Zilliqa’s flagship DEX and #1 validator. Stake $ZIL with our node to earn exclusive airdrops + reward points. We pay extra. Learn with our crew→ @PlunderAcademy

Plunder Academy is now LIVE! The islands are awake… the quests are real… and the path from deckhand to developer begins today. Immerse yourself in the world of Plunder Academy. Dive in: plunderacademy.com ⚡️🏝️
You've traded. You've farmed. Now its time to build. plunderacademy.com 🎓📚
11
19
4,080
PlunderSwap | Zilliqa’s #1 DEX retweeted
Plunderswap Rewards v1.2.44 is rolling out 🚀 What’s new since v1.2.37: • Improved Read-only wallet reliability • Added Multicall with RPC fallback • Better cached / last-known data handling • Added full Diagnostics in Settings • Added Copy & Send diagnostics More down below
5
5
14
422
PlunderSwap | Zilliqa’s #1 DEX retweeted
Fill your boots, harvest is here.
Made with AI
5
14
393
stay tuned!
Appreciate for the shoutout 💯 Looking forward to list all the new things that are coming in few days! Stay tuned
1
14
861
PlunderSwap | Zilliqa’s #1 DEX retweeted
Developed by nitter.net/noroetechnor make sure to add a follow to him for updates!!
3
3
127
PlunderSwap | Zilliqa’s #1 DEX retweeted
A lot more to come, ETA next week
2
3
90
PlunderSwap | Zilliqa’s #1 DEX retweeted
NEWS! 1. Added Read-only mode for viewing wallet data without connecting or signing. 2. Improved multi-wallet support and wallet switching. 3. Fixed SEED bonus APR. 4. Calculator now include seed. 5. Projected earnings are now more accurate. 6. MILESTONE with estimated time
3
2
11
438
Zilliqa staking, right in your pocket. 📲✨ PlunderSwap Rewards is a mobile app that gives you a clean dashboard for your balances, staking positions & claimable rewards, just connect your wallet and go. Built by the community, for the community. 🏴‍☠️ play.google.com/store/apps/d…
Made with AI
3
13
41
1,212
fields still turnin'
Your 16-day Harvest Report has arrived!
2
12
736
PlunderSwap | Zilliqa’s #1 DEX retweeted
An update has been added to the Ledger incident hub, outlining the recovery and transition plan. zilliqa.com/ledger-incident/ The legacy (non-EVM) side of Zilliqa is being retired, with recovery taking place through migration to Zilliqa EVM. 🧵1/4
We have published a dedicated Ledger Incident Hub with the latest confirmed information on the signing flaw affecting the Zilliqa Ledger application for Legacy accounts. Legacy Zilliqa transactions remain paused as a precaution. Zilliqa EVM is not affected. The hub explains: • what happened • who may be affected • what is currently paused • what action users should take • how the recovery work is progressing You do not need to take any action right now. The Zilliqa team will never contact you first or ask for your seed phrase, private key or recovery phrase. Read the Incident Hub: zilliqa.com/ledger-incident/
41
28
117
58,285
PlunderSwap | Zilliqa’s #1 DEX retweeted
Nonce-Generation Vulnerability in the Zilliqa Ledger App: A critical vulnerability has been identified in the Zilliqa Ledger application affecting the generation of Schnorr signatures for native (non-EVM) Zilliqa transactions. The vulnerability causes signatures to be generated with a predictably weakened ephemeral nonces, from which an attacker can recover the signer’s private key using only publicly available on-chain data. Protective measures are already in place to prevent further loss, and a coordinated remediation plan is being finalised. Users who have signed native Zilliqa transactions with a Ledger device should await official guidance before taking any action. Impact: The vulnerability affects private keys used to sign native Zilliqa transactions with a Ledger device. Any account that has broadcast approximately five or more native transactions signed through the Zilliqa Ledger app should be considered compromised. Its private key can be reconstructed from signatures already recorded on-chain, regardless of any subsequent software update. The issue is confined to the Ledger app’s native signing path. EVM transactions are unaffected. Zilliqa software development kits, including zilliqa-js, gozilliqa-sdk and pyzil, generate nonces correctly and are not affected. Root cause: Zilliqa native transactions are authenticated using EC-Schnorr signatures over secp256k1. Each signature requires a fresh, uniformly random 256-bit ephemeral nonce, (k). The secrecy and full-width randomness of (k) are essential, as any systematic bias can allow the private key to be recovered. The signing routine generated 40 bytes of randomness and reduced them modulo the curve order, correctly producing a uniform 256-bit value. However, when copying this value into the nonce buffer, the code copied the wrong 32 bytes of the 40-byte output. This retained the eight zero-padding bytes introduced by the reduction and discarded eight bytes of entropy. As a result, the most significant 64 bits of every generated nonce were fixed at zero, meaning (k < 2^{192}). A nonce with 64 known bits leaks information about the private key with each signature. With five or more affected signatures, the private key can be recovered in seconds using commodity hardware by solving the resulting Hidden Number Problem through lattice reduction - a well-documented technique for attacking biased-nonce signatures. Because the affected transactions are permanently recorded on-chain, this exposure cannot be reversed by updating the signing application. The affected keys must be retired. Timeline 2019-2026: The defect was present in every released version of the Zilliqa Ledger app across all supported devices. 19 July 2026: On-chain activity consistent with active exploitation was observed. 21 July 2026: The root cause was isolated to the app’s nonce-handling code and confirmed by reproducing the issue against on-chain signatures. Ongoing: A corrected version of the app is being prepared in coordination with Ledger. Release details will be announced separately. Remediation: As soon as the issue was identified, native (non-EVM) transactions were suspended as a protective measure. This has halted further draining of affected accounts while a solution is prepared. Affected accounts cannot be secured through an ordinary transfer. Because their private keys can be derived from data already recorded on-chain, an attacker with access to the same key could attempt to front-run a legitimate transfer as soon as transactions resume. Advising users simply to move their funds would therefore be ineffective and potentially unsafe. A corrected build of the Ledger app has been prepared, restoring full-width nonce generation and preventing further weakened signatures from being produced. However, this does not protect keys that have already been used to sign affected transactions. Those keys must ultimately be retired. A coordinated remediation plan to secure affected balances is being finalised and will be published separately. Until then, users who have signed native Zilliqa transactions with a Ledger device should take no independent action and should rely solely on official Zilliqa channels for instructions. Users who hold or transact with ZIL exclusively through EVM-compatible tooling are not affected. Acknowledgments: @kucoincom played a key role in pinpointing the root cause in the Zilliqa Ledger app nonce generation, recovered affected private keys from publicly available on-chain signatures, and confirmed ongoing exploitation. KuCoin’s timely reporting and responsible collaboration enabled rapid protective measures, helping safeguard users, ecosystem participants, and the broader Zilliqa ecosystem while the remediation plan was being developed. We sincerely appreciate the KuCoin team’s professionalism, technical expertise, and cooperation throughout this process.
