Zilliqa Hack Triggers Exchange Freeze as ZIL Theft Confirmed
Crypto Hack News Today: Zilliqa Cold Wallet Theft, TeleSwap Exploit, and Kenya Website Ransom Attack
The cryptocurrency industry has once again found itself under intense scrutiny following a series of high-profile cybersecurity incidents that unfolded within days of one another. While blockchain networks themselves remain resilient, the latest attacks demonstrate that exchanges, bridges, and even government websites continue to present attractive targets for cybercriminals.
Today's Crypto Hack News centers on three separate events that have captured the attention of investors and security researchers worldwide. The first involves a confirmed theft of ZIL tokens from a cold wallet controlled by one of Zilliqa's exchange partners. The second is an undisclosed exploit targeting the TeleSwap cross-chain bridge, resulting in losses estimated at approximately $735,000. The third incident extends beyond the crypto industry altogether, as hackers compromised the official website of Kenyan President William Ruto and demanded a ransom of five Bitcoin.
Although these incidents are unrelated, they collectively highlight an important reality facing the digital asset industry in 2026: as blockchain adoption grows, so do the sophistication and frequency of cyberattacks.
Zilliqa Confirms Cold Wallet Security Incident
The most closely watched incident involves Zilliqa, whose team confirmed that an exchange partner suffered a theft involving ZIL tokens stored in a cold wallet.
 |
| Source: X @zilliqa |
Unlike hot wallets connected to the internet, cold wallets are designed to remain offline, making them one of the safest methods for storing digital assets. Because they are isolated from online networks, cold wallets are generally considered far less vulnerable to remote attacks.
However, offline storage does not eliminate every security risk.
In its official statement, Zilliqa emphasized that the blockchain itself was not compromised. Instead, the incident involved a cold wallet managed by one of its exchange partners.
At the time of publication, the company has not disclosed:
- The identity of the affected exchange
- The amount of ZIL stolen
- The method used by the attackers
- Whether private keys were compromised
- Whether insider access played any role
Instead, the company said the investigation remains ongoing while it works alongside the exchange partner to determine the full extent of the incident.
Why Cold Wallet Theft Is So Unusual
Cold wallets are widely used by cryptocurrency exchanges, institutional investors, and custodians because they store private keys offline.
Unlike software wallets or browser-based wallets, they cannot be directly accessed through internet-based attacks.
Yet history has shown that cold wallet incidents can still occur under certain circumstances.
Security experts generally point to several possible attack vectors, including:
- Compromised signing devices
- Stolen hardware wallets
- Insider threats
- Poor operational security
- Unauthorized physical access
- Weak multi-signature procedures
Although Zilliqa has not confirmed which scenario applies in this case, the lack of technical details has led security researchers to avoid speculation until investigators release verified findings.
Exchanges Temporarily Suspend ZIL Transfers
Following confirmation of the theft, Zilliqa urged cryptocurrency exchanges to temporarily suspend deposits and withdrawals involving ZIL tokens.
The objective is straightforward.
By limiting transfers through centralized exchanges, investigators can reduce opportunities for attackers to move or liquidate stolen assets while tracing blockchain transactions.
Several exchanges responded quickly.
Among them, Bitget announced temporary suspension of ZIL deposits and withdrawals, describing the interruption as wallet maintenance without specifically referencing the reported theft.
Importantly, the suspension affects only centralized exchange transfers.
The Zilliqa blockchain itself continues operating normally, meaning users can still send transactions directly across the network.
Investigation Continues
Zilliqa has stressed that transparency will remain a priority throughout the investigation.
According to the company, teams are working closely with the affected exchange partner to identify:
- The origin of the compromise
- The total amount stolen
- Whether additional wallets were affected
- Potential recovery options
So far, no reimbursement plan has been announced.
Likewise, there has been no confirmation regarding insurance coverage or asset recovery efforts.
The company encouraged users to rely exclusively on official announcements while warning against misinformation circulating across social media.
Market Reaction Following the Announcement
As often happens after unresolved security incidents, cryptocurrency markets reacted immediately.
Shortly after confirmation of the theft, ZIL experienced increased selling pressure that briefly pushed the token toward a new all-time low before buyers entered the market.
At the time of writing:
 |
| Source: coinmarketcap data |
| Metric | Value |
|---|---|
| ZIL Price | $0.002509 |
| 24-Hour Change | -1.48% |
| Market Capitalization | $50.38 Million |
| 24-Hour Trading Volume | $47.56 Million |
| Volume Increase | +496.7% |
| Fully Diluted Valuation | $52.69 Million |
| Circulating Supply | 20.08 Billion ZIL |
The nearly fivefold increase in trading volume reflects heightened investor activity rather than renewed confidence.
Historically, unresolved security incidents often generate significant volatility as traders respond to uncertainty surrounding potential financial losses.
TeleSwap Suffers $735,000 Cross-Chain Exploit
While attention remained focused on Zilliqa, blockchain investigator ZachXBT disclosed another security incident involving the TeleSwap cross-chain bridge.
