CertiK: Discovered a critical vulnerability in Solana Phone that allows user assets to be stolen within tens of seconds
CertiK has discovered a critical bootloader vulnerability in Solana Phone. CertiK's testing experts were able to jailbreak the phone in just one minute and "clean out" all of its assets with just a few steps.
The vulnerability stems from an insecure "bootloader unlock" feature. In addition to stealing user assets, it also exposes all personal data stored on the device. Over 2,100 devices have been at serious risk since early April. Given the complexity of the vulnerability and the need for physical access, CertiK has informed Solana of the vulnerability and publicly released this vulnerability warning to protect Web3 users and encourage them to take effective measures to protect their asset security.
CertiK released a video analyzing the details of the vulnerability on November 15. They emphasized that the vulnerability is not limited to Solana Phone and recommended that relevant projects and developers take immediate action to strengthen bootloader protection.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
US, EU and UK sign world’s first international AI treaty
Hedera, IOHK join DeRec Alliance as final founding members
Trump extends lead over Harris on Polymarket to seven percentage points
Donald Trump has extended his lead over Kamala Harris in U.S. presidential election odds on the decentralized predictions platform Polymarket.The seven percentage point gap is the highest since Aug. 22 but contrasts with average national polling in Harris’ favor.
![](https://img.bitgetimg.com/multiLang/image/social/b4191e7a90e7a4b1afc8b9d40c68e5e61725543395232.jpg)
Ripple Takes Major Gamble Against the SEC, Is It a Winning Play?