Zilliqa Ledger app vulnerability lets attackers recover signer’s private keys

60-second summary

A critical security vulnerability in the Zilliqa Ledger app allows attackers to recover signer's private keys using publicly available onchain data. This exploit is reportedly possible due to the app's lack of proper key derivation and hashing, putting users' funds at risk. The vulnerability has significant implications for Zilliqa's security and user trust.