Zilliqa: X-Bridge and ZRC2 token pools exploited, bridge suspended, CEO steps down

Teaser from the source

Starting Oct 22 2026, attackers drained several PlunderSwap V3 pools holding ZRC2-backed tokens on Zilliqa; PlunderSwap blamed a bug in the Zilliqa node (zq2 v0.21.10) where ZRC2 transfers showed up mid-transaction but were discarded at commit, so pools paid out real assets for nothing, and put its losses at about $33.7k. On Oct 27 Zilliqa confirmed that X-Bridge and ZRC2 proxy contracts used by some liquidity pools were affected (zUSDT, SEED, kUSD and Zoge), said native ZIL and the Zilliqa EVM network were not, kept X-Bridge suspended, and said it is rotating all operational keys and working with exchanges and law enforcement. CEO Alexander Zahnd stepped down and the board took direct oversight. Zilliqa has not published a loss figure or cause.

This is the RSS-feed teaser. Read the full article at the original source.