Ledger is sounding the alarm: a dangerous vulnerability has been discovered in popular MediaTek Dimensity 7300 chips, jeopardizing crypto assets.
Imagine that your colleague is a user of a cryptocurrency wallet installed on a smartphone with a MediaTek Dimensity 7300 chip.
Step 1: Physical access
The attacker gains physical access to the phone, for example, for a few minutes while the colleague is away.
Step 2: Electromagnetic injection
Using specialized equipment (for example, open tools like Silicon Toaster & Scaffold board), the hacker conducts an electromagnetic attack at the moment the device is powered on. The goal is to disrupt the chip's logic and bypass the protection located in the boot ROM.
Step 3: Full control
The attack gives the hacker full control over the device, allowing access to the highest level of privileges in the ARM architecture. According to Ledger researchers, this can be done in a matter of minutes.
Step 4: Extracting private keys
Since the attacker has full control, they can extract the private keys stored in the mobile crypto wallet. These keys are the only irrefutable proof of ownership of the cryptocurrency.
Step 5: Transfer of assets
Having private keys, a hacker can transfer all cryptocurrency, for example, $BTC to their wallet, leaving the colleague without assets.
What does this mean?
❌ The problem lies within the chip's hardware itself, so it cannot be resolved with an update.
📱 All devices with Dimensity 7300 are vulnerable, including the new Solana Seeker, which is positioned as a crypto smartphone.
🗣️ MediaTek believes that since the chip is a consumer, rather than a financial component, such attacks are not targeted at it. This essentially shifts the responsibility for security onto manufacturers creating crypto-oriented devices.
How to protect yourself?
Ledger insists that the only reliable protection against such attacks at the hardware level is the use of hardware crypto wallets that have specialized secure elements for storing private keys.
#Кібербезпека #Cryptocurrency #Bitcoin #Android #Vulnerability #MediaTek #Security #Hacking #CryptoWallet
