Zilliqa disclosed that one of its exchange partners suffered a security incident in which ZIL was stolen directly from a cold wallet. The network said the incident is under active investigation and that the team is working with relevant parties to determine the root cause and full scope.
As a precaution, all exchanges have been notified and asked to temporarily pause ZIL deposits and withdrawals until the situation is contained, a step designed to prevent the stolen funds from being moved or sold through centralized venues. The affected exchange and the size of the loss have not been disclosed.
Why it matters
A breach originating from a cold wallet is unusual. Cold storage is marketed as the highest tier of custody security, with keys held offline and out of reach of remote attackers. A successful theft from that tier typically points to compromised key generation, insider access, physical intrusion, or a flawed multisig setup, rather than a hot-wallet or smart-contract exploit. Until the root cause is named, the threat model for institutional ZIL custody remains genuinely open.
Market impact
The full-extent pause across all venues is the more disruptive beat than the loss itself. Users cannot move ZIL on or off centralized exchanges during the freeze, which thins liquidity and forces traders holding positions on margin or spot to sit on them until the all-clear. Price action will track how quickly the disclosure names the venue and the amount, and whether the stolen funds surface on-chain through mixing services or get bridged out before the pause takes hold across every venue.
Frequently asked questions
-
What did Zilliqa disclose about the theft?
Zilliqa said one of its exchange partners suffered a security incident in which ZIL was stolen from a cold wallet. The network-wide pause on deposits and withdrawals is meant to keep the stolen funds from moving through centralized venues.
-
Which exchange was affected and how much ZIL was stolen?
Neither the affected exchange nor the size of the loss has been disclosed. Zilliqa said both are under investigation and will likely be named once the root cause and full scope are determined.
-
Why is a cold wallet theft unusual?
Cold wallets are held offline and marketed as the most secure custody tier. A successful theft from cold storage typically points to compromised key generation, insider access, physical intrusion, or a flawed multisig setup rather than a remote hot-wallet hack.
-
Can users deposit or withdraw ZIL right now?
No. Zilliqa asked all exchanges to temporarily pause ZIL deposits and withdrawals until the situation is contained, so the asset is effectively frozen at the centralized exchange layer for the duration.
-
What should traders watch for next?
The disclosure naming the affected exchange and the stolen amount, any statement on the root cause, the timeline for lifting the deposit and withdrawal pause, and whether the stolen ZIL surfaces on-chain through mixers or bridges before the freeze takes hold.
WuBlockchain