Think your smartphone is the digital equivalent of Fort Knox? Well, the Ledger Donjon research team just poured a bucket of ice water on that confidence. If you use Android with a MediaTek processor, your savings could be at the hacker’s fingertips in literally less than a minute.
A minute that costs a fortune
Security experts from Ledger’s internal unit have identified a critical vulnerability in the firmware of phones using MediaTek chips. Taking advantage of the weakness in the so-called secure boot chain)the attacker is able to extract the device’s PIN code and private keys to cryptocurrency wallets.
The whole operation sounds like a scenario from a spy movie, but it is terrifyingly simple to implement. The attacker only needs physical access to your Android phone. Just connect your device via USB before the operating system loads. This way, a hacker can extract the cryptographic keys protecting Android’s full disk encryption and then decrypt all content offline. Effect? Your crypto disappears before you can say “HODL!”
Every fourth phone targeted
The scale of the problem is not marginal. It is estimated that the vulnerability may affect up to 25% of all Android smartphones. We are talking about models using MediaTek chips and the trusted manufacturer’s environment (TEE) from Trustonic. These are millions of devices that are carried in the pockets of millions of people every day, who trust that their digital assets are safe there.
Charles Guillemet, Ledger’s CTO, makes it clear:
This research proves what we have long warned about: smartphones were never designed to be safes. While the vulnerability can be patched, it highlights the challenge of storing secrets on devices that are not dedicated to security. If your crypto is sitting on your phone, it is only as secure as the weakest link in the hardware, firmware or system
Leaky Android is just the beginning
Chainalysis’s data for the full year is even more grim: losses from cryptocurrency theft exceeded $3.41 billion. Worse still, the number of hacks into personal wallets is increasing dramatically. In 2022, they accounted for just 7.3% of the total value stolen, while in 2024 this rate jumped to 44%, affecting over 158,000 cases.
The conclusion is simple – if you take your investments seriously, stop trusting the device you use to order pizza. Updating the software is the absolute minimum, but only a cold wallet gives real peace of mind.
