Android Chip Vulnerability Poses Risk to Web3 Wallets, Researchers Warn

According to Foresight News, researchers at Ledger have identified a vulnerability in Android chips that could lead to devices being fully controlled, posing a risk to smartphone-based Web3 wallets from physical attacks. The Donjon research team at Ledger discovered that hardware fault injection can bypass core security checks and take complete control of the chip. The company emphasized that this finding does not affect Ledger hardware wallets but highlights the risks of relying solely on smartphone hot wallets for digital asset protection. The Donjon team detailed in their report how they detected the vulnerability in MediaTek's Dimensity 7300 (MT6878) chip, which is widely used in many Android consumer phones. Ledger stated that the research confirms that even the most advanced smartphone chips remain susceptible to physical attacks, making them unsuitable for safeguarding private keys. The vulnerability was disclosed to MediaTek in May. Ledger noted that MediaTek has responded positively and has informed affected manufacturers.