市值
24小时
16099
Cryptocurrencies
58.62%
Bitcoin 分享

Ledger Researchers Expose Android Flaw Enabling Wallet Seed Theft

Ledger Researchers Expose Android Flaw Enabling Wallet Seed Theft


cryptonews
2026-03-11 22:00:00

Your Android phone might be handing over your crypto wallet in under 60 seconds. Ledger’s own security team just exposed a hardware flaw in MediaTek chips that lets anyone with physical access to your phone pull your PIN and seed phrase before your phone even boots. USB cable, done. No software patch can fix it either. It is baked into the chip. The Dimensity 7300 is the chip in question. It affects roughly 25% of all Android devices. Even the Solana Seeker phone is on the list. INTEL: Ledger exposes a MediaTek Dimensity 7300 flaw that lets attackers with physical access steal Android hot-wallet seed phrases in minutes pic.twitter.com/gBTb2QBXMO — Solid Intel (@solidintel_x) March 11, 2026 MediaTek was told about this back in May 2025. The fix? There is not one. If you have the chip, you have the vulnerability. For anyone storing real money on a mobile wallet, this one hurts. How the Boot ROM Exploit Bypasses Android Security The flaw lives in the boot ROM. That is the code burned into the chip at the factory. It cannot be updated. Ever. Ledger’s team used electromagnetic pulses to mess with the chip mid-startup. Perfectly timed voltage glitches that force the processor to skip its own security checks. Once that happens, the attacker hits EL3 privilege. That is the highest level of control possible on ARM architecture. Full access. Game over. In testing, they pulled it off in about 1 second per attempt. BREAKING: @Ledger researchers have identified a vulnerability in Android phones using MediaTek processors that could allow an attacker with physical access to extract a device’s PIN and crypto wallet seed phrases in under a minute. In a proof of concept test, Ledger’s Donjon… pic.twitter.com/ooetcAhZXx — SolanaFloor (@SolanaFloor) March 11, 2026 From there, the entire data partition gets decrypted offline. Private keys, PINs, everything your trusted execution environment was supposed to protect. Gone. No app-level security saves you here. The foundation itself is broken. Millions of Devices Exposed, Including Solana Seeker Millions of mid-range Android phones are affected. And there is no patch coming for devices already in the field. MediaTek’s response was basically “physical attacks are not really our problem.” But when people are storing serious money on these phones, that answer no longer cuts it. The numbers back that up. Crypto theft hit $3.41 billion in 2024. Personal wallets now account for 44% of all stolen value. In 2022, that number was 7.3%. Source: Chainalysis Ledger’s own CTO said it. Phones were never designed to be vaults. If you have real money in a mobile wallet, move it to a hardware wallet now. A software workaround will be included in the March 2026 Android Security Bulletin. The real question now is whether mobile-first crypto projects can survive a hardware trust problem. If the foundation keeps cracking, the whole pitch of storing crypto on your phone starts falling apart. Discover : The best new crypto in the world The post Ledger Researchers Expose Android Flaw Enabling Wallet Seed Theft appeared first on Cryptonews .


阅读免责声明 : 此处提供的所有内容我们的网站,超链接网站,相关应用程序,论坛,博客,社交媒体帐户和其他平台(“网站”)仅供您提供一般信息,从第三方采购。 我们不对与我们的内容有任何形式的保证,包括但不限于准确性和更新性。 我们提供的内容中没有任何内容构成财务建议,法律建议或任何其他形式的建议,以满足您对任何目的的特定依赖。 任何使用或依赖我们的内容完全由您自行承担风险和自由裁量权。 在依赖它们之前,您应该进行自己的研究,审查,分析和验证我们的内容。 交易是一项高风险的活动,可能导致重大损失,因此请在做出任何决定之前咨询您的财务顾问。 我们网站上的任何内容均不构成招揽或要约