It was then minted as zUSDC under Zilliqa-managed infrastructure and re-bridged through XBridge.
From there, funds were redeployed into ecosystem trading pools, with each phase structured to keep disruption low throughout.
Zilliqa shared the update on its official channel, stating it was “introducing zUSDC via XBridge on Zilliqa” and that the move improves reliability while keeping “stablecoin liquidity flowing across the ecosystem.”
We’re introducing zUSDC via XBridge on Zilliqa.
This moves USDC liquidity onto Zilliqa-operated infrastructure, improving reliability while keeping stablecoin liquidity flowing across the ecosystem.
Here’s what’s changing and what it means for USDC users:… pic.twitter.com/PnvXIACWOQ
— Zilliqa (@zilliqa) March 5, 2026
As part of the Phase 3 ecosystem rollout, a zUSDC trading pair also launched on Plunderswap. Additionally, XBridge received a full UI overhaul, with the refreshed interface now available at xbridge.zilliqa.com.
Users Face March 31 Deadline as Debridge Support on Zilliqa Ends Users holding USDC on Zilliqa must bridge their assets out through Debridge before March 31, 2026. Two options are currently available for doing so.
The Plunderswap bridge widget is accessible at plunderswap.com/bridge, while the StakeZIL bridge is available at stakezil.com. Both remain operational until the sunset date arrives.
After March 31, Debridge will no longer function on Zilliqa. Users who still hold legacy USDC beyond that point will need to reach out to Zilliqa directly for assistance. The team can be contacted at [email protected] for support with any remaining holdings.
This transition does not remove stablecoin liquidity from the Zilliqa ecosystem. Rather, that liquidity is being moved to infrastructure that Zilliqa directly owns and operates.
The network frames this as a long-term step toward institutional-grade financial rails that the network itself controls.
Alongside the zUSDC launch, Zilliqa is also improving XBridge’s processing efficiency. The team is actively developing automation for bridge transaction processing.
This effort is aimed at making token transfers faster and more seamless across all chains that XBridge supports.
