Cybersecurity specialists from Ledger, known for their hardware cryptocurrency wallets, have discovered a critical vulnerability in Android smartphones that could lead to the theft of user cryptocurrency. The issue is related to the Dimensity 7300 (MT6878) chip manufactured by the Taiwanese company MediaTek, which is used in many modern Android devices, including the new Solana Seeker.
The vulnerability lies within the chip’s boot ROM, making it unpatchable through regular software updates, as the code is embedded directly into the hardware. This means attackers could gain access to the private keys of cryptocurrency wallets stored on these devices, using various methods ranging from malware to sophisticated zero-click attacks.
Ledger experts warn that secure storage and use of private keys on devices with this chip are impossible.
In response to Ledger’s statement, MediaTek stated that it considers electromagnetic interference attacks on the MT6878 chip “impractical” as it is designed for general consumer devices, not for protecting financial data.
About the Author
