TLDR Tech / InfoSec
Zilliqa Ledger app vulnerability lets attackers recover signer's private keys
Zilliqa disclosed that a Ledger app flaw generates signatures with predictably weakened ephemeral nonces, letting attackers reconstruct private keys from public onchain data for any wallet that signed five or more native ZIL transactions via Ledger.
Read the full story