MediaTek Chip Vulnerability Threatens Crypto Wallets on a Quarter of Android Smartphones

A newly identified security flaw in MediaTek processors threatens the safety of crypto wallets on approximately 25% of Android smartphones. Ledger's security team, known as Donjon, uncovered this vulnerability, which allows attackers to extract sensitive information, including PIN codes and private keys, in under a minute.

The vulnerability stems from issues with the secure boot mechanism of the processors. To exploit this flaw, an attacker needs physical access to the smartphone, connecting it via USB before the OS loads to extract disk encryption keys and access data offline.

Devices using MediaTek processors that incorporate the Trustonic trusted execution environment are particularly at risk. Ledger's CTO, Charles Guillemet, highlighted that smartphones were never designed for secure storage and urged users to ensure they have the latest security updates installed.

“If your cryptocurrency is stored on your phone, the level of asset protection is limited by the reliability of the weakest link in the hardware or software,” Guillemet stated.

The threat of wallet attacks remains significant in the crypto industry. TRM Labs reported that in the first half of 2025, over 80% of stolen funds, totaling $2.1 billion, were attributed to the theft of private keys and seed phrases.

It is worth noting that Ledger and Trezor launched next-generation devices in October 2025, possibly in response to such threats.