Ledger finds Android crypto flaw
Ledger researchers found a vulnerability in some Android phones with MediaTek chips that could expose crypto wallet private keys [https://cryptotimes.io/2026/03/12/ledger-finds-android-flaw-that-could-expose-crypto-wallet-keys].
The vulnerability stems from how MediaTek chips handle key storage in some Android devices. This could allow attackers to bypass Android's Keystore system, potentially extracting private keys. Ledger's team demonstrated the exploit on a Google Pixel phone, but the vulnerability likely affects other Android devices using MediaTek chips. The researchers notified Google and MediaTek about the flaw. A patch has been released by Google in its March security update. Users are urged to update their Android devices to the latest security patch to mitigate the risk.
