Unpatchable MediaTek Chip Flaw Exposes Crypto Users to Theft

Ledger found an unpatchable flaw in MediaTek's Dimensity 7300 chip, allowing attackers to take full control of affected smartphones and access private keys, posing a major risk to crypto users.

Ledger's security researchers have uncovered a critical, unpatchable vulnerability in the MediaTek Dimensity 7300 (MT6878) smartphone chip, which is used in devices such as the Solana Seeker. The flaw resides in the chip's boot ROM and can be exploited using electromagnetic fault injection (EMFI) attacks. By applying precisely timed electromagnetic pulses during the device's startup, attackers can bypass all security barriers and gain full control over the smartphone, including access to sensitive data like private keys. The vulnerability is inherent to the chip's hardware design, making it impossible to fix through software updates. Although each attack attempt has a low success rate (0.1% to 1%), repeated tries can lead to a successful exploit within minutes. MediaTek responded that the chip was intended for general consumer use and not for high-security applications. Ledger emphasized that this discovery highlights the risks of using standard consumer chips for securing crypto assets and underscores the importance of dedicated hardware wallets for protecting digital assets.