Cryptocurrency exchange Bybit issued a security advisory on November 13, urging users to update Telegram for Android immediately after security researchers disclosed a vulnerability that could potentially expose other applications on compromised devices. Bybit published the advisory days after the flaw was publicly disclosed and after Telegram confirmed that a fix had already been distributed to users. The warning highlights the security risks facing cryptocurrency users who rely on messaging platforms for communication and access to digital asset services.

In its advisory, Bybit cautioned that the risk would not necessarily be confined to Telegram itself. A compromised Android device, the exchange warned, could create risks for other applications installed on the same device. The exchange recommended several precautionary measures, including installing the latest version of Telegram, avoiding unfamiliar chats and unknown bots, refusing to open suspicious links, and relying exclusively on verified official communication channels.

The recommendations are particularly relevant to cryptocurrency users, whose devices may contain applications used to access wallets, exchanges, and other financial services. Messaging platforms also occupy a central place in cryptocurrency operations more broadly: exchanges and project teams commonly use them for announcements, community discussion, and user support, making them a routine touchpoint between users and the services that safeguard their funds.

Security Researchers Demonstrate the Telegram Android Vulnerability

The warning followed a disclosure earlier in the week by security research firm V12, which identified a remote code execution vulnerability involving Telegram's Widgets feature on Android devices. According to a demonstration reported by Wu Blockchain in a post on X, a message sent through a bot could trigger the launch of the Calculator application on an Android device. The demonstration illustrated how the vulnerability could potentially allow an attacker to execute actions on a targeted device through Telegram's messaging functionality.

Remote code execution vulnerabilities are considered particularly significant because they can allow unauthorized code or commands to run on a device under certain conditions. In a cryptocurrency security context, weaknesses affecting mobile devices can create additional concerns when those same devices are also used to access financial applications or to store sensitive information.

Telegram subsequently confirmed that the vulnerability had been fixed and that an update addressing the issue had been rolled out to users. Bybit's November 13 advisory reinforced that point, stressing that users should install the latest available version rather than continue using potentially vulnerable software. At the time of the advisory, protection against the disclosed flaw was available to anyone who updated the application. For individual users, the practical indicator to watch is the installed app version itself: the fix travels through Telegram's regular update channel, so protection comes down to confirming that the latest release has actually been downloaded and installed.

Bybit Outlines Precautionary Measures for Users

In its security guidance, Bybit highlighted several steps intended to reduce users' exposure to suspicious activity involving Telegram for Android. The exchange urged users to:

• Update Telegram to the latest version immediately; Telegram has already rolled out a fix for the disclosed vulnerability.
• Avoid unfamiliar conversations and unknown bots.
• Refrain from opening suspicious links.
• Communicate only through verified official channels.

The advice regarding bots and links reflects the risks highlighted by the week's disclosure, in which a message sent through a bot was shown capable of triggering actions on a device. These recommendations address common risks associated with malicious messages and potentially compromised applications.

The warning about risks to other applications is particularly important because mobile devices frequently serve as access points for multiple digital services, including cryptocurrency wallets and trading platforms. Bybit's advisory also emphasized the importance of relying exclusively on verified official communication channels.

Binance Previously