Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

How far can a BootROM exploit take you on a Crypto phone? All the way to the wallet signing key. At #DEFCON34, CertiK researcher Guanxing Wen (Guanxing) demonstrated the full chain: BootROM → root → offline PIN recovery → wallet signing key. Short version ↓

CertiK's profile picture

CertiK

559,051 subscribers

20,726 Aufrufe • vor 19 Tagen •via X (Twitter)

#DEFCON34
LIVE

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

BootROM → root → lock-screen PIN. We enter BROM mode, load a patched preloader, gain root, extract the lock credential, recover the 6-digit PIN offline, and use it to unlock the phone. Full PoC ↓
1:59

BootROM → root → lock-screen PIN. We enter BROM mode, load a patched preloader, gain root, extract the lock credential, recover the 6-digit PIN offline, and use it to unlock the phone. Full PoC ↓

CertiK

28,771 Aufrufe • vor 17 Tagen

Root wasn’t the end. From system compromise, we pulled the wallet keystore, recovered the private key, derived the public key, and verified it against the on-chain wallet on BaseScan. Full PoC ↓
0:43

Root wasn’t the end. From system compromise, we pulled the wallet keystore, recovered the private key, derived the public key, and verified it against the on-chain wallet on BaseScan. Full PoC ↓

CertiK

17,982 Aufrufe • vor 12 Tagen

WebAuth Wallet & Chill - How to add a signing device 🔑 Imagine a crypto wallet you don't even need to install, where you can rock up to ANY computer and securely access your crypto without ever logging in? All you need is your key or biometrics. Here's how:
14:22

WebAuth Wallet & Chill - How to add a signing device 🔑 Imagine a crypto wallet you don't even need to install, where you can rock up to ANY computer and securely access your crypto without ever logging in? All you need is your key or biometrics. Here's how:

Paul Grey

25,601 Aufrufe • vor 1 Jahr

🔐OKX Wallet Success Story! Discover how @okxweb3 achieved a top-tier AA security rating and excels in crypto wallet solutions! Witness their journey and see why they are a leader in blockchain security! View the complete video here👇
0:57

🔐OKX Wallet Success Story! Discover how @okxweb3 achieved a top-tier AA security rating and excels in crypto wallet solutions! Witness their journey and see why they are a leader in blockchain security! View the complete video here👇

CertiK

37,106 Aufrufe • vor 2 Jahren

CertiK was thrilled to be part of the 2024 Qualcomm's Product Security Summit today. We demonstrated critical vulnerabilities in Crypto POS systems, highlighting how security can be easily compromised. 🛡️ Check out our Vulnerability 1 & 2 videos to see our findings! 👇
0:45

CertiK was thrilled to be part of the 2024 Qualcomm's Product Security Summit today. We demonstrated critical vulnerabilities in Crypto POS systems, highlighting how security can be easily compromised. 🛡️ Check out our Vulnerability 1 & 2 videos to see our findings! 👇

CertiK

260,055 Aufrufe • vor 2 Jahren

The new Herond Wallet is live: A new chapter begins! We’re excited to announce the launch of the new Herond Wallet, positioned as a leading Keyless Wallet in the Web3 space. With our revolutionary Keyless Technology, you control your private key without the seed phrase stress. Manage your wallets effortlessly, and enjoy: Multi-chain support Easy Fiat-to-Crypto purchases Rapid Cross-chain Swaps right on the wallet Send and receive crypto simply, securely, and always with full user custody. Upgrade your Web3 journey today! Explore the new standard of digital ownership: 👉
0:56

The new Herond Wallet is live: A new chapter begins! We’re excited to announce the launch of the new Herond Wallet, positioned as a leading Keyless Wallet in the Web3 space. With our revolutionary Keyless Technology, you control your private key without the seed phrase stress. Manage your wallets effortlessly, and enjoy: Multi-chain support Easy Fiat-to-Crypto purchases Rapid Cross-chain Swaps right on the wallet Send and receive crypto simply, securely, and always with full user custody. Upgrade your Web3 journey today! Explore the new standard of digital ownership: 👉

Herond Browser

113,014 Aufrufe • vor 9 Monaten

FUND YOUR CRYPTO CARD WITH ZKX Wallet | The Secure and Private Wallet 🗽, POWERED BY RAILGUN The biggest issue with crypto cards is that transactions are public and on-chain. If you fund your crypto card directly from your self-custody wallet, anyone can potentially trace the transaction and link it back to your wallet. Imagine paying for a coffee, while the merchant can potentially see your wallet history and how much crypto you hold. That’s not great for financial privacy. With ZKX Wallet | The Secure and Private Wallet 🗽, you can unshield your funds to your crypto card without creating an on-chain trail that directly links the card payment back to your original wallet. In this example, we funded our ether.fi card using ZKX Wallet | The Secure and Private Wallet 🗽. Spend privately. Keep your wallet private. 🛡️
1:29

