CertiK Uncovers Major Security Flaw in Solana Saga Smartphone

Security firm CertiK recently revealed a significant security flaw in the Solana Saga smartphone. According to CertiK, the device has a critical weakness that could enable hackers to insert a backdoor into its system, jeopardizing the phone’s security. They shared a video on X (previously known as Twitter) illustrating how a hacker might gain unauthorized root access during the phone’s boot process.

CertiK warned that this flaw undermines the reliability of the Android OS used by Solana’s phone, potentially putting sensitive information at risk, including cryptocurrency wallet credentials and private keys.

The Solana Phone, branded as “Saga,” is a blockchain-integrated smartphone released by Solana in April. It aims to improve the experience with decentralized applications (dApps) and crypto management, featuring a hardware wallet for secure transactions and emphasizing Web3 functionalities. Initially priced at $1,000, its price has been reduced by over 40% in recent months.

However, Solana has refuted CertiK’s assertions of any security issues, backed by some sources. Also, some users have pointed out that bootloader vulnerabilities are not unusual in Android devices due to their open-source nature.

source