Scan to download
BTC $75,468.89 +1.56%
ETH $2,353.61 +0.98%
BNB $632.82 +2.16%
XRP $1.44 +2.71%
SOL $87.99 +3.58%
TRX $0.3242 -0.79%
DOGE $0.0984 +2.52%
ADA $0.2566 +3.68%
BCH $449.19 +2.20%
LINK $9.52 +3.06%
HYPE $43.56 -3.24%
AAVE $115.99 +9.49%
SUI $0.9926 +2.65%
XLM $0.1687 +5.27%
ZEC $331.93 -3.82%
BTC $75,468.89 +1.56%
ETH $2,353.61 +0.98%
BNB $632.82 +2.16%
XRP $1.44 +2.71%
SOL $87.99 +3.58%
TRX $0.3242 -0.79%
DOGE $0.0984 +2.52%
ADA $0.2566 +3.68%
BCH $449.19 +2.20%
LINK $9.52 +3.06%
HYPE $43.56 -3.24%
AAVE $115.99 +9.49%
SUI $0.9926 +2.65%
XLM $0.1687 +5.27%
ZEC $331.93 -3.82%

roi

The Ledger security team discovered an Android vulnerability that can extract cryptocurrency wallet recovery phrases in 45 seconds

According to The Block, Ledger's security research team Donjon has discovered a vulnerability in the secure boot chain of MediaTek processors, allowing attackers to extract encryption keys via USB connection before the operating system loads, provided they have physical access to the phone. This could enable them to decrypt device storage and obtain the device PIN code and encrypted wallet mnemonic within approximately 45 seconds.In proof-of-concept tests, the vulnerability successfully extracted sensitive data from wallet applications such as Trust Wallet, Kraken Wallet, and Phantom. Researchers indicate that this vulnerability may affect about 25% of Android phones, involving models that use MediaTek chips and Trustonic's Trusted Execution Environment. Ledger's Chief Technology Officer Charles Guillemet stated that smartphones were never designed to be vaults. Although the vulnerability can be patched, it highlights the inherent risks of storing keys on non-secure devices, and users are advised to update security patches as soon as possible.According to data from TRM Labs, over 80% of the $2.1 billion in stolen crypto assets in the first half of 2025 stemmed from infrastructure attacks such as private key theft, mnemonic theft, and front-end hijacking. Chainalysis data shows that losses from crypto asset theft exceeded $3.41 billion in 2024, with the proportion of stolen personal wallets rising from 7.3% in 2022 to 44% in 2024.

Mysterious account makes precise bets on airstrikes against Iran, Trump camp embroiled in "insider trading" allegations

According to Jinshi reports, last weekend, due to the closure of global traditional financial markets, a large amount of capital flowed into prediction markets such as Polymarket and Kalshi, as well as decentralized exchanges like Hyperliquid. Investors attempted to hedge risks or speculate on the subsequent impacts of the U.S.-Israel attacks on Iran through these platforms. However, this capital frenzy quickly evolved into a public opinion storm.On Saturday, a wave of skepticism emerged on the social platform X, accusing some insiders of profiting significantly in the prediction markets by leveraging their advance knowledge of military strikes. In response to the criticism, a White House spokesperson argued to the media that "the only special interest guiding the Trump administration's decisions is the best interest of the American people." In fact, actions against insider betting leveraging international conflicts have already been initiated in some regions around the world.In the face of accusations, Kalshi CEO Tarek Mansour defended that they would refund all fees incurred by users participating in the controversial markets, and positions established before Khamenei's death would be forcibly settled at the last trading price. However, this "forced liquidation" decision did not quell the storm; many users instead complained on social media that they had been misled by the platform.
app_icon
ChainCatcher Building the Web3 world with innovations.