Ledger researchers discover Android vulnerability that can steal wallet seed phrases in seconds

Foresight News reported, according to monitoring by The Block, that Ledger's research team has discovered a serious security vulnerability present in Android phone firmware using MediaTek processors. Attackers can extract the device's PIN code and crypto wallet private keys within approximately 45 seconds. The vulnerability exploits weaknesses in MediaTek's secure boot chain, allowing attackers to connect the phone via USB and extract the keys protecting Android's full disk encryption before the operating system loads, then decrypt the storage offline. Researchers pointed out that this vulnerability may affect about 25% of Android phones, including some manufacturers using MediaTek chips and Trustonic's Trusted Execution Environment.