The hardware vulnerability - found primarily in budget handsets - makes it possible to steal sensitive user data, including crypto wallet seed phrases, in less than a minute.

A vulnerability in some MediaTek-powered phones could allow attackers to extract encrypted data, including wallet seed ...

Security researchers cracked a MediaTek-powered Nothing CMF Phone 1 in 45 seconds, exposing a vulnerability that potentially affects millions of Android phones.

Victims may remain unaware that their UPI account has been taken over on another device as the attack happens silently, as per researchers.