Soft Spots in Hard Tech: Mobile Security Challenges in Web3

Researchers found two serious security weaknesses in a popular Web3-focused smartphone: an unlocked/weak bootloader that could let an attacker install custom firmware and a TEE implementation flaw that allowed extraction of the wallet PIN and private keys; both risks could enable complete compromise of users' plaintext data and crypto assets, were responsibly disclosed to vendors, and the TEE issue has been fixed, with recommendations for stronger hardware and supply-chain protections.