Connect with us

Crypto World

MediaTek chip flaw exposed crypto wallets and passwords without booting Android

Published

on

MediaTek chip flaw exposed crypto wallets and passwords without booting Android

Security researchers at Ledger have discovered a major flaw in some Android smartphone chips that lets an attacker siphon encrypted user data like passwords and private keys in a matter of seconds using just a USB connection.

Summary

  • Ledger’s Donjon security team discovered a vulnerability in MediaTek and Trustonic TEE chips that could allow attackers to extract encrypted data from Android phones in under 45 seconds.
  • The exploit bypasses the secure boot chain before Android loads, allowing attackers to recover the device PIN, decrypt storage and extract seed phrases from popular wallets.

The vulnerability was first spotted in January by Ledger’s internal security research team, Donjon, Ledger Chief Technology Officer Charles Guillemet wrote in a recent X post

According to Guillemet, the vulnerability affected smartphones powered by MediaTek and Trustonic’s TEE processors. 

Advertisement

MediaTek has since issued a security patch to fix the issue; users who have not installed the latest security updates on their devices may still remain at risk.

White hat hackers were able to penetrate a smartphone from manufacturer Nothing, notably the company’s CMF 1 phone, in under 45 seconds using a laptop.

“Without ever even booting into Android, the exploit automatically recovered the phone’s PIN, decrypted its storage, and extracted the seed phrases from the most popular software wallets,” Guillemet said.

Advertisement

This puts software wallets like Trust Wallet, Base, Kraken Wallet, Rabby, Tangem’s mobile wallet, and Phantom at risk, as the seed phrases and other sensitive credentials are stored locally on the device.

In their report, researchers noted that the vulnerability allowed attackers with physical access to bypass the phone’s security protections through the secure boot chain, which is a core startup process that runs at the highest privilege level before the operating system loads. Subsequently, the attacker can recover the device’s PIN, decrypt its storage, and extract the information.

“This has the potential to affect millions of Android smartphones,” Guillemet added.

Estimates suggest nearly 36 million people manage digital assets on their smartphones, which means that if attackers manage to exploit a vulnerability, it could put a large number of wallets at risk. 

Advertisement

Guillemet advised using devices with dedicated secure elements that are built for key protection and can safeguard sensitive data even under physical attack.

The Ledger team also detailed a separate attack it tested on MediaTek Dimensity 7300 processors (MT6878) in December, where the team used electromagnetic fault injection to disrupt the chip’s boot process. It allowed them to bypass security checks and ultimately gain full control over the smartphone at the highest privilege level.

As covered by crypto.news on several occasions, crypto users have been targeted across multiple platforms, including iOS, macOS, and Windows.

While Android devices are often easier to compromise due to Google’s more open ecosystem and flexible app distribution model, Apple’s iOS devices have also developed unique attack vectors that target users through malicious frameworks embedded inside otherwise legitimate apps.

Advertisement

For instance, last year, security researchers discovered a malicious app that infiltrated both iOS and Android devices by requesting file access and subsequently scanning device storage to extract wallet data. Although not as technically severe in nature as hardware-level exploits, the scheme still managed to steal more than $1.8 million in cryptocurrency.

Around the same time, Kaspersky flagged a malware campaign that spread through malicious software development kits embedded in seemingly harmless apps.

Source link

Advertisement
Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Crypto World

Crypto Miners Must Put Bitcoin to Work to Survive

Published

on

Crypto Breaking News

Bitcoin miners are facing a tougher profit environment as the current market cycle yields thinner returns and higher capital pressures. Market-maker Wintermute outlines a path forward that centers on strategic treasury management and new revenue streams, such as hosting AI workloads, rather than relying solely on traditional mining economics. The firm notes that miners built out substantial, low-cost energy infrastructure over years in favorable jurisdictions, yet are now sitting on assets that the AI industry urgently needs. The narrative around consolidation and pivot is reinforced by public issuer activity, including MARA Holdings’ recent securities filing to signal a shift toward AI opportunities, while industry peers have already begun trimming BTC holdings to fund diversification. These developments build a picture of an industry recalibrating its business model in real time.

Key takeaways

  • Miners collectively hold roughly 1% of the total BTC supply, a validation of the HODL-era mindset that Wintermute describes as a “legacy” asset-management posture rather than a productive treasury engine.
  • Active treasury management—using derivatives, covered calls, and cash-secured puts—could unlock new yield streams for miners beyond simple price appreciation of BTC.
  • The AI pivot is economically compelling but requires substantial capital expenditure and operational retooling, making it a drastic shift from a traditional, energy-intensive mining model.
  • Bitcoin’s market cycle has underperformed relative to prior halvings, failing to generate the two-times price return observed in earlier cycles and pressuring margins amid rising energy costs.
  • Public miners have started reallocation moves, with some selling BTC to fund AI or infrastructure upgrades, illustrating a broader trend of capital reallocation within the sector.
  • Despite the pressures, Wintermute argues the current shakeup could drive efficiency and resilience in the mining sector over the longer term, potentially yielding a structural edge for operators that translate BTC into working capital.

