Beyond the Hype: Guanxing on Exploiting Crypto Phones and the Evolution of Security Research
summary
A USB-based exploit targets an Ethereum wallet phone and achieves key extraction because the vendor stores keys in the clear rather than isolating them in an SEP/secure chip; the exploit is developed in about one month to develop using bootrom and TrustZone reverse engineering (with AI accelerating function identification), demonstrated live over USB, and yields a practical full-chain compromise on small-vendor devices that skip trusted-world protections, while large vendors with dedicated secure enclaves resist this class of attack.
AI-written summary · about
chapters (6)
- 0:00Introduction and live demo
- 1:02Breaking Ethereum wallet
- 4:49Purpose of crypto phones
- 8:38Choosing secure crypto phones
- 10:03Future research targets
- 12:53Q&A and closing
related talks
31mAnti-Forensics: Reverse Engineering a Leading Phone Forensic Tool
36mPhysical Attacks Against Smartphones
51mExploiting Hardware Glitches And Side Channels In Perfect Software
51mA Measured Response to a Grain of Rice
38mMission mPOSsible
27mCLKSCREW: Exposing the Perils of Security-Oblivious Energy Management
41mJust Another Live Hacking - How Insecure Is Secure Enough?
34mCore Escalation: Unleashing the Power of Cross-Core Attacks on Heterogeneous System