ZIL bounced off its July 22 low near $0.0023, though it stays below both its 50 and 200 EMAs. The bounce follows a 17% weekly drop tied to a signature flaw in Zilliqa’s Ledger wallet app. Wal
ZIL is trading off its lows this week, bouncing from a July 22 low near $0.0023 back toward $0.0025. Price still sits below both its 50-period and 200-period EMAs, and the reason ZIL fell in the first place hasn’t gone away. Zilliqa suspended every native, non-EVM transaction on its blockchain on July 22 after engineers traced suspicious on-chain activity to a flaw inside the Ledger app used to sign transactions on its base layer. The bug sat in code dating back to 2019, and it let anyone watching the public blockchain reconstruct a wallet’s private key once that wallet had signed roughly five native transactions. Upbit designated ZIL a cautionary assetand paused deposits and withdrawals, warning of possible delisting if the issue isn’t resolved by August. The halt, and the exposed keys it was meant to protect, are still unresolved.
Zilliqa’s monitoring systems picked up unusual, targeted transaction patterns on July 19. The exchange KuCoin flagged the issue, pulled affected private keys from data already public on-chain, and helped confirm exploitation was underway. By July 20, Zilliqa ruled out any problem on the exchange side and disclosed that ZIL had been stolen from a partner exchange’s cold wallet. The root cause landed a day later: the signing code inside the Ledger app, not the blockchain or the hardware itself.
DateDevelopmentJuly 19, 2026Zilliqa detects on-chain activity consistent with active exploitationJuly 20, 2026Zilliqa confirms a cold-wallet theft at a partner exchange and asks exchanges to pause ZIL activityJuly 21, 2026Root cause isolated to the Ledger app’s nonce-handling code, unrelated to the chain or hardwareJuly 22, 2026Zilliqa suspends all native (non-EVM) transactions network-wideZilliqa’s native transactions use Schnorr signatures, which need a private key plus a fresh, random number called an ephemeral nonce for every signature. Zilliqa’s own postmortem said the app’s flawed randomness leaves a pattern across multiple signatures, turning the relationship between them into a solvable equation. One signature reveals nothing.
Nonce-Generation Vulnerability in the Zilliqa Ledger App: A critical vulnerability has been identified in the Zilliqa Ledger application affecting the generation of Schnorr signatures for native (non-EVM) Zilliqa transactions. The vulnerability causes signatures to be generated… https://t.co/sudV7WA3TV
— Zilliqa (@zilliqa) July 22, 2026
Five signatures from the same flawed app hand over enough data to work backward to the private key, and none of that requires touching the physical device, only reading a blockchain that’s public by design. Transactions signed through MetaMask or another EVM-compatible wallet use standard Ethereum-style ECDSA signing instead, a separate code path unaffected by the bug.
A standard “move your funds to safety” instruction assumes the destination is safer than the origin. Here the exposure lives in the signature history itself. Any account that broadcast five or more native transactions through the buggy app already sits on a private key an attacker can calculate from public data, patch or no patch. Sending a rescue transaction from that same key, once native transfers resume, would be visible to bots scanning the chain for exactly this activity, and a fast enough bot could front-run it before confirmation. That risk is why Zilliqa kept the network halted while it finalizes a recovery plan for exposed balances.
Price spiked to roughly $0.0028 before settling at $0.002502 as of 16:01 UTC on July 23, a clear bounce off the July 22 low near $0.0023. It still trades below both its 50-period EMA ($0.002664) and its 200-period EMA ($0.002941), and both averages keep sloping downward, the signature of a trend that hasn’t turned. A moving average above price and trending down typically acts as resistance, so ZIL needs to reclaim that zone and hold there before this becomes more than an oversold bounce.
RSI backs the bounce read more than a reversal. It fell close to 20 during the sharpest leg of the sell-off, a level that usually marks a market that sold off faster than the news justified, and it has since climbed to 41.97, above its own moving average of 37.05. That points to fading downside momentum without confirming a change in direction.
IndicatorReadingWhat it suggestsPrice (4H, Binance)$0.002502Bounced off the recent low, still range-bound50 EMA$0.002664Above price, sloping down, first resistance200 EMA$0.002941Confirms the broader trend hasn’t reversed yetRSI (14)41.97Recovering from near 20, still under the neutral 50 lineZilliqa spent 2026 building credential infrastructure meant to position the network as a compliance-ready settlement layer, with live regulated enterprise transaction flows planned for the third quarter. Institutional partners weighing that kind of integration care about predictable uptime and certified custody above almost everything else. A network halt undercuts the first assumption, and a bug traced to a partner exchange’s cold storage undercuts the second, without the blockchain itself failing.
Zilliqa has prepared a corrected Ledger app build with Ledger, though a patch only stops new exposure. It can’t retroactively protect keys already exposed through past transactions, which is why a recovery plan for those balances is still being finalized. This kind of narrow, seven-year-old vendor bug is already feeding arguments that networks should lean on standardized EVM/ECDSA signing or audited multi-party computation instead of bespoke wallet software for signature schemes few other chains use. Whether Zilliqa’s Q3 institutional launch survives its original schedule depends on how fast that recovery plan clears review, and on whether exchanges reopen ZIL activity before or after native transactions resume, a sequencing question nobody has answered yet.
The post ZIL Price Bounces Off Lows as Zilliqa’s Ledger Crisis Lingers appeared first on ETHNews.