FUND YOUR CRYPTO CARD WITH ZKX Wallet | The Secure and Private Wallet 🗽, POWERED BY RAILGUN The biggest issue with crypto cards is that transactions are public and on-chain. If you fund your crypto card directly from your self-custody wallet, anyone can potentially trace the transaction and link it back to your wallet. Imagine paying for a coffee, while the merchant can potentially see your wallet history and how much crypto you hold. That’s not great for financial privacy. With ZKX Wallet | The Secure and Private Wallet 🗽, you can unshield your funds to your crypto card without creating an on-chain trail that directly links the card payment back to your original wallet. In this example, we funded our ether.fi card using ZKX Wallet | The Secure and Private Wallet 🗽. Spend privately. Keep your wallet private. 🛡️

Liberty Swap | C.R.O.P.S. on PulseChain 🗽

15,423 Aufrufe • vor 18 Tagen

Shaping the future of digital #asset management! MPC wallet - Flexify for team and approvals. CipherSafe cold wallet for secure offline signing. 🔒 A FULL-STACK MPC ECOSYSTEM is here, bringing next-level security, privacy, and compliance to the crypto industry. Your assets deserve more than just luck.
4:29

Shaping the future of digital #asset management! MPC wallet - Flexify for team and approvals. CipherSafe cold wallet for secure offline signing. 🔒 A FULL-STACK MPC ECOSYSTEM is here, bringing next-level security, privacy, and compliance to the crypto industry. Your assets deserve more than just luck.

CipherBC

40,799 Aufrufe • vor 1 Jahr

Behind every headline is a trend. Our latest video breaks down the key insights from the CertiK Hack3d: H1 2026 Report and what they reveal about the state of Web3 security.
1:44

Behind every headline is a trend. Our latest video breaks down the key insights from the CertiK Hack3d: H1 2026 Report and what they reveal about the state of Web3 security.

CertiK

33,197 Aufrufe • vor 1 Monat

We often hear folks calling Ledger a cold wallet. We get it – your device keeps your private keys offline for you. The thing is, you can do more with your Ledger. Unfurl to hear why we prefer to think of Ledger as a signing device instead of a cold wallet. A thread 🧵:
0:39

We often hear folks calling Ledger a cold wallet. We get it – your device keeps your private keys offline for you. The thing is, you can do more with your Ledger. Unfurl to hear why we prefer to think of Ledger as a signing device instead of a cold wallet. A thread 🧵:

Ledger

72,771 Aufrufe • vor 3 Jahren

2/ Together with Vulcan, we've pioneered a new way to connect your wallet to Nifty Island! If you’ve associated wallet addresses with Vulcan or Premint at anytime in the past, you can reuse these permissions by signing into your Discord account, without ever opening your wallet! Check out the video tutorial below to see the future of safe, seamless onboarding.
0:30

2/ Together with Vulcan, we've pioneered a new way to connect your wallet to Nifty Island! If you’ve associated wallet addresses with Vulcan or Premint at anytime in the past, you can reuse these permissions by signing into your Discord account, without ever opening your wallet! Check out the video tutorial below to see the future of safe, seamless onboarding.

Nifty Island 🏝

22,125 Aufrufe • vor 2 Jahren

🚨 New tutorials that show how to transition from Rabby Wallet to Internet Money Wallet on Android, iOS and Chrome! ✅ If you just need to know how to find your seed phrase or private key on Rabby, we have included those videos in this thread. 🛑NEVER SHARE YOUR PRIVATE KEY OR SEED PHRASE WITH ANYONE. If anyone asks you for your seed phrase of private key, it is a scam. Only import these into trusted and reupatable applications like the Internet Money Wallet🛑 Here is the full tutorial 👀👇
10:16

🚨 New tutorials that show how to transition from Rabby Wallet to Internet Money Wallet on Android, iOS and Chrome! ✅ If you just need to know how to find your seed phrase or private key on Rabby, we have included those videos in this thread. 🛑NEVER SHARE YOUR PRIVATE KEY OR SEED PHRASE WITH ANYONE. If anyone asks you for your seed phrase of private key, it is a scam. Only import these into trusted and reupatable applications like the Internet Money Wallet🛑 Here is the full tutorial 👀👇

Internet Money | Crypto Wallet

25,480 Aufrufe • vor 1 Jahr

Introducing the Layer3 Wallet — now in open beta: a next-generation smart wallet that hides the complexity of crypto and helps you earn more. It's chain agnostic and gas-friendly, redefining how you spend, save, and swap onchain. All powered by L3.
0:37

Introducing the Layer3 Wallet — now in open beta: a next-generation smart wallet that hides the complexity of crypto and helps you earn more. It's chain agnostic and gas-friendly, redefining how you spend, save, and swap onchain. All powered by L3.

Layer3

57,050 Aufrufe • vor 1 Jahr

Autonomous introduced Key, a battery-free NFC key that physically unlocks the distracting apps on your phone. You choose which apps to lock, then tap the Autonomous key on your phone to start a timed unlock session. Your phone can start the lock, but cannot lift it without the physical key, which makes it much harder to casually cave.
0:31

Autonomous introduced Key, a battery-free NFC key that physically unlocks the distracting apps on your phone. You choose which apps to lock, then tap the Autonomous key on your phone to start a timed unlock session. Your phone can start the lock, but cannot lift it without the physical key, which makes it much harder to casually cave.

Ritwik Pavan

80,946 Aufrufe • vor 2 Monaten

Many people are confused about exporting the Nexira wallet private key 🤔 So I made a full step-by-step tutorial showing everything. You can do it yourself in 2 minutes. Watch here 👇 How to Export Nexira Wallet Private Key How to Export Nexira Wallet Private Key (PC Guide) 1️⃣ Go to: 2️⃣ Press F12 or Right Click → Inspect 3️⃣ Open Application Tab 4️⃣ Go to Local Storage → nexira web 5️⃣ Search Privkey / persistwallet 6️⃣ Scroll down and find web3auth 7️⃣ Copy the data 8️⃣ Search this line in it: {"state":{"privKey": Copy your Private Key and import it into any EVM wallet. After that: Send ETH → Swap → Done. ⚠️ Never share your private key with anyone.
0:56

Many people are confused about exporting the Nexira wallet private key 🤔 So I made a full step-by-step tutorial showing everything. You can do it yourself in 2 minutes. Watch here 👇 How to Export Nexira Wallet Private Key How to Export Nexira Wallet Private Key (PC Guide) 1️⃣ Go to: 2️⃣ Press F12 or Right Click → Inspect 3️⃣ Open Application Tab 4️⃣ Go to Local Storage → nexira web 5️⃣ Search Privkey / persistwallet 6️⃣ Scroll down and find web3auth 7️⃣ Copy the data 8️⃣ Search this line in it: {"state":{"privKey": Copy your Private Key and import it into any EVM wallet. After that: Send ETH → Swap → Done. ⚠️ Never share your private key with anyone.

Crypto Next 🧗‍♀

22,438 Aufrufe • vor 5 Monaten

🖤 How to Connect Ledger to HOT Wallet: The Complete Guide 💻 In this video tutorial, we cover everything you need to know: 🔥 A step-by-step guide for beginners on connecting your Ledger 🔥 How to build a multi-address portfolio 🔥 Understanding paths 🔥 Special HOT Wallet features for Ledger users Like Omni registration, blind signing, batch import, signing transactions and more We’ve worked hard to make HOT Wallet the most user-friendly wallet for Ledger, and we hope this guide makes getting started easy for everyone💛
3:19

🖤 How to Connect Ledger to HOT Wallet: The Complete Guide 💻 In this video tutorial, we cover everything you need to know: 🔥 A step-by-step guide for beginners on connecting your Ledger 🔥 How to build a multi-address portfolio 🔥 Understanding paths 🔥 Special HOT Wallet features for Ledger users Like Omni registration, blind signing, batch import, signing transactions and more We’ve worked hard to make HOT Wallet the most user-friendly wallet for Ledger, and we hope this guide makes getting started easy for everyone💛

HOT Protocol 🔥

14,543 Aufrufe • vor 8 Monaten

Security made simple.🔒 The Ledger Nano Gen5 brings next-level protection to everyday crypto use, the perfect partner to Ledger Wallet. → Buy, sell, swap, and stake with Ledger Wallet. → Clear Signing so you see exactly what you approve on your signers touch screen. → Finish with custom badges by Susan Kare. All for $179.
1:25

Security made simple.🔒 The Ledger Nano Gen5 brings next-level protection to everyday crypto use, the perfect partner to Ledger Wallet. → Buy, sell, swap, and stake with Ledger Wallet. → Clear Signing so you see exactly what you approve on your signers touch screen. → Finish with custom badges by Susan Kare. All for $179.

Ledger

13,297 Aufrufe • vor 7 Monaten

Excited to share some things I've been working on recently at Slash: Crypto payments on Slash, now extended to invoices. Pick a chain, pay from your wallet, and the invoice settles instantly. If you're already using Slash for crypto, invoicing works the same way, and I'm excited for you all to try it!
1:18

Excited to share some things I've been working on recently at Slash: Crypto payments on Slash, now extended to invoices. Pick a chain, pay from your wallet, and the invoice settles instantly. If you're already using Slash for crypto, invoicing works the same way, and I'm excited for you all to try it!

luka

20,916 Aufrufe • vor 5 Monaten