Mobile phone chipmaker, MediaTek, has patched a vulnerability affecting its chipsets that could have allowed attackers to steal crypto seed phrases on affected devices. The flaw was discovered by Ledger's white-hat security team, Donjon, who shared the vulnerability with Mediatek before a patch was issued on Jan. 5. The vulnerability came from MediaTk’s secure boot chain, a security mechanism that ensures a phone starts safely and only with authorized software during startup. An attacker with access to an Android phone could connect it to a computer via USB and gain access to sensitive data on the device, including crypto wallet seed phrases. Ledger has urged users to update their devices and does not anticipate this to be an ongoing issue.