Connect with us
DAPA Banner

Crypto World

Ledger Uncovers Security Vulnerability That Could Affect 25% of Android Phones

Published

on

Ledger Uncovers Security Vulnerability That Could Affect 25% of Android Phones

The chip vulnerability makes it possible for hackers to decrypt affected Android smartphones, and steal data — including crypto wallet private keys.

Ledger said on Wednesday, March 11, that it has discovered a vulnerability that could affect as much as 25% of Android phones, letting hackers steal users’ private keys, according to a press release shared with The Defiant.

The hardware wallet company’s in-house white-hat security team, the Donjon, has disclosed a critical vulnerability in Android smartphones powered by MediaTek chips that allows an attacker to extract user data — including wallet seed phrases and PINs — in under a minute, even when the phone is off.

In a proof-of-concept test, the Donjon plugged a Nothing CMF Phone 1 into a laptop and, within 45 seconds, was able to recover the device’s PIN, decrypt its storage, and extract seed phrases from six major crypto wallet apps: Trust Wallet, Base, Kraken Wallet, Rabby, tangem, and Phantom.

Advertisement

Before the operating system of the MediaTek-powered Android device even loads, Ledger’s security team found that an attacker can connect over USB and steal the root cryptographic keys that ensure the phone’s full-disk encryption, per the release. The phone’s data can than be fully decrypted offline.

The vulnerability could affects phones using Trustonic’s Trusted Execution Environment (TEE), the release said, including the Solana Seeker phone.

“Smartphones were never designed to be vaults,” said Charles Guillemet, Ledger’s CTO, adding:

“If your crypto sits on a phone, it’s only as safe as the weakest link in that phone’s hardware, firmware, or software.”

Following the standard 90-day responsible disclosure process, Ledger said it reported the flaw to both MediaTek and Trustonic. MediaTek confirmed it delivered a fix to affected original equipment manufacturers in January.

Advertisement

Ledger advised users of potentially affected Androids to install the latest security updates immediately.

The news comes crypto-related theft has been on the rise. As The Defiant reported, 2025 was a record year for crypto crime, with North Korea alone stealing roughly $2 billion — including the $1.5 billion Bybit hack, the largest hack on record.

But the threat isn’t limited to centralized exchanges. In December, Trust Wallet confirmed $7 million was stolen via a malicious Chrome extension update that harvested seed phrases directly from users’ browsers. Hackers have also reportedly been increasingly using AI tools and phishing-as-a-service infrastructure to increase the number of attacks.

This article was written with the assistance of AI workflows. All our stories are curated, edited and fact-checked by a human.

Advertisement

Source link

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Dmail Network To Shut Down Decentralized Email Service

Published

on

Dmail Network To Shut Down Decentralized Email Service

Decentralized email platform Dmail Network is shutting down after five years of operations, citing high infrastructure costs, weak monetization, failed funding efforts and limited token utility.

The platform said it will gradually cease all services starting May 15, and urged users to export their data before then. It said all nodes will shut down after that date, making emails and accounts inaccessible.

Dmail Network positioned itself as a Web3 communication platform focused on decentralized, wallet-based email, encrypted messaging and onchain notifications. In January 2025, DappRadar ranked Dmail second among AI DApps, with 4.9 million unique active wallets for the month.

Dmail’s closure suggests that user activity alone was not enough to sustain an infrastructure-heavy Web3 product once high operating costs, weak monetization and failed fundraising converged.

Advertisement
Source: Dmail Network

Dmail points to costs, failed fundraising and weak token use

Dmail said the economics of running a decentralized communication platform had become increasingly difficult to sustain. In its shutdown note, the company said bandwidth, storage and computing costs consumed a large share of its budget, with the expenses rising as users grew. 

The company said it explored different paid models and monetization paths but failed to find a business model users were willing to support at scale. 

Related: Big Tech firms back new x402 Foundation to advance agentic AI adoption

Dmail said that worsening market conditions added to the pressure. The team said multiple financing rounds failed, acquisition efforts fell through and funding was nearing exhaustion. It said departures among core staff left the team unable to keep maintaining its infrastructure. 

It added that the project’s token never developed a clear, large-scale use case and that its economic design failed to create a self-sustaining loop. Following the announcement, Dmail Network’s token dropped to an all-time low of $0.0002067, according to CoinGecko. 

Advertisement

Dmail joins growing list of Web3 closures

Dmail’s shutdown comes amid a recent wave of closures across Web3, as projects struggle with weak demand and funding pressures. 

On March 18, DAO tooling platform Tally said it was winding down after concluding that there was no viable market for its products. On March 24, development company Balancer Labs said it was shutting down four months after an exploit that drained over $100 million. 

Magazine: AI agents will kill the web as we know it: Animoca’s Yat Siu

Advertisement