Zilliqa has confirmed that a portion of its native ZIL tokens was stolen from a cold wallet belonging to one of its partner exchanges. The breach, disclosed on July 20, 2026, has prompted an immediate suspension of ZIL deposits and withdrawals across multiple platforms. South Korean exchange Bithumb independently halted ZIL services earlier the same day, citing suspected security concerns, and is widely believed to be the affected partner.
According to Zilliqa's official statement, the stolen ZIL was held in cold storage — a method traditionally considered highly secure due to its offline nature. The compromise suggests a sophisticated attack vector, possibly involving physical access or insider threats. Zilliqa is collaborating with the unnamed exchange to trace the stolen funds and identify the perpetrators.
To prevent laundering of the stolen tokens, Zilliqa has requested all exchanges to temporarily suspend ZIL deposits and withdrawals. The network itself continues to function normally, but users on centralized platforms face liquidity constraints until the security review concludes. Both Zilliqa and Bithumb have urged users to rely solely on official communications and avoid speculation.
The incident has reignited debates about cold wallet security, as even offline storage proved vulnerable. While Zilliqa has not disclosed the total amount stolen, the event underscores persistent operational risks within centralized crypto platforms. Further updates are expected as the investigation unfolds.