Tickers mentioned: $BTC, $MARA

Sentiment: Neutral

Price impact: Negative. Margin pressure from energy costs and lower revenue per BTC mined is prompting asset reallocation and cost-cutting measures across the sector.

Trading idea (Not Financial Advice): Hold. The sector is in flux as miners test new revenue streams, but the outcome hinges on broader crypto prices and the pace of AI-adoption-related deployments.

Advertisement

Market context: The shift mirrors a broader macro backdrop where liquidity conditions and energy costs compress traditional mining economics, prompting operators to explore active treasury management and AI-hosting opportunities as potential long-horizon diversifications. The dynamic sits at the intersection of crypto-cycle mechanics, energy markets, and the growth of AI compute demand behind industrial-scale data centers.

Why it matters

The underlying message from Wintermute is that the current cycle is forcing a re-evaluation of how Bitcoin miners generate and protect value. If the market continues to deliver limited price appreciation and the difficulty of mining remains a fixed cost anchor, the incentive to extract yield from BTC holdings through active treasury strategies grows stronger. This could reframe Bitcoin as a working asset for miners rather than a passive reserve, effectively turning balance sheets into sources of ongoing cash flow rather than static exposure to price swings.

On one hand, the potential transition toward AI hosting and AI-era data-center utilization reflects a natural expansion of the sector beyond core cryptocurrency mining. The logic is straightforward: mining facilities already sit on scalable, energy-intensive infrastructure that can be repurposed to service AI workloads, HPC needs, and other compute-intensive applications. The March 3 SEC filing by MARA Holdings is emblematic of this shift, signaling intent to pivot toward technology-adjacent opportunities rather than relying solely on BTC production. Several peers have walked similar paths, as evidenced by industry reporting on miners’ asset disposition and strategic pivots.

However, the path is far from simple. Wintermute characterizes mining as a “structurally rigid” business model, which means that even if yield opportunities emerge, the transition requires not just capital but careful risk management, talent, and a new operating playbook. The idea of monetizing market risk through derivatives structures or using cash-secured puts and covered calls to generate consistent income contrasts with the historical emphasis on maximizing hash rate and energy efficiency. In a market where the fee stream is episodic and not structurally supportive, miners may need to treat BTC holdings as working capital rather than reserves available only for sale during favorable price environments.

Advertisement

The industry’s recent activity — including notable BTC sales by publicly listed miners to fund AI-related upgrades or diversification — underscores a pragmatic approach to capital allocation. Reports noting that more than 15,000 BTC have been sold since October illustrate the pressure to finance strategic shifts in a regime where revenue from mining, even with improved efficiency, has not kept pace with the halving-driven revenue reductions. In this context, the oil-and-gas-like discipline of treasury management could become a core competitive differentiator for those miners that adopt a more dynamic, yield-focused posture.

Wintermute’s assessment also highlights a broader ecosystem transformation: the AI demand for energy-hungry compute clusters could become a new anchor for miners who can redeploy their scale and marginal energy advantages. The AI-hosting pathway aligns with other industry narratives about high-performance computing (HPC) adoption among mining and big-tech operators. As industry players explore this convergence, the conversation is no longer solely about Bitcoin price dynamics but also about how crypto infrastructure owners can monetize their balance sheets in a multi-asset compute economy.

Ultimately, the cycle’s current stage represents a healthy shakeup that may yield a more efficient and resilient mining sector. The shifts could reduce the reliance on episodic price-driven upside and instead foster a more predictable set of cash flows through active treasury management and serviceable AI compute capacity. The balance between capital efficiency and the risk borne by large capex programs will determine which operators emerge with durable competitive advantages and which retreat to simpler, more traditional models.

What to watch next

  • Updates on MARA Holdings’ SEC filing and progress toward AI-related capital deployment in 2026.
  • Public miners’ ongoing BTC disposition patterns and how those sales correlate with AI or HPC investments.
  • Adoption of derivatives-based yield strategies among miners and the development of crypto-native treasury-management tools.
  • Any new AI-hosting deployments or partnerships announced by mining operators or their affiliates.
  • Market data on energy costs and hash-rate dynamics that could impact the pace of a potential structural upgrade in mining economics.

