Zilliqa Reports Theft of ZIL From Exchange Partner’s Cold Wallet

Zilliqa has reported that ZIL tokens were stolen after one of its partner exchanges experienced a security incident involving a cold wallet, marking a partner-side breach rather than a confirmed failure of the Zilliqa network itself.

The disclosure frames the event as a theft of ZIL tied to an exchange partner’s custody setup, according to Zilliqa’s statement. The report describes the loss as originating from a cold wallet held by the partner, not from a protocol-level compromise. For related coverage, see Circle President Heath Tarbert Sold $30.8M of CRCL Shares Since June 2025.

What Zilliqa Said About the Reported ZIL Theft

A cold wallet is a crypto storage method kept offline, disconnected from the internet to reduce exposure to remote attacks. Because cold storage is typically reserved for holding reserves securely, a reported breach of one raises questions about how the partner’s operational controls were bypassed. For related coverage, see Grayscale Eyes Quarterly Cash Payouts From ETH and SOL Staking Rewards.

The available report attributes the incident to an exchange partner rather than to Zilliqa’s own infrastructure. Zilliqa has previously worked closely with major trading venues, including when Binance supported a Zilliqa network upgrade and hard fork, which underscores how dependent token ecosystems can be on third-party custody partners.

What Is Confirmed and What Is Not

What is confirmed from the report is limited: Zilliqa says ZIL was stolen and that the loss involved a partner exchange’s cold wallet. The specific amount taken, the identity of the exchange, and the method of the breach are not established in the available evidence.

No verified on-chain transaction, dollar figure, or recovery status has been provided in the research reviewed for this article. Readers should treat details beyond the core disclosure as unconfirmed until the exchange or Zilliqa releases further specifics.

Why the Cold Wallet Theft Matters for ZIL Holders and Exchange Security

For ZIL holders, the immediate question is whether funds, withdrawals, or trading are affected. The available report does not specify user impact, so any claim that deposits or balances are at risk cannot be verified at this stage.

The distinction between partner risk and network risk is central here. A cold wallet breach at an exchange partner is an operational security failure at that custodian, and does not, on the evidence available, indicate a flaw in the Zilliqa blockchain itself.

Security incidents at custody partners can still weigh on sentiment around a token even when the underlying protocol is sound. Similar concerns about custodial and compliance exposure have surfaced elsewhere in the market, such as reporting that Circle faces a Wisconsin criminal complaint over scam victim funds, illustrating how third-party handling of assets shapes trust.

Broader access questions also hang over centralized venues, from custody practices to regulatory posture like the USDT 2028 compliance deadline affecting U.S. exchange access. Incident response, transparency, and how quickly the partner discloses specifics will determine how this event affects confidence in the near term.

Until the exchange partner or Zilliqa publishes the amount lost, the affected addresses, and remediation steps, the responsible reading is a narrow one: a reported theft of ZIL from a partner’s cold wallet, with the scope still unverified.

Additional source references: source document 1.

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.