News

BlockBeats News, December 4, according to The Block, Ledger stated that a vulnerability was recently discovered in a widely used Android smartphone processor chip. Users of software-based Web3 wallets relying on such devices are at risk if their device is physically accessed by an attacker. The Donjon team found that hardware fault injection can bypass core security checks and thus control the chip. Although this discovery does not affect Ledger hardware wallets, it highlights the dangers of relying solely on smartphone hot wallets to secure digital assets. The team tested the MediaTek Dimensity 7300 chip produced by TSMC, aiming to determine whether electromagnetic fault injection could compromise the earliest stage of the boot process. They used open-source tools to inject timely electromagnetic pulses into the chip’s boot ROM, obtaining its runtime information and thus identifying attack paths. Subsequently, the team bypassed the filtering mechanism in the chip’s write command and overwrote the return address on the boot ROM stack, allowing them to execute arbitrary code at EL3 (the processor’s highest privilege level). This attack can be repeated within minutes. Ledger stated that even the most advanced smartphone chips are vulnerable to physical attacks and are not suitable environments for protecting private keys, reiterating that secure elements are crucial for the self-custody of digital assets. The vulnerability was reported to MediaTek in May, and the vendor has notified affected manufacturers.

BlockBeats news, on December 4, the probability of "bitcoin reaching $100,000 again this year" on Polymarket is currently reported at 50% (compared to 52% yesterday). In addition, the probability of it reaching $110,000 again is currently reported at 15%, while the probability of falling below $80,000 is reported at 27%.