Sources & verification

  • Wintermute, Epoch 5—A structurally different BTC mining cycle (post on insights site).
  • MARA Holdings SEC filing on March 3 signaling intent to pivot to AI opportunities.
  • Cointelegraph reports on miners selling BTC activities, including CleanSpark’s February BTC proceeds article.
  • Cointelegraph coverage of miners unwinding BTC treasuries and margin pressure in the sector.

Mining sector recalibrates as AI hosting beckons and treasury yields gain attention

Bitcoin (CRYPTO: BTC) miners built extensive, low-cost energy footprints in favorable markets over the past years, but the current cycle is challenging those economics. Wintermute’s analysis emphasizes that the sector’s large-scale infrastructure and capital commitments were designed for a different price and reward regime. With the two-times price return benchmark not materializing this time around, and energy costs squeezing margins, the incentive to reallocate capital toward new, higher-growth opportunities has risen. The company argues that the “full toolkit of treasury management remains largely untapped” and that miners who treat their BTC holdings as working capital could gain a lasting edge into the next halving.

The narrative is not merely about abandoning mining; it’s about augmenting it with strategic treasury management and new lines of business. The possibility of monetizing market exposure through structured products, coupled with passive avenues like lending, offers a multi-pronged approach to yield that was less discussed in earlier cycles. Wintermute’s stance is that active balance sheet management could become a central driver of profitability as the industry navigates lower marginal returns per mined BTC and episodic fee revenue. This is particularly relevant for operators with scale and access to cheap energy—the exact mix that could unlock AI-hosting use cases and HPC workloads as long-run growth vectors.

Advertisement

In that sense, the MARA Holdings filing signals a broader industry tilt toward capital reallocation, where AI and data-center capabilities may become the defining growth engines for crypto miners. The market has already observed related movements: several miners have divested BTC holdings to fund expansion or strategic pivots, underscoring a pragmatic approach to capital management in a market where steady cash flow matters more than speculative price surges alone. As these shifts unfold, the question becomes not only how much BTC is held or sold, but how effectively balance sheets can be transformed into operating assets that generate durable yields in a new compute-driven economy.

Industry observers will be watching whether these efforts translate into meaningful margin stabilization and clearer paths to profitability for the next cycle. If the AI-hosting pathway proves scalable and the associated demand for energy-intensive compute remains robust, there could be a meaningful rebalancing of risk and reward for miners who reposition their assets. In the near term, the sector’s performance will likely hinge on macro price movements for BTC, energy price trajectories, and the pace at which miners implement treasury-management strategies and AI-centric expansions. As Wintermute notes, this could represent the beginning of a structural shift rather than a temporary reallocation, with the potential to redefine miners’ role in a broader crypto and AI-enabled economy.

Risk & affiliate notice: Crypto assets are volatile and capital is at risk. This article may contain affiliate links. Read full disclosure

Advertisement

Source link

Continue Reading

Crypto World

What True Self-Custody Actually Requires

Published

on

What True Self-Custody Actually Requires

New research examines how investor behavior, wallet architectures, and operational security practices determine what genuine self-custody requires in 2026.

The foundational promise of cryptocurrency is decentralized, sovereign ownership. But this promise has run into a far more sobering reality, as a lot of funds held on centralized exchanges have been lost over the years. Users have learned the same lesson in different forms: Not your keys, not your coins.

Cointelegraph Research’s latest report, produced in collaboration with Trezor, the original hardware wallet, and titled “The Future of Self-Custody: Turning Ownership Into Security,” examines how this realization has reshaped investor behavior. Drawing on survey responses, post-mortem analyses of exchange failures, and a breakdown of modern wallet architectures, the report explains why self-custody should be a defining topic for crypto security in 2026.

Read the full research report to see how Cointelegraph Research translates what genuine self-custody security requires in 2026

Advertisement

Survey data shows a decisive erosion of trust in centralized exchanges. A majority of respondents now trust exchanges less than they did a year earlier, with the memory of the FTX collapse remaining a key psychological driver. Even regulatory frameworks such as MiCA, which improve custodial oversight, do not alter the underlying dynamic. Users increasingly recognize that custodial access can be restricted or withdrawn by decisions outside of their control. Migration into self-custody has therefore become a form of risk management.

Once assets move into self-custody, security no longer depends on institutional controls but on the user’s operational discipline. The survey shows that most users converge on a simple architecture, yet many still misunderstand that while hardware wallets meaningfully reduce the risk of remote compromise, they do not eliminate losses caused by the user.  

