Keystone warns that self-custody security can fail through three single points: the seed, hardware vendor and storage location, making multisig and redundancy essential

683,130,969.66 ZIL was stolen across 66 transactions after the Zilliqa Ledger app zeroed 64 bits of nonce entropy, letting four public signatures reconstruct a private key in seconds, according to [Zilliqa’s August 20 post-mortem](https://www.zilliqa.com/ledger-incident/post-mortem/). A 2-of-3 using that same app for every signer reproduces the defect across all three keys once each signer publishes four affected signatures.

Top comment by @Benthic