Zil Chain Forensics

Independent analysis of three Zilliqa events from public data: on-chain transactions on Zilliqa, Ethereum and Bitcoin, verified contract sources and Zilliqa's public code. Facts and inferences are labelled throughout.

• Treasury web

  The wallets that funded Zilliqa's validator delegations: where the ZIL goes, how much reaches exchanges each month, what is still staked, and what changed around the incidents.

• X-Bridge drain

  How the Ethereum side of the X-Bridge was emptied with the bridge's only validator key on 2026-10-08, where the $855k went, and what links the keys used to Zilliqa.

• ZRC2 exploit

  A Zilliqa node bug let an attacker pay PlunderSwap pools with ZRC2 transfers that were dropped at commit. The bug is fixed; the drained pools were not restored.