As our investigation has progressed, we would like to clarify one important point: At this stage, we have found no evidence that the incident was caused by the exchange’s wallet management or operational processes. We appreciate the exchange’s cooperation in identifying the issue quickly and assisting throughout the investigation. The investigation has instead identified a technical issue affecting transaction signing in a specific set of legacy ZIL1 wallets. We are continuing to verify the precise root cause before publishing a detailed technical report. We will share a full post-mortem, including technical findings and any recommended actions, as soon as the investigation is complete. Thank you for your patience while we work to ensure the information we share is accurate.
46
41
193
195,648
PlunderSwap just got a serious speed boost We’ve made the app lighter, pages and balances load faster, swap quotes update instantly as you type, and mobile feels smoother and more reliable Less waiting. Faster swapping. A better PlunderSwap experience from start to finish‍ ☠
1
13
41
3,227
PlunderSwap | Zilliqa’s #1 DEX retweeted
Our Latest Harvest Report is In! The sun has set on another cycle, so it’s time to share the fruits of our labour. Thank you for being part of the Kalijo acreage. Whether you're planting, staking, or just watching the green grow, we’re glad to have you in the barn! Keep those tractors running! stake.kalijo.io 🌽✨
Made with AI
3
13
34
5,826
PlunderSwap | Zilliqa’s #1 DEX retweeted
Today's the day 🌱 Been planting your $SEEDs with Kalijo? It’s time to reap what you’ve grown. Claim rewards now: stake.kalijo.io
7
13
659
First game on the new games.kalijo.io/ and it’s a win 🥂 Games are live. Easy to play, real chances to win. Go get yours. @Kalijo_Zil 👏
1st Test of the new games.kalijo.io/ was a WINNER!!!
2
10
14
792
PlunderSwap | Zilliqa’s #1 DEX retweeted
NEW: Kalijo Games is LIVE with 3 game modes. 1 platform. 1 NFTree across all of them. Cosmic Grove ➜ Multiplayer survival. Cosmic Mines ➜ Cash out or push your luck. Up to 10x. Plinko Nebula ➜ Pick your risk. Up to 50x. Every bet feeds a 4-tier progressive jackpot. Own an NFTree? Your Cosmic Luck stat boosts your jackpot odds across all 3 games. Provably fair. 100% on-chain. Built on @zilliqa. 🍀✨Play now ——> games.kalijo.io/ ✨
1
15
32
5,904
Provably fair gaming with progressive jackpots, fully on-chain on @zilliqa. Which one are you playing first? 🌀 Cosmic Grove 💣 Cosmic Mines 🟣 Plinko Nebula
NEW: Kalijo Games is LIVE with 3 game modes. 1 platform. 1 NFTree across all of them. Cosmic Grove ➜ Multiplayer survival. Cosmic Mines ➜ Cash out or push your luck. Up to 10x. Plinko Nebula ➜ Pick your risk. Up to 50x. Every bet feeds a 4-tier progressive jackpot. Own an NFTree? Your Cosmic Luck stat boosts your jackpot odds across all 3 games. Provably fair. 100% on-chain. Built on @zilliqa. 🍀✨Play now ——> games.kalijo.io/ ✨
6
7
16
440
PlunderSwap | Zilliqa’s #1 DEX retweeted
🌱✨ Kalijo Harvest Report Picked: 18.03.26 Through every market condition, Kalijo keeps building. ✅ Rewards distributed. ✅ Supply reduced. ✅ Roots strengthened. Join the next harvest → stake.kalijo.io
8
15
482
PlunderSwap | Zilliqa’s #1 DEX retweeted
Not all NFTrees are equal. Your total stat points determine your rarity tier: Common: 0–199 Uncommon: 200–259 Rare: 260–309 Epic: 310–349 Legendary: 350–400 Higher rarity = stronger bonuses + special visual effects.
1
4
7
141
PlunderSwap | Zilliqa’s #1 DEX retweeted
Your NFTree isn't just art. It's your edge. Resilience: Loss protection Magnetism: Better outcomes Fortification: Payout bonus Cosmic Luck: Jackpot boost Higher stats = better bonuses across all game modes.
1
3
7
114
PlunderSwap | Zilliqa’s #1 DEX retweeted
Every bet feeds the progressive jackpot. It costs you nothing extra // it comes from the house edge. Mini: ~1 in 1,000 Minor: ~1 in 5,000 Major: ~1 in 10,000 Grand: ~1 in 50,000 Higher rarity NFTrees boost your odds.
1
6
8
198