According to blockchain analysis, attackers exploited TeleSwap on July 15, draining approximately $735,000 before laundering the stolen funds through Tornado Cash, a cryptocurrency mixing service frequently used to obscure transaction histories.
These platforms enable users to transfer assets between different blockchain networks by locking tokens on one chain while issuing equivalent assets on another.
Because bridges often control substantial liquidity pools, they have become recurring targets in some of crypto's largest historical exploits.
As of publication, TeleSwap has not released a detailed technical explanation regarding how the exploit occurred.
Kenyan Presidential Website Targeted in Bitcoin Ransom Attack
Cybersecurity concerns extended beyond digital assets when hackers compromised the official website of Kenyan President William Ruto.
The attackers reportedly defaced the government website before demanding a ransom of 5 Bitcoin, valued at approximately $320,000 based on current market prices.
Government officials later confirmed that although unauthorized access occurred, investigators found no evidence that sensitive government information had been compromised.
Authorities have since restored website operations while continuing forensic investigations into the breach.
Although unrelated to cryptocurrency infrastructure, the incident demonstrates how Bitcoin continues to be used as the preferred payment method in many ransomware attacks due to its global accessibility and decentralized nature.
Why Crypto Infrastructure Remains a Prime Target
The latest incidents reinforce several long-standing cybersecurity challenges facing the cryptocurrency industry.
As blockchain adoption expands, attackers increasingly focus on infrastructure surrounding blockchain networks rather than attacking the blockchains themselves.
These targets commonly include:
- Cryptocurrency exchanges
- Cross-chain bridges
- Wallet providers
- Custody platforms
- Identity systems
- Government websites connected to digital services
Blockchain protocols themselves often remain secure, while vulnerabilities emerge through operational procedures, software implementations, or human error.
This distinction is important because many reported "crypto hacks" actually involve third-party infrastructure rather than failures within blockchain consensus mechanisms.
Lessons for Investors
Although each incident differs technically, they highlight several important security principles for cryptocurrency users.
Diversifying storage methods remains essential.
Users holding significant balances often reduce risk by combining hardware wallets, multi-signature security, and reputable custodians rather than relying entirely on centralized exchanges.
Investors should also monitor official project announcements during security incidents, as misinformation frequently spreads faster than verified updates.
Perhaps most importantly, users should remain cautious whenever unexpected wallet connections, token approvals, or unofficial recovery websites appear after major hacks.
Cybercriminals frequently exploit public attention surrounding security incidents by launching phishing campaigns targeting concerned investors.
The Bigger Picture
The cryptocurrency industry has experienced remarkable institutional growth throughout 2026.
Spot ETFs, tokenized real-world assets, stablecoin regulation, and increasing government participation have all expanded blockchain adoption globally.
At the same time, larger ecosystems naturally attract more sophisticated cyber threats.
Security incidents involving exchanges, bridges, and infrastructure providers continue to remind investors that operational security remains just as important as blockchain innovation.
For developers, exchanges, and custodians, strengthening key management, access controls, multi-signature systems, and continuous monitoring has become increasingly essential as digital asset markets mature.
Conclusion
Today's Crypto Hack News highlights three separate cybersecurity events that demonstrate the evolving risks surrounding digital assets.
Zilliqa confirmed that a cold wallet belonging to one of its exchange partners was compromised, prompting several exchanges to temporarily suspend ZIL deposits and withdrawals while investigators determine the extent of the theft. Meanwhile, blockchain investigator ZachXBT uncovered a previously undisclosed $735,000 TeleSwap exploit, and Kenyan authorities continue investigating a ransomware attack targeting President William Ruto's official website.
Although none of these incidents indicate weaknesses within the underlying blockchain networks themselves, they underscore the growing importance of infrastructure security across the cryptocurrency ecosystem.
As investigations continue, investors should monitor official updates, avoid speculation, and remain vigilant against phishing campaigns that often follow high-profile cyberattacks.
hoka.news – Not Just Crypto News. It’s Crypto Culture.
Writer: Barland Vex Crypto Market Analyst & Onchain Storyteller
Barland Vex is a veteran crypto writer who treats the chaos of digital markets as his playground. With a sharp instinct for reading Bitcoin's movements, DeFi waves, and the narratives that move millions of dollars in a matter of hours, Vex delivers analysis that's always one step ahead of the market itself.
From deep onchain reports to bold trend predictions, every piece is crafted to give readers one thing: an edge. Followed by traders, builders, and investors who refuse to miss a beat, Barland Vex is the name the market turns to when things start moving wild.
Crypto Market Analyst & Onchain Storyteller
Barland Vex is a veteran crypto writer who treats the chaos of digital markets as his playground. With a sharp instinct for reading Bitcoin's movements, DeFi waves, and the narratives that move millions of dollars in a matter of hours, Vex delivers analysis that's always one step ahead of the market itself.