Zilliqa reports theft of ZIL tokens from exchange partner’s cold wallet

Zilliqa disclosed on July 20 that an unnamed exchange partner suffered a security breach resulting in the unauthorized removal of ZIL tokens from a cold wallet. The project is now working with relevant parties to determine the scope of the theft and how attackers managed to compromise what should be one of the most secure forms of crypto storage.

Zilliqa’s announcement was notably light on specifics. The team did not name the exchange involved. It did not disclose how much ZIL was taken. And as of now, the affected exchange has made no public statement of its own.

What Zilliqa did do was move quickly on containment. The project notified all exchanges to temporarily suspend ZIL deposits and withdrawals as a precautionary measure. The goal is straightforward: make it harder for whoever stole the tokens to move or liquidate them through normal trading channels.

The investigation is still in its early stages, with the team focused on identifying the root cause and the full extent of the damage.

Cold storage hacks don’t happen often. Most exchange breaches target hot wallets, the internet-connected systems that handle day-to-day transactions. Cold wallets exist specifically because they’re not connected to the internet, which makes remote exploitation extremely difficult under normal circumstances.

When cold storage does get compromised, the culprit is almost always human rather than technological. Insider threats, social engineering attacks on key holders, compromised signing ceremonies, or poor operational security around seed phrases and private keys. The hardware itself isn’t usually the weak link. The people managing it are.

Zilliqa, launched in 2017, was among the first blockchain platforms to implement sharding technology, a design approach that splits the network into smaller segments to boost transaction throughput and scalability.

To be clear, Zilliqa’s own blockchain and protocol were not compromised here. This was a custodial failure at a third-party exchange.

The immediate impact is practical: if you hold ZIL on an exchange, you likely can’t move it right now. The deposit and withdrawal freeze is necessary for containment, but it effectively locks traders out of their positions during a period of heightened uncertainty.

The identity of the affected exchange matters. Its response, or lack thereof, matters even more. An exchange that stays silent while its partner project does the public communication has made no official statement regarding the incident or any technical specifics.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.