Security, Trezor, Hardware Wallet, Cryptocurrency Exchange, Cointelegraph Research Reports

As a result, the report shifts the focus from device choice to behavior: how transactions are verified, how recovery material is stored, and how users model real-world threats.

Security, Trezor, Hardware Wallet, Cryptocurrency Exchange, Cointelegraph Research Reports

The central conclusion is that turning ownership into security is not achieved through regulation, branding, or devices alone. It is a behavioral practice that depends on disciplined use of devices and an accurate understanding of what custody does and does not protect against.

Read the full report to understand why self-custody is important

This article does not contain investment advice or recommendations. Every investment and trading move involves risk, and readers should conduct their own research when making a decision. This article is for general information purposes and is not intended to be and should not be taken as, legal, tax, investment, financial, or other advice. The views, thoughts, and opinions expressed here are the author’s alone and do not necessarily reflect or represent the views and opinions of Cointelegraph. Cointelegraph does not endorse the content of this article nor any product mentioned herein. Readers should do their own research before taking any action related to any product or company mentioned and carry full responsibility for their decisions. While we strive to provide accurate and timely information, Cointelegraph does not guarantee the accuracy, completeness, or reliability of any information in this article. This article may contain forward-looking statements that are subject to risks and uncertainties. Cointelegraph will not be liable for any loss or damage arising from your reliance on this information.

Advertisement

Source link

Continue Reading

Crypto World

Playnance Announces G Coin Launch Ahead of March 18 Token Generation Event

Published

on

Playnance Announces G Coin Launch Ahead of March 18 Token Generation Event

[PRESS RELEASE – Tel Aviv, Israel, March 12th, 2026]

Playnance, a Web3 infrastructure company focused on blockchain-based digital entertainment platforms, is set to launch G Coin on March 18th, the utility token powering activity across its ecosystem of on-chain gaming, prediction markets, and interactive financial platforms.

Unlike many token launches that precede product adoption, G Coin enters the market as part of a live ecosystem already processing significant daily activity. According to Playnance’s public tracker, the token currently has more than 200,000 holders, with approximately 13 billion G Coin distributed during the presale phase and an estimated market capitalization of around $38 million ahead of its Token Generation Event.

G Coin functions as the unified economic layer of the Playnance ecosystem, facilitating gameplay activity, predictions, settlements, rewards, and other forms of participation across the network’s platforms. The token operates on PlayBlock, Playnance’s blockchain infrastructure, which enables fast, gasless interactions while maintaining non-custodial ownership and on-chain transparency.

Advertisement

The broader Playnance ecosystem operates at scale across a network of digital entertainment platforms. The infrastructure supports more than 300,000 registered accounts, integrates with over 30 game studios, and runs more than 10,000 on-chain games. Across the network, platforms process approximately 2 million on-chain transactions per day and support interaction with more than 2.5 million sports events annually. Together, these platforms form a high-volume on-chain environment where millions of daily interactions are powered by G Coin across gaming, sports events, and financial prediction markets.

“On March 18, G Coin will enter the market with real adoption already in place,” said Pini Peter, CEO of Playnance. “With more than 200,000 holders and millions of daily on-chain interactions, G Coin introduces a usage-driven token economy designed to grow alongside its expanding global community. There are many other surprises on the way to take the entertainment world to the next level, stay tuned”

Recent ecosystem developments have reflected continued activity growth ahead of the token launch. Earlier this year, Playnance reported that its “Be The Boss” program surpassed $2 million in real cash payouts to participants, while the broader ecosystem generated more than $5.3 million in total revenue.

G Coin operates within a fixed supply model capped at 77 billion tokens, with no future minting. Supply management is handled through a structured lock and release mechanism designed to moderate circulating supply. Tokens lost through gameplay are locked for 12 months before returning to circulation according to their original loss date, while unsold tokens at the Token Generation Event are subject to a 12-month cliff followed by a 24-month linear vesting schedule.

With the launch of G Coin, Playnance formalizes the economic layer supporting its digital entertainment infrastructure, connecting gameplay, sports events, prediction markets, and partner platforms within a single on-chain ecosystem.

Advertisement

About Playnance

Founded in 2020, Playnance is a Web3 infrastructure company developing live, non-custodial, on-chain products designed to onboard mainstream Web2 users into blockchain environments. The company develops consumer-facing platforms built on shared wallet systems and high-volume on-chain execution, currently processing approximately 2 million transactions per day. Playnance focuses on reducing friction between user experience and blockchain infrastructure by abstracting complexity while maintaining full on-chain transparency and non-custodial architecture.

SPECIAL OFFER (Exclusive)

Binance Free $600 (CryptoPotato Exclusive): Use this link to register a new account and receive $600 exclusive welcome offer on Binance (full details).

