Инвесторы могут потерять криптовалюту из-за уязвимости в смартфонах Android

cryptonews.ruPublished on 2025-12-23Last updated on 2025-12-23

Эксперты подразделения по кибербезопасности компании Ledger обнаружили неустранимую уязвимость в Android, из-за которой инвесторы могут лишиться своих криптовалют.

Проблема связана с конкретным чипом производства компании из Тайваня MediaTek. Это Dimensity 7300, также известный как MT6878, который используется во многих смартфонах Android, представленных на рынке в настоящее время, включая недавно выпущенный Solana Seeker.

Эта проблема с безопасностью особенно серьёзна из-за того, где она возникает. Уязвимость находится в загрузочном ПЗУ чипа, то есть запускается при включении смартфона. Поскольку этот код встроен в сам физический чип, его невозможно исправить с помощью регулярных обновлений программного обеспечения.

От вредоносных программ, которые пользователи могут случайно установить на свои компьютеры, до полностью удалённых эксплойтов с нулевым кликом, которые обычно используют организации, поддерживаемые государством, — на этих устройствах просто невозможно безопасно хранить и использовать приватные ключи, — написали эксперты Ledger.

Интересно, что тайваньский производитель проблемного чипа быстро отреагировал на заявление Ledger, который известен своими аппаратными криптокошельками Nano. В MediaTek заявили, что атаки с использованием электромагнитных помех считаются «нецелесообразными» для чипа MT6878, поскольку он был разработан как обычный потребительский продукт, а не как «компонент с высоким уровнем безопасности, предназначенный для финансовых систем или хранения конфиденциальной информации».

Weekly Token Unlock: XPL to Release Millions in Token Value

Weekly Token Unlocks: XPL and SoSoValue Tokens Worth Over $10 Million Set for Release This week sees significant token unlocks for two projects. SoSoValue, an AI-powered crypto investment research platform, will unlock 13.03 million tokens, valued at approximately $3.87 million. The project aims to merge CeFi efficiency with DeFi transparency. Separately, Plasma, a Layer 1 blockchain designed for global stablecoin payments, will unlock 110 million tokens worth about $10.42 million. The network focuses on high throughput, stablecoin-native features, and full EVM compatibility. Both projects have provided their detailed token release schedules.

marsbit50m ago

Weekly Token Unlock: XPL to Release Millions in Token Value

marsbit50m ago

Bitcoin Must Hold $60K Or Risk Major Breakdown, TradingView Analyst Warns

Bitcoin has reached a critical juncture around the $60,000 level, which analysts view as a major technical and psychological support zone. According to a TradingView analysis, a successful hold above this demand area could pave the way for a recovery toward $81,000. However, the warning is clear: a decisive and sustained break below $60,000 would invalidate the bullish outlook, likely triggering stop losses and a deeper market correction. The current setup is described as a binary test—maintaining support keeps the recovery narrative alive, while losing it would signal a shift toward a more significant downturn.

bitcoinist1h ago

Bitcoin Must Hold $60K Or Risk Major Breakdown, TradingView Analyst Warns

bitcoinist1h ago

Venus Protocol Integrates Tokenized Stocks As Lending Collateral On BNB Chain

Venus Protocol now allows tokenized stocks from companies like Apple, Tesla, and Microsoft to be used as borrowing collateral on BNB Chain. This integration brings a key real-world asset (RWA) use case into DeFi lending. Users can deposit these tokenized equities, which are described as 1:1 backed by real shares held by regulated custodians, into isolated pools to borrow stablecoins or BNB without selling their underlying positions. This move expands DeFi lending beyond crypto-native assets, resembling traditional margin finance. It highlights BNB Chain's competition for RWA activity and aims to attract more stable liquidity. However, tokenized stocks introduce different risks, including dependency on off-chain custodians and challenges with collateral valuation due to differing market hours between traditional and on-chain trading. While not an immediate price catalyst, this development is significant within broader crypto trends like compliance pressure and RWA tokenization. Success will depend on growing liquidity, reliable custody, robust price oracles, and clear rules for redemptions and liquidations.

bitcoinist2h ago

Venus Protocol Integrates Tokenized Stocks As Lending Collateral On BNB Chain

bitcoinist2h ago

The Impossible Trilemma Is Basically a Pseudo-Problem

The article argues that the core limitation of blockchain technology is not the scalability trilemma, but its fundamental lack of privacy, which acts as a barrier to institutional capital. It defines blockchain as a slow, expensive, shared computer whose primary value is "permissionlessness" (no administrator) and verifiable trust. While this is ideal for native financial assets like stable币, which now process trillions, two critical flaws remain for mainstream adoption: regulatory legitimacy and a default transparency that leaks all financial activity. The author contends that transparency is not a feature but a tax, quantified through MEV extraction, making the public ledger unusable for serious institutions. However, modern cryptography, specifically zero-knowledge proofs, now offers a solution: "provable privacy." This allows users to prove compliance (e.g., solvency, KYC) without revealing underlying data. This fusion of privacy and auditability resolves the transparency-compliant privacy-compliance dichotomy, enabling a purely upgraded system where transactions are verified but not broadcasted. Closing these flaws is presented as the essential bridge to onboard the next wave of trillions in capital.

marsbit13h ago

The Impossible Trilemma Is Basically a Pseudo-Problem

marsbit13h ago

The "Impossible Triad" Is Fundamentally a Pseudo-Problem

The article argues that blockchain's fundamental limitation is not the scalability trilemma (decentralization, scalability, security), which has been largely solved, but the lack of **privacy** and, until recently, clear **legitimacy**. Blockchain is described as a slow, expensive, globally shared computer whose core value is censorship resistance and verifiability. While ideal for native digital assets like money (e.g., stablecoins), its default transparency acts as a **tax**, exposing all transactions and enabling MEV extraction, which deters serious institutional capital. Simultaneously, its permissionless nature created regulatory ambiguity. The piece contends that **privacy** is the missing critical feature. It rejects the false choice between total transparency and complete anonymity. Modern cryptography (like zero-knowledge proofs) enables **compliant privacy**: users can prove facts (solvency, KYC status, compliance) without revealing the underlying sensitive data (specific holdings, identities). This preserves auditability for regulators and eliminates the leak of financial information. With recent regulatory progress (e.g., the GENIUS Act) addressing legitimacy, adding default, provably compliant privacy becomes a pure upgrade. It transforms blockchain from a costly, public ledger into a confidential settlement layer, finally bridging the gap to mainstream institutional and individual adoption of on-chain finance.

链捕手13h ago