Ledger Researchers Expose MediaTek Flaw Draining Crypto Wallets in Seconds
Hardware wallet manufacturer Ledger has uncovered a critical vulnerability in Android smartphones powered by MediaTek processors. The flaw allows attackers to drain cryptocurrency wallets in under a minute via USB connection, even when the device is powered off. Ledger's Donjon security team demonstrated the exploit on a Nothing CMF Phone 1, extracting sensitive data including PINs and seed phrases in just 45 seconds.
This discovery highlights the escalating risks for Android users in the crypto space. With millions of devices potentially affected, the vulnerability could expose wallet credentials to malicious actors. The findings underscore the importance of hardware-level security for digital asset storage as software-based protections prove increasingly fragile against sophisticated attacks.