LIMITED OFFER for CryptoPotato readers at Bybit: Use this link to register and open a $500 FREE position on any coin!

Advertisement

Source link

Continue Reading

Crypto World

65% of Bitcoin Supply Not Vulnerable to Quantum Threat: Ark Invest

Published

on

65% of Bitcoin Supply Not Vulnerable to Quantum Threat: Ark Invest

US investment manager Ark Invest claims that the lion’s share of the Bitcoin supply is already safe from the quantum computing breakthrough, leaving ample warning signals for builders to quantum-proof the rest of the supply.

Around 65.4% of the Bitcoin (BTC) supply is not vulnerable to the threat of a quantum computing breakthrough, but about 34.6% of the BTC supply remains at risk, according to a Wednesday white paper published by Ark Invest and Bitcoin-focused financial services company Unchained.

This includes around 5 million BTC, or 25% of the total supply, assumed migratable due to address re-use, and 1.7 million BTC, or 8.6% of the supply, assumed lost in P2PK (Pay-to- Public-Key) addresses, the earliest form of transaction script on the Bitcoin blockchain, which locked funds directly to public keys. Another 200,000 BTC (around 1%) is assumed to be migratable due to the address type P2TR (Pay-to-Taproot).

This supply would be vulnerable to quantum theft if quantum computers can break Bitcoin’s elliptic curve cryptography (ECC), which would require about 2,330 logical qubits and tens of millions to billions of quantum gates, the report argued.

Advertisement

“Even so, their practical feasibility would require quantum systems to reach performance levels that our research suggests will take much time to achieve.”

Source: Ark Invest, David Puell

The paper’s estimates are far broader than those in a February CoinShares analysis, which said the realistically market-relevant portion of quantum-vulnerable Bitcoin was about 10,200 BTC, or roughly 0.05% of supply, even though legacy P2PK addresses account for a much larger theoretical exposure.

Separately, the first quantum computer facility with one million physical qubits (the equivalent of tens of billions of typical computers) is expected to be finished in 2027 by Chicago-based PsiQuantum, which raised $1 billion from BlackRock-linked funds.

Quantum breakthrough remains “long-term risk” for Bitcoin

Ark’s white paper argues that quantum risks will evolve over an extended period with “many intermediate warning signals” rather than an abrupt single point of failure. 

Related: Cathie Wood says ARK’s $1.5M Bitcoin bull price hasn’t changed as markets eye rally

Quantum breakthrough remains a “long-term risk,” rather than an imminent threat to the Bitcoin network, which gives the community time to “research and make plans for protecting the network” against the protracted development of quantum capabilities, the paper states.

Advertisement

Ark Invest foresees five stages for quantum computing advancements, but said that only the final stage of advancements will break ECC quicker than Bitcoin’s 10-minute block time.

Bitcoin held in quantum-vulnerable addresses should not be at risk until stage 3, when a quantum computer can break the 256-bit ECC key.

The white paper said that the first public key may be broken in the mid-2030s, citing a consensus target by companies including Google, IBM and Microsoft.

Stages of quantum computing development. Source: Ark Invest

Bitcoin must implement quantum-safe address formats despite governance challenge

Quantum computers will inevitably reach stage 4 and become a threat to the Bitcoin network, which means that Bitcoin must implement a quantum-safe address format, the paper argues.

The measure will require the integration of post-quantum cryptography (PQC) into Bitcoin, such as the ML-DSA lattice-based signature scheme and the SLH-DSA hash-based signature. 

Advertisement

“Those standards give us confidence in the capabilities of post-quantum cryptography,” wrote Ark Invest, cautioning that upgrading to PQC on the consensus level will be more difficult due to Bitcoin’s decentralized governance structure, which requires the majority of network participants to agree to a soft fork.

The paper said Bitcoin will eventually need quantum-safe address formats and, over time, post-quantum cryptography. One draft path under discussion, BIP-360, proposes a Pay-to-Merkle-Root output type designed to reduce long-exposure quantum risk by removing Taproot’s key-path vulnerability, though it does not itself add post-quantum digital signatures.

Related: Whale’s $9B Bitcoin sale was not due to quantum concerns: Galaxy Digital

However, BIP-360 is not the final solution to Bitcoin’s quantum threat, according to Chris Tam, president and head of quantum innovation at BTQ Technologies.

Advertisement

“The proposal introduces a new address format but critically does not include post-quantum digital signatures, which are essential for any meaningful long-term defense against quantum attacks,” he told Cointelegraph.

Magazine: Bitcoin may take 7 years to upgrade to post-quantum: BIP-360 co-author