Dmitriy Gerasimov

CEO of Cellframe Network

[Dmitriy Gerasimov @naeper]

We are $CELL - We are here

[Dmitriy Gerasimov @naeper]

Good moment to update your cryptography on PQ, @zilliqa because users have to reissue their wallets.

Btw good demonstration of what happens when Quantum Apocalypse has began, all vulnerable chains will have to stop the tx processing

[Zilliqa @zilliqa]

Nonce-Generation Vulnerability in the Zilliqa Ledger App: A critical vulnerability has been identified in the Zilliqa Ledger application affecting the generation of Schnorr signatures for native (non-EVM) Zilliqa transactions. The vulnerability causes signatures to be generated with a predictably weakened ephemeral nonces, from which an attacker can recover the signer’s private key using only publicly available on-chain data.

Protective measures are already in place to prevent further loss, and a coordinated remediation plan is being finalised. Users who have signed native Zilliqa transactions with a Ledger device should await official guidance before taking any action.

Impact: The vulnerability affects private keys used to sign native Zilliqa transactions with a Ledger device. Any account that has broadcast approximately five or more native transactions signed through the Zilliqa Ledger app should be considered compromised. Its private key can be reconstructed from signatures already recorded on-chain, regardless of any subsequent software update.

The issue is confined to the Ledger app’s native signing path. EVM transactions are unaffected. Zilliqa software development kits, including zilliqa-js, gozilliqa-sdk and pyzil, generate nonces correctly and are not affected.

Root cause: Zilliqa native transactions are authenticated using EC-Schnorr signatures over secp256k1. Each signature requires a fresh, uniformly random 256-bit ephemeral nonce, (k). The secrecy and full-width randomness of (k) are essential, as any systematic bias can allow the private key to be recovered.

The signing routine generated 40 bytes of randomness and reduced them modulo the curve order, correctly producing a uniform 256-bit value. However, when copying this value into the nonce buffer, the code copied the wrong 32 bytes of the 40-byte output. This retained the eight zero-padding bytes introduced by the reduction and discarded eight bytes of entropy.

As a result, the most significant 64 bits of every generated nonce were fixed at zero, meaning (k < 2^{192}).

A nonce with 64 known bits leaks information about the private key with each signature. With five or more affected signatures, the private key can be recovered in seconds using commodity hardware by solving the resulting Hidden Number Problem through lattice reduction - a well-documented technique for attacking biased-nonce signatures.
Because the affected transactions are permanently recorded on-chain, this exposure cannot be reversed by updating the signing application. The affected keys must be retired.

Timeline
2019-2026: The defect was present in every released version of the Zilliqa Ledger app across all supported devices.

19 July 2026: On-chain activity consistent with active exploitation was observed.

21 July 2026: The root cause was isolated to the app’s nonce-handling code and confirmed by reproducing the issue against on-chain signatures.

Ongoing: A corrected version of the app is being prepared in coordination with Ledger. Release details will be announced separately.

Remediation: As soon as the issue was identified, native (non-EVM) transactions were suspended as a protective measure. This has halted further draining of affected accounts while a solution is prepared.

Affected accounts cannot be secured through an ordinary transfer. Because their private keys can be derived from data already recorded on-chain, an attacker with access to the same key could attempt to front-run a legitimate transfer as soon as transactions resume. Advising users simply to move their funds would therefore be ineffective and potentially unsafe.

A corrected build of the Ledger app has been prepared, restoring full-width nonce generation and preventing further weakened signatures from being produced. However, this does not protect keys that have already been used to sign affected transactions. Those keys must ultimately be retired.

A coordinated remediation plan to secure affected balances is being finalised and will be published separately. Until then, users who have signed native Zilliqa transactions with a Ledger device should take no independent action and should rely solely on official Zilliqa channels for instructions.

Users who hold or transact with ZIL exclusively through EVM-compatible tooling are not affected.

Acknowledgments: @kucoincom played a key role in pinpointing the root cause in the Zilliqa Ledger app nonce generation, recovered affected private keys from publicly available on-chain signatures, and confirmed ongoing exploitation.

KuCoin’s timely reporting and responsible collaboration enabled rapid protective measures, helping safeguard users, ecosystem participants, and the broader Zilliqa ecosystem while the remediation plan was being developed.

We sincerely appreciate the KuCoin team’s professionalism, technical expertise, and cooperation throughout this process.

[Dmitriy Gerasimov @naeper]

@IanSmith_HSA @cryptodavidw BYD it’s middle segment car. I suggest to have a look on Zeekr, the best EV brand for my opinion. My Zeekr X passes well 3 Siberian winters, ever in -40C it workes fine.
About Tesla, its main benefit is cheap spareparts and battery’s elements that’s are easy to replace.

[Dmitriy Gerasimov @naeper]

@intangiblecoins We’re doing all this things

https://t.co/grvjvEsJcJ
https://t.co/J9sTXucd1D

Wrote on this email as well

[Dmitriy Gerasimov @naeper]

Cellframe Wallet Browser Extension is available for beta tests. Send/receive is working, everything else is under question mark.

Pls give a feedback, first of all about localization

https://t.co/d2qR7iSfDj

Official release should be on the next week

[Dmitriy Gerasimov @naeper]

@IanSmith_HSA @dallairedemers Not so excited with K3.
Best model for my opinion is GLM-5.2. Also MiMo-2.5-Pro is very good for math tasks however it likes to simplify and make stubs instead of real implementation.
With Opus and Fable I’m disenchanted a little.

[Dmitriy Gerasimov @naeper]

Web wallet is coming as well

[Cellframe Network @cellframenet]

🌐 Cellframe Web DEX is now live!

The Cellframe DEX trading experience is now available directly in your browser. Connect your wallet and trade CF-20 tokens through a familiar order-book interface with market and limit orders, price charts, pair statistics, and trade history.

Unlike most decentralized exchanges, Cellframe DEX does not rely on AMMs or smart contracts. Orders are executed using Cellframe conditional transactions, allowing users to stay in full control of their assets while trading through decentralized infrastructure.

Explore the new Web DEX:
https://t.co/D0i4vbseRU

[Dmitriy Gerasimov @naeper]

My apologies for delay, were some organization problems. Now all accesses restored and we’re beginning some cleanup onchain. And burning extra tokens.

https://t.co/9SdltECerp

First one has been burned, more coming.
Stay tuned and remember: we are here.

[Dmitriy Gerasimov @naeper]

@emercoin_press Unfortunately it doesn’t exclude quantum attack on the mempool but that’s much better than onchain exposed public key.

How about to upgrade Emer with ML-DSA or FN-DSA?

[Dmitriy Gerasimov @naeper]

@platoff Ну, если про конкретно эту картинку говорить, то тут-то как раз ничего удивительного. РНК мир явно мог многое.
Если охота искать божий замысел в истории жизни на Земле, то лучше б�� обратить внимание на возникновение эукариот. Вот это действительно хз как эволюционно сделать.

[SciTech Era @SciTechera]

MIT quantum computing researcher Aram Harrow believes "interesting quantum computers" with thousands of qubits could arrive sooner than expected, not in 10-15 years as previously thought.

Harrow has spent 25 of his 46 years working in quantum computing.

He says these systems could enable powerful simulations of molecules and materials, while potentially breaking today's widely used encryption methods.

[Dmitriy Gerasimov @naeper]

@platoff Ну один хер, удачи тебе

[Ian Smith @IanSmith_HSA]

I noticed this in 2024 with Litinski's paper and started work on QuantumEVM. Cellfrane and QuantumEVM are fully PQC with no elliptic curve cryptography.

[Dmitriy Gerasimov @naeper]

@IanSmith_HSA Fireworks for zombies. Old good PR technology to shift attention from a problematic subject.

[Dmitriy Gerasimov @naeper]

Just to prevent a regular fud about balancing. We’re going to exchange CELL through Erc20-&gt;BEP20-&gt;CF20 on the bridge and MEXC with BitMart to get back withdrawals to the last one.

Stay tuned, more news tomorrow on our regular AMA

[Dmitriy Gerasimov @naeper]

@1red2black И всё бы ничего, но в результате этого дела свежий дистр Убунты жрет памяти ��ольше чем дистр Винды.
Дело скорее всего не в расте, а в растоманах, которые в массе своей посредственные программисты и отсекать ИИшный нейрослоп могут с трудом.
Но и сам раст безусловно добавляет.

[Constantin П @Pa3_14zh]

#TON shipped Catchain 2.0: 2.5s → 400ms block time
Approaching that magnitude of speedup in #Cellframe ESBOCS: 30-60+s → ~1s on full quorum (all validators well-connected), 2-5s worldwide, and no it’s not sharding yet. Live testnet proven, soon in main. The PQ future is near

[Dmitriy Gerasimov @naeper]

@chebykin_d Его право, не спорю. Я вообще не его фанат, как писатель он посредственный.
Просто смысл в играх серии Метро был в российском постапок вайбе, без него лично я смысла не вижу.
И платить за это я тоже разумеется не буду.
Вот и весь ответ на заданный топикстартером вопрос.

[Dmitriy Gerasimov @naeper]

@nikalaikina «Только чистый Си
По заветам старой школы»