CertiK experts have discovered a vulnerability in the bootloader of the Solana smartphone, which allows unlimited access to device data.

During the tests, the CertiK team was able to unlock the bootloader – a program that runs at the very beginning of the device and loads the necessary components for the operating system to work. After opening access to the smartphone’s bootloader, Solana Saga security researchers were able to gain access to all data on the mobile device.

The CertiK team published a video on the official X account (formerly Twitter) where they showed the process of hacking the Solana Saga security system.

According to cybersecurity experts CertiK, the identified vulnerability poses a danger not only to owners of Solana smartphones, but also “to the entire Web3 industry.” Solana developers have not yet commented on the situation.

Solana presented its cryptocurrency smartphone Saga last year, and the start of public sales of the new product began in May 2023. The main feature of the device was the functionality of unhindered access to dApps and blockchain protocols using the online store Solana dApp Store built into the software.