Episode Details

Ledgers security team discovered a critical flaw in MediaTeks secure boot system, allowing attackers to steal crypto wallet seed phrases using a USB cable and software. The vulnerability affected about 25% of Android devices using Trustonics trusted execution environment. Ledger demonstrated the hack on a Nothing CMF Phone, compromising it in just 45 seconds. The issue could have exposed millions of users funds, but MediaTek patched it on January 5th. Ledger warns that smartphones arent designed for top-tier security, advocating for dedicated secure elements to keep keys isolated during physical attacks.

Support the show:
Get a discount at https://solipillow.com/discount/dnn.

Advertise on DNN:
advertise@thednn.ai

This is an automated, high-level news summary based on public reporting.
Report issues to feedback@thednn.ai.

View sources & latest updates:
https://sources.thednn.ai/e636679a38181de0