Solana

<ul class="list-ic vertical">
 <li><span>1</span> <a>CertiK posted a one-minute video asking a question about Web3 devices’ security mentioning finding a “bootloader vulnerability” in the Solana phone.&nbsp;</a></li>
 <li><span>2</span> <a>Solana Labs denies the claim stating that any Android device is vulnerable to such issues.&nbsp;</a></li>
</ul>
<p>Solana’s Saga phone is one of the aspiring achievements of the company which entered the market after years of toil. The Android-based Web3 smartphone recently got into the news after a potential vulnerability was found in the device. Blockchain security firm CertiK brought the report after analyzing the device and raised concerns that the vulnerability can make Saga prone to digital attacks.</p>
<p>CertiK posted a one-minute video on social media platform X, formerly Twitter, on Wednesday, November 15. The video with the caption asking a question about Web3 devices’ security mentioned finding a “bootloader vulnerability” in the Solana phone.&nbsp;</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="500" data-dnt="true">
   <p lang="en" dir="ltr">Ever wondered about the security of your Web3 devices? <br><br>Our newest exploration reveals a significant bootloader vulnerability in the Solana Phone, a challenge not just for this device but for the entire industry. Our commitment to enhancing security standards is unwavering. <img src="https://s.w.org/images/core/emoji/14.0.0/72x72/1f510.png" alt="🔐" class="wp-smiley" style="height: 1em; max-height: 1em;">… <a href="https://t.co/lHZ5W7hXzy" rel="noopener noreferrer nofollow">pic.twitter.com/lHZ5W7hXzy</a></p>— CertiK (@CertiK) <a href="https://twitter.com/CertiK/status/1724774322324062524?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">November 15, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<p>The video showed a user exploiting the alleged vulnerability to hack into the phone and access crucial information. It even showed a demo of how the exploitation could lead to stealing crypto assets.&nbsp;</p>
<p>The blockchain security company claims that the bootloader makes the Solana devices that “contain a root backdoor” prone to threat activities. However, it’s also important to note that the attacker could only access the device if it’s available physically.&nbsp;</p>
<p>CertiK stated in the post “The boot loader is unlocked and software integrity cannot be guaranteed. Any data stored on the device may be available to attackers, Do not store any sensitive data on the device”&nbsp;</p>
<p>A backdoor software can be installed in a device such as a mobile phone that can allow further compromise including accessing sensitive information.&nbsp;</p>
<h2 class="wp-block-heading" id="strong-solana-disagrees-with-the-allegations-of-certik-strong"><strong>Solana Disagrees With the Allegations of CertiK</strong></h2>
<p>Solana Labs responded to CertiK’s revelation about alleged vulnerabilities in Solana <a href="https://www.thecoinrepublic.com/2023/08/13/solana-saga-the-web3-smartphone-to-buy-and-sell-cryptocurrency/" target="_blank" rel="noopener noreferrer nofollow">Saga phones</a>. The company denies that it’s an inherent issue in their device. Rather, they said that any Android device is vulnerable to backdoor attacks.&nbsp;</p>
<p>In an official Open Source Project documentation of Android it is also highlighted that the bootloader can be locked and unlocked.&nbsp;</p>
<p>However, it’s not as easy as it may sound. As mentioned already, the attacker must have physical access to the device in order to inject the software before hacking it. This itself acts as a hindrance in the process for illicit actors to enter the phone through backdoor.&nbsp;</p>
<p>Many X users responded to CertiK and a majority of them seem to disagree with the blockchain security firm’s claims. Some even claimed this action aimed to attack Solana phone’s popularity. They also voiced the argument that any Android device can be hacked through the process shown in the video.&nbsp;</p>
<div class="wp-block-image">
 <figure class="aligncenter"><img loading="lazy" decoding="async" width="735" height="161" src="https://www.thecoinrepublic.com/wp-content/uploads/2023/11/image-287.png" alt="CertiK Says Saga Phone Has Bootloader Vulnerability; Solana Denies" class="wp-image-180728">
 </figure>
</div>
<div class="wp-block-image">
 <figure class="aligncenter"><img loading="lazy" decoding="async" width="731" height="272" src="https://www.thecoinrepublic.com/wp-content/uploads/2023/11/image-287.png" alt="CertiK Says Saga Phone Has Bootloader Vulnerability; Solana Denies" class="wp-image-180729" srcset="https://www.thecoinrepublic.com/wp-content/uploads/2023/11/image-287.png 731w, https://www.thecoinrepublic.com/wp-content/uploads/2023/11/image-287-300x112.png 300w" sizes="(max-width: 731px) 100vw, 731px">
 </figure>
</div>
<p>X users called out for not using “Seed Vault” which is supposed to support digital assets and seeds in the devices.&nbsp;</p>

CertiK Says Saga Phone Has Bootloader Vulnerability; Solana Denies

Table of Contents

Thecoinrepublic.com

Other articles published on Nov 16, 2023

dYdX Chain Unveils New Bridge UI Along with Staking Feature

Philippines introduces tokenized treasury bonds

Enjin Blockchain “Triple Migration” Successful; 51% Complete in First 60 Days

Crypto Daily Roundup,16 Nov: Wood predicts $25T crypto market by 2030?

CertiK and ZachXBT impersonators stole over $300k in crypto

How is AI Revolutionizing Security in Emerging Markets?

Join our free newsletter for daily crypto updates!