Ledger Security Team Discloses Android Vulnerability, Potentially Allowing Theft of Wallet Mnemonics

2 hours ago

On March 11, Ledger’s in-house security research team Donjon uncovered a vulnerability in the secure boot chain of MediaTek processors. An attacker with physical access to a phone can extract encryption keys via USB before the operating system loads, decrypt device storage, and obtain the device PIN plus encrypted wallet mnemonic phrases in roughly 45 seconds. In a proof-of-concept test, the flaw successfully pulled sensitive data from wallet apps including Trust Wallet, Kraken Wallet, and Phantom. Researchers note the vulnerability may impact roughly 25% of Android devices—specifically models using MediaTek chips and the Trustonic Trusted Execution Environment (TEE). Ledger CTO Charles Guillemet emphasized smartphones were never designed to be safes; while the flaw can be patched, it highlights the inherent risk of storing keys on non-secure devices. Users are advised to update security patches as soon as possible.

Add to Favorites Download image Share x Copy link

Relevant content

Backpack is planning to conduct its TGE around March 23 and will provide further updates tomorrow.

On March 11th, Backpack CEO Armani Ferrante announced during an official Twitch livestream this evening that the token’s TGE date is tentatively set for around March 23rd. A more precise official date will be revealed tomorrow, March 12th—stay tuned to official channels for the formal update. Per data from PolyBeats monitoring, on Polymarket (the prediction platform), the probability that Backpack’s TGE will occur before December’s end has hit 100%. Meanwhile, the likelihood of the TGE happening before March wraps up has spiked sharply, now sitting at 93%.

10 minutes ago

Circle, Binance Join Mastercard's Cryptocurrency Partner Program

March 11 — Mastercard is recruiting more than 85 digital asset firms, payment providers and financial institutions to join its new global partnership program, including Circle, Binance and Gemini. The initiative aims to keep crypto payments connected to the Mastercard network while positioning stablecoins as an alternative to traditional payment rails.

10 minutes ago

Iran Warns U.S. of Sliding Into a Protracted War

**March 11 (Local Time) — Iranian Islamic Revolutionary Guard Corps (IRGC) Deputy Commander Ali Fadavi stated that no U.S. warships are currently within 700 kilometers of Iran’s surrounding waters. He claimed the U.S. Navy has “fled” the region, as Washington is well aware Iran has developed a special operation plan targeting and sinking U.S. aircraft carriers.** **Fadavi further warned the U.S. could be drawn into a long-term war of attrition — a conflict he said would lead to the total collapse of the U.S. and even the global economy. He also alleged Iranian armed forces shot down a U.S. F-15 fighter jet in southern Tehran.**

10 minutes ago

DoubleZero Launches Real-Time Market Data Delivery Platform DoubleZero Edge

On March 11, DoubleZero announced the launch of DoubleZero Edge, its new real-time market data delivery platform. Built on multicast technology, the platform delivers high-speed, real-time data to traders and market participants—offering a level playing field for validators and trading systems, similar to the infrastructure powering traditional financial trading platforms. Starting with Epoch 939, all validators connected to DoubleZero will qualify for a 5% exemption on block reward fees. Participating validators can also earn additional income by submitting shreds, with revenue generated from subscription fees paid by traders.

10 minutes ago

Anchorage Digital Makes Strategic Investment in Immunefi

March 11th, Anchorage Digital—a crypto financial services provider and the first federally chartered crypto bank in the U.S.—is making a strategic investment in Immunefi and acquiring the security infrastructure firm’s native token, IMU.

10 minutes ago

Across Proposes Temperature Check Proposal, Envisions Governance and Steward Transition

On March 11, Across Protocol put forward a temperature check proposal exploring a transition of its existing DAO and token structure to a U.S. C-Corp and equity framework. The new entity, AcrossCo, would serve as Across Protocol’s operational company under the plan. ACX token holders will have two options: convert their tokens to AcrossCo equity at a 1:1 ratio, or redeem ACX for USDC based on the average market price over a one-month window within a six-month period. Large holders may choose direct equity conversion, while smaller holders can participate via a free special purpose entity (SPE) structure.

10 minutes ago

Hot feeds

A trader profits $448K by monitoring #Binance's new listings!

2024.12.13 17:37:29

A smart #AI coin trader made $17.6M on $GOAT, $ai16z, $Fartcoin,$arc.

2025.01.05 16:05:18

When Elon Musk tweeted about Moltbook, the meme coin MOLT experienced a short-term 30% price surge, hitting a new all-time high of $114 million.

2026.01.31 18:37:29

Last week, funds have flowed into #Bitcoin, #Ethereum, and #Hyperliquid.

2024.12.16 14:48:36

A $PEPE whale that had been dormant for 600 days transferred all 2.1T $PEPE($52M) to a new address.

2024.12.14 10:35:27