Critical One-Click IP Leak in Telegram Exposed

Researchers disclosed a Telegram privacy vulnerability in which the mobile client performs an automatic “health check” when a user taps a t.me/proxy link, creating a direct TCP connection that can leak the user's public IP to an attacker-controlled proxy server; attackers can hide such links via rich-text social engineering, and Telegram intends to add a confirmation prompt as a fix while users are advised to use VPNs, inspect links, and isolate sensitive research devices.