Investigadores líderes han descubierto una vulnerabilidad en un determinado chipset de Android, poniendo a las carteras Web3 móviles en riesgo de ataques físicos.

By: theblockbeats.news|2025/12/04 22:55:07
0
Compartir
copy
bl0ckbl0ck

BlockBeats News, 4 de diciembre. Según The Block, Ledger ha declarado que una vulnerabilidad recientemente descubierta en un chip procesador de smartphones Android ampliamente utilizado podría representar un riesgo para los usuarios que dependen de las billeteras Web3. Si un atacante accede físicamente al dispositivo, podría explotar una inyección de fallas de hardware para evitar las comprobaciones de seguridad básicas y tomar el control del chip. Si bien este descubrimiento no afecta a las carteras de hardware de Ledger, destaca los riesgos de depender únicamente de una cartera caliente de teléfono inteligente para proteger los activos digitales. El equipo probó el chip Dimensity 7300 de MediaTek fabricado por TSMC para determinar si la inyección de fallas electromagnéticas podría interrumpir las primeras etapas del proceso de arranque.

Usando herramientas de código abierto, inyectaron pulsos electromagnéticos oportunos para interferir con la ROM de arranque del chip, extraer su información de tiempo de ejecución e identificar la ruta de ataque. Posteriormente, el equipo evitó los mecanismos de filtrado de comandos de escritura del chip, sobrescribió la dirección de retorno en la pila de ROM de arranque y ejecutó código arbitrario en EL3 (el nivel de privilegio más alto del procesador), con el ataque repetible en cuestión de minutos. Ledger afirmó que incluso los chips de teléfonos inteligentes más avanzados son vulnerables a ataques físicos y no son adecuados para salvaguardar las claves privadas, enfatizando la criticidad de los elementos seguros en la autocustodia de los activos digitales. La vulnerabilidad fue reportada a MediaTek en mayo, y los fabricantes afectados han sido notificados.

Precio de --

--

También te puede gustar

I tested with $10,000: zero wear and tear, annualized 8%, and can earn points (with complete tutorial + screenshots)

Perps DEX newcomer StandX launches native stablecoin DUSD, achieving a real APY of 8.46% with its innovative three-tier yield mechanism, breaking the 3% traditional stablecoin interest rate ceiling.

Blockchain Capital Partner: The structure of on-chain dual-layer capital is still in the early stages of value discovery

How can the on-chain economy build a capital structure that promotes open innovation while also considering institutional scale?

Secured over $60 million in funding from Dragonfly, Sequoia, and others, learn about the on-chain derivatives protocol Variational | CryptoSeed

What is the difference with Hyperliquid?

The financial changes under the new SEC regulations: Opportunities and regulatory red lines behind "tokenized stocks"

In-depth analysis of "tokenized stocks": The SEC's advancement of an innovation exemption framework has sparked heated discussions, revealing the real risks behind third-party "synthetic asset" certificates and 24/7 trading.

SpaceX officially submitted its prospectus, unveiling the largest IPO in history

SpaceX's public market debut could take place as early as June, making it the first in a series of giant IPOs from AI companies, with OpenAI and Anthropic also waiting for the right moment.

Insiders: DeepSeek is forming a Harness team to compete with Claude Code

DeepSeek Code is coming.
Tradeá para ganar
Tradeá · Ganá · ¡Tenés descuentos!
Tradeá para ganarGanhe WXT

Contenido

Monedas populares

Últimas noticias cripto

23:42

Data: Hyperliquid ETF has seen a net inflow for 8 consecutive days, accumulating nearly 70 million USD

Hyperliquid ETF had a net inflow of $16,100,000 yesterday, with BHYP having a net inflow of $8,400,000 and THYP a net inflow of $7,700,000. Hyperliquid ETF has achieved net inflows for 8 consecutive trading days, with a total net inflow close to $7,000,000.
23:42

Pyth Network's free product Pyth Core has resumed normal operation at 9 PM

Pyth Network's free product Pyth Core experienced downtime this morning (UTC time) and has resumed normal operation at 13:00 UTC (21:00 Beijing time). The paid product Pyth Pro was not affected, and platforms using Pyth Pro, such as Kalshi, Coinbase, and LMAX, continued to operate without interrupti...
23:42

The Polymarket private key leak incident has frozen $164,000 in funds

According to Polymarket's Vice President of Engineering Josh Stevens, with the assistance of ZachXBT, BitcoinVN, and ChangeNOW, $164,000 in funds have been frozen in the Polymarket private key leak incident, accounting for approximately 28.6% of the total amount transferred, which is $573,200. Josh ...
23:42

The Bitwise Hyperliquid ETF reached an asset management scale of 30.5 million USD in five days since its listing, with a net inflow of 26.9 million USD

The Bitwise Hyperliquid ETF (BHYP) reached an asset management scale of $30.5 million within the first five trading days after its listing, with a net inflow of $26.9 million.
23:42

Despite regulatory uncertainties, prediction market platforms continue to expand and raise funds

Despite ongoing disputes between the U.S. federal government and several state governments over the regulatory authority of prediction markets, platforms related to prediction markets such as Kalshi, Polymarket, Robinhood, and Coinbase continue to increase their business investments.Reports indicate...
Más información
Comunidad
iconiconiconiconiconicon
Atención al cliente:@weikecs
Cooperación comercial:@weikecs
Trading cuantitativo y MM:bd@weex.com
Programa VIP:support@weex.com