URGENT: Critical Flaw in Zilliqa Ledger App Exposes Private Keys!

​A severe security vulnerability has just been discovered in the Zilliqa Ledger application, prompting the network to take drastic protective measures.
​
The Vulnerability Explained
​According to Cointelegraph, the flaw lies in how the Zilliqa Ledger app generates transaction signatures.
​Weak Nonces: The application has been generating signatures using "predictably weakened ephemeral nonces".
​ Because these cryptographic nonces are mathematically predictable, sophisticated attackers can reverse-engineer and completely reconstruct a user's private key using nothing but publicly available on-chain transaction data.
​This alarming vulnerability reportedly affects all previous versions of the Zilliqa Ledger application.

​Zilliqa's Emergency Response
​To prevent attackers from sweeping users' hardware wallets, the Zilliqa team officially stepped in. The network has proactively suspended all native ZIL transactions. By halting transactions on the blockchain, they are preventing new, vulnerable signatures from being broadcasted, effectively buying time to patch the Ledger application.

​What Should You Do?
If you use a Ledger hardware wallet to secure your $ZIL , do not attempt to transact until an official software patch for the Zilliqa Ledger app is released by Ledger and the network officially resumes operations. Because this is an app-level software flaw (and not a hardware breach), your funds remain safe as long as your private keys aren't exposed through generating a new, vulnerable transaction signature.#zilliqa