Wallet and DeFi security issues surface in three updates

What happened

Zilliqa said its post-mortem traced a 683M ZIL theft to a hardware-wallet flaw that discarded entropy. The record presents this as confirmed technical detail, but does not provide further information on the affected hardware, remediation, or recovery.

Ledger patched an Ethereum-app bug that could show one transaction to a user and sign another. The supplied record identifies version 1.22.2 as the patch version, making firmware confirmation a concrete point to monitor for affected users.

Why it matters

The three updates concern different parts of the same broad security surface: wallet key generation, transaction signing, and DeFi governance. Together, they suggest that safeguards cannot be assessed only at the protocol level; users and projects may also need to consider device software, what is presented for signing, and the paths governance can authorize.

Term Finance said it ended its Meta Vaults after a governance process cleared the path for an estimated $8.5M drain. Withdrawals are open, according to the record, but it does not confirm whether losses occurred or whether a backstop exists.

What to watch next

The most useful receipts will be the underlying Zilliqa post-mortem and remediation details, confirmation that Ledger’s affected Ethereum app is patched in version 1.22.2, and a Term Finance update that confirms losses, withdrawal status, and any support or backstop for affected users. Until then, the record supports heightened attention to signing, firmware, and governance processes, not conclusions about the full scope of harm.