#ETH走势分析 Is your mobile wallet really safe? A recent discovery might make quite a few people break out in a cold sweat.

Ledger just released a technical report, stating that the MediaTek Dimensity 7300 chip—the processor used in many mid-range Android phones—was found by their team to have a hardware-level security flaw. What's even more troublesome is that this issue can't be fixed through a system update, because the problem is etched directly into the silicon circuits of the chip.

So what's going on exactly? Ledger's two security engineers, Charles Christen and Léo Benito, started experiments in February this year, using electromagnetic pulse attacks to successfully gain control of the device during the chip's boot phase. By early May, they were able to reliably reproduce this vulnerability. Although the success rate of a single attack isn't particularly high, the attack can be attempted repeatedly—in theory, you could break through the defenses within minutes, exposing the private keys in your wallet.

MediaTek has responded, saying that this type of electromagnetic fault injection attack was never within the protection scope of the MT6878 chip. After all, the chip was originally designed for regular consumer electronics, not specifically for financial security. That may be true, but for users who store crypto assets on their phones, this "beyond design scope" explanation might not be sufficient.

So if your phone uses the affected chip, and you're used to managing large amounts of assets on your mobile device, you might want to consider a different storage solution. You should still buy a hardware wallet—phones are convenient, but when it comes to security, they're still not quite up to par.