logo

Ledger researchers have discovered a vulnerability in a certain Android chipset, putting mobile Web3 wallets at risk of physical attacks.

By: theblockbeats.news|2025/12/04 22:45:56
0
Share
copy
bl0ckbl0ck

BlockBeats News, December 4th. According to The Block, Ledger has stated that a recently discovered vulnerability in a widely used Android smartphone processor chip could pose a risk to users relying on Web3 wallets. If the device is physically accessed by an attacker, they could exploit a hardware fault injection to bypass core security checks and take control of the chip. While this discovery does not affect Ledger hardware wallets, it highlights the risks of relying solely on a smartphone hot wallet to secure digital assets. The team tested MediaTek's Dimensity 7300 chip manufactured by TSMC to determine if electromagnetic fault injection could disrupt the earliest stages of the boot process.

Using open-source tools, they injected timely electromagnetic pulses to interfere with the chip's boot ROM, extract its runtime information, and identify the attack path. Subsequently, the team bypassed the chip's write command filtering mechanisms, overwrote the return address on the boot ROM stack, and executed arbitrary code in EL3 (the processor's highest privilege level), with the attack repeatable within minutes. Ledger stated that even the most advanced smartphone chips are vulnerable to physical attacks and are not suitable for safeguarding private keys, emphasizing the criticality of secure elements in self-custody of digital assets. The vulnerability was reported to MediaTek in May, and affected manufacturers have been notified.

-- Price

--

You may also like

Tom Lee's Ethereum Thesis: Why the Man Who Called the Last Cycle Is Doubling Down on Bitmine

Tom Lee is emerging as one of Ethereum’s most influential supporters. From Fundstrat to Bitmine, his Ethereum thesis combines staking yield, treasury accumulation, and long-term network value. Here is why “Tom Lee Ethereum” has become one of crypto’s most watched narratives.

Naval personally takes the stage: The historic collision between ordinary people and venture capital

Naval personally stepped in as the chairman of the USVC Investment Committee. This SEC-registered fund launched by AngelList attempts to bring top private tech assets like OpenAI, Anthropic, and xAI to the general public with a $500 entry threshold. It is not just a new fund, but a structural experi...

a16z Crypto: 9 Charts to Understand the Evolution Trends of Stablecoins

Stablecoins are evolving from trading tools into universal payment infrastructure, and this process is quieter and more thorough than most people expected.

Refutation of Yang Haipo's "The End of Cryptocurrency"

This may be the true test of cryptocurrency. It's not about whether the price has reached a new high, nor about who will achieve financial freedom in the next bull market, but rather whether, after all the grand narratives have been washed away by cycles, it can still leave behind some simpler, more...

Can a hairdryer earn $34,000? Interpreting the reflexivity paradox of prediction markets

Prediction markets are essentially betting on reality, and when participants can access or even influence this path earlier, the market no longer just reflects reality but begins to shape it in return.

6MV Founder: In 2026, the "landmark turning point" for crypto investment has arrived

"I will deploy funds in 2026, so I will tell you this is the best year in history."
The Joker is back
Bigger pools, auto-play, lucky buffs.
The Joker is backJoin now and grab your rewards.

Contents

Popular coins

Latest Crypto News

10:42

DeFi United rescue latest progress: over 100,000 ETH raised

The DeFi United ecological rescue initiative led by Aave is ongoing. The Arbitrum DAO has released 30,765 ETH that was frozen after the rsETH incident on April 18. The designated donation address has accumulated a total of 100,360 ETH to address the collateral asset gap caused by the rsETH incident ...
10:42

Trump: Suggests continuing with the speech but will fully comply with the instructions of law enforcement

According to Jinshi reports, Trump stated that the Secret Service and law enforcement did an excellent job. They responded quickly and bravely. The shooter has been apprehended, and I suggest we "continue with the speech," but will fully comply with law enforcement's instructions. They (the dinner s...
10:42

Forbes: The market is paying attention to the statements made by the SEC Chairman on Bitcoin at the 2026 conference, with expectations for BTC to return to $80,000 heating up

According to Forbes, Paul Atkins, the chairman of the U.S. Securities and Exchange Commission, recently reiterated the advancement of "Project Crypto" and announced that he will work with the U.S. Commodity Futures Trading Commission (CFTC) to develop a classification framework for digital assets, c...
10:42

Data: The current whale position on the Hyperliquid platform is 3.508 billion USD, with a long-short position ratio of 1.03

According to Coinglass data, the current whale holdings on the Hyperliquid platform amount to $3.508 billion, with long positions of $1.782 billion, accounting for 50.8% of the holdings, and short positions of $1.726 billion, accounting for 49.2%. The profit and loss for long positions is -$13.4769 ...
10:42

A man in the United States was sentenced to 70 months in prison for participating in a $263 million cryptocurrency scam

According to Cointelegraph, 22-year-old resident Evan Tangeman from California was sentenced to 70 months in prison on Friday for participating in a crime that involved stealing approximately $263 million in cryptocurrency from victims through social engineering scams and burglary.According to a sta...
Read more
Community
iconiconiconiconiconiconicon

Customer Support Bot：@WEEX_support_smart_Bot

VIP Services：support@weex.com