CertiK recently discovered a critical bootloader vulnerability in Solana Phone

ChainCatcher news, CertiK recently discovered a critical bootloader vulnerability in the Solana Phone. CertiK testing experts successfully jailbroke the device within a minute and emptied all assets on it in just a few steps.

The vulnerability stems from an insecure bootloader unlocking feature. In addition to stealing user assets, it also exposes all personal data stored on the device. Since early April, over 2,100 devices have been at severe risk.

Given the complexity of the vulnerability and the necessity of physical access, CertiK has informed Solana of the vulnerability and publicly released this vulnerability alert. CertiK emphasizes that this vulnerability is not limited to the Solana Phone and advises relevant projects and developers to take immediate action to strengthen bootloader protection.