Zilliqa Confirms ZIL Hack From Exchange Partner’s Cold Wallet

High attention and emotional sentiment detected.

The Zilliqa cold wallet hack now sits under active investigation. According to the team, it is working with the affected parties to pin down the root cause and the full scope. A short follow-up minutes later confirmed only that the review continues.

What Zilliqa Disclosed

Zilliqa posted the disclosure from its official account at 10:17:26 UTC. The statement said the team had learned of a breach at an exchange partner. In that breach, ZIL left a cold wallet.

The project framed the theft as a partner problem, not a flaw in the Zilliqa network itself. In other words, the chain kept running normally while the custody breach played out off-chain.

Then, at 10:23:39 UTC, the same account added a brief line. It read: “Investigations are ongoing. More updates to follow when available.”

Exchanges Asked to Pause ZIL Deposits

As a precaution, Zilliqa notified all exchanges and asked them to freeze ZIL deposits and withdrawals. The goal is simple. A pause makes it harder for the attacker to move or sell the stolen funds through centralized venues.

A freeze also buys time for investigators. Once deposits stop, the thief cannot easily convert ZIL into other assets or cash out at scale. So the request works as a containment step, not a fix.

So far, no exchange has publicly confirmed a halt. Compliance with the request therefore remains unverified in primary sources. Major ZIL venues include Binance, KuCoin, Bitget, and Gate, though none has been linked to the breach.

Inside the Zilliqa Cold Wallet Hack Statement

Here is the core of what Zilliqa told the community, quoted directly from its official post.

We have been made aware of a security incident involving one of our exchange partners, in which ZIL was stolen from a cold wallet. As a precaution, all exchanges have been notified and asked to temporarily pause ZIL deposits and withdrawals. Please rely only on official Zilliqa channels for updates.

The message urged holders to trust official channels only. Scam accounts often exploit these moments with fake recovery links, so caution matters right now.

Network Versus Custody

The distinction here is important. A protocol breach would threaten the Zilliqa blockchain and every wallet on it. A custody breach hits one operator that holds ZIL for its users.

Zilliqa’s wording points to the second case. As a result, the chain and self-custodied holders appear unaffected, though the team has not spelled out the impact on the exchange’s own customers.

How a Cold Wallet Gets Drained

A cold wallet keeps private keys offline, usually on air-gapped hardware or specialized signing devices. Exchanges store the bulk of customer assets this way. Then they move only small amounts to hot wallets for daily liquidity.

Because the keys stay offline, draining a true cold wallet is hard. Typically, it takes insider access, a compromised signing ceremony, or a supply-chain attack on the hardware. Social engineering of the signers is another route.

Once an attacker controls enough keys or multisig approvals, the outbound transfers look legitimate on-chain. As a result, the theft can clear before anyone spots it.

What Remains Unknown

Plenty about the Zilliqa cold wallet hack stays unclear. The team has not disclosed the exchange, the ZIL amount, or the dollar value. The exact time of the theft is also unknown, since only the disclosure timestamp is confirmed.

Beyond that, no transaction hashes, compromised addresses, or fund-tracing trails have surfaced. So on-chain analysts cannot yet verify the scale. The root cause, whether insider, error, or supply chain, is still open.

Meanwhile, some traders noted that ZIL slipped around 7% near the disclosure window. However, that figure is not independently confirmed against major price trackers. None of this is financial advice.

Zilliqa’s Track Record With Security Incidents

This is not Zilliqa’s first brush with a security scare. In February 2025, an X-Bridge flaw allowed unauthorized minting of zETH and zBNB, which hit a ZilSwap pool. The team then suspended operations, offered bounties, and later compensated affected users.

Earlier, in 2020, a staking-contract bug briefly halted reward distribution. User funds stayed safe that time. For context, Zilliqa launched in 2017 and pioneered sharding before its recent Zilliqa 2.0 upgrade.

Community Reaction and What Comes Next

On X, the early mood mixes calm with pointed questions. Several holders asked why a cold wallet could drain without insider help. Others pushed for transparency on the exchange name and the amount.

The Block and Wu Blockchain both ran short summaries, each noting the missing details. For now, Zilliqa has promised further updates once it verifies the facts.

Next, watch the official Zilliqa account for a named exchange, a confirmed figure, or on-chain evidence. Until the Zilliqa cold wallet hack is fully mapped, treat unverified numbers with caution and rely only on primary channels.