Security Vulnerability Found in Mediatek Smartphone Chip

According to ChainCatcher, Ledger's Donjon research team has demonstrated that electromagnetic fault injection (EMFI) can completely compromise a commonly used Mediatek smartphone chip, which is found in many Android phone models. This issue requires attackers to have physical access to the device, highlighting the risks faced by users storing private keys on smartphones. Ledger stated that its team examined the Mediatek Dimensity 7300 (MT6878) chip produced by TSMC. Researchers used EMFI tools to disrupt the chip's boot ROM, successfully bypassing core security checks and gaining full control of the chip, allowing arbitrary code execution at the highest privilege level (EL3). Ledger emphasized that this discovery does not affect Ledger hardware wallets. Ledger disclosed this vulnerability to Mediatek in May. Mediatek responded by stating that EMFI attacks are beyond the security scope of the MT6878 chip, which is designed for consumer products rather than financial or hardware security module applications. Mediatek also noted that devices with higher security requirements, such as encrypted hardware wallets, should include specialized defense measures. The report comes at a time when physical attacks targeting cryptocurrency users are on the rise globally.