Ledger Discloses Security Flaw in Solana Phones

Ledger’s security team disclosed an unpatchable flaw in the MediaTek Dimensity 7300 chip impacting Solana phones. This flaw allows attackers with physical access to extract sensitive data like private keys, highlighting risks for crypto owners.

Research by Ledger engineers Léo Benito and Charles Christen exposed the vulnerability through electromagnetic fault injection (EMFI). Despite MediaTek’s acknowledgment, the issue remains unfixable via updates, affecting the Solana Seeker smartphone range. As Léo Benito, Security Engineer at Ledger, noted, “The success of our research demonstrates that using general-purpose smartphone SoCs for crypto custody poses inherent risks; physical access to the device can lead to full control and data extraction.” – Ledger Blog

Potential Threat to Solana Smartphone Security

Solana phones cannot be considered secure for storing crypto keys due to this flaw. MediaTek stated EMFI attacks are beyond the intended security design, advising the use of components with higher hardware security for critical applications. This recommendation aligns with insights from Is Your Smartphone’s Hardware Safe?

The announcement has not led to observable market shifts, but Ledger cautions that any cryptocurrency held via affected smartphones is at risk.

The disclosure emphasizes the importance of secure elements over general-purpose chips in crypto environments.

Mass Market Chip Vulnerabilities in Crypto

Comparisons to previous hardware attacks show that physical access can jeopardize key privacy. This instance marks a rare vulnerability in a mass market chip used for cryptocurrency purposes, reinforcing the need for specialized security measures.

Experts suggest the flaw underlines a broader industry issue: the reliance on consumer-grade technology for crypto storage. Emphasis on secure elements is expected to rise, similar to past shifts after hardware vulnerabilities were revealed.