|

Ledger Researchers Expose Android Flaw Enabling Wallet Seed Theft

📡

Your Android cellphone could be handing over your crypto pockets in below 60 seconds.

Ledger’s personal safety staff simply exposed a {hardware} flaw in MediaTek chips that lets anybody with bodily entry to your cellphone pull your PIN and seed phrase earlier than your cellphone even boots. USB cable, executed. No software program patch can repair it both. It is baked into the chip.

The Dimensity 7300 is the chip in query. It impacts roughly 25% of all Android gadgets. Even the Solana Seeker cellphone is on the record.

MediaTek was advised about this again in May 2025. The repair? There just isn’t one. If you could have the chip, you could have the vulnerability.

For anybody storing actual cash on a cell pockets, this one hurts.

How the Boot ROM Exploit Bypasses Android Security

The flaw lives within the boot ROM. That is the code burned into the chip on the manufacturing facility. It can’t be up to date. Ever.

Ledger’s staff used electromagnetic pulses to mess with the chip mid-startup. Perfectly timed voltage glitches that drive the processor to skip its personal safety checks. Once that occurs, the attacker hits EL3 privilege.

That is the best degree of management potential on ARM structure. Full entry. Game over.

In testing, they pulled it off in about 1 second per try.

From there, your entire information partition will get decrypted offline. Private keys, PINs, every part your trusted execution setting was supposed to guard. Gone.

No app-level safety saves you right here. The basis itself is damaged.

Millions of Devices Exposed, Including Solana Seeker

Millions of mid-range Android telephones are affected. And there isn’t any patch coming for gadgets already within the subject.

MediaTek’s response was mainly “bodily assaults usually are not actually our drawback.” But when individuals are storing severe cash on these telephones, that reply not cuts it.

The numbers again that up. Crypto theft hit $3.41 billion in 2024. Personal wallets now account for 44% of all stolen worth. In 2022, that quantity was 7.3%.

Source: Chainalysis

Ledger’s personal CTO mentioned it. Phones have been by no means designed to be vaults. If you could have actual cash in a cell pockets, transfer it to a {hardware} pockets now.

A software program workaround will probably be included within the March 2026 Android Security Bulletin.

The actual query now’s whether or not mobile-first crypto tasks can survive a hardware belief drawback. If the muse retains cracking, the entire pitch of storing crypto in your cellphone begins falling aside.

Discover: The best new crypto in the world

The submit Ledger Researchers Expose Android Flaw Enabling Wallet Seed Theft appeared first on Cryptonews.

Similar Posts