DEF CON 34 - Main - Breaking the Ethereum Phone From BootROM to Wallet Signing Keys - Guanxing Wen
Plays from YouTube in privacy-enhanced mode — nothing loads from YouTube until you press play.
Crypto phones promise the convenience of a mobile OS with hardware-backed key management. We tested that claim on dGEN1, the Ethereum phone marketed for digital-asset custody, and present a full compromise from bootrom to wallet key recovery. Starting from a bootrom-level misconfiguration, we reverse the modern MediaTek bootchain and introduce a Loader-of-the-Loader technique for patching later boot stages entirely in memory, yielding EL3 code execution without modifying physical flash.
Description from DEF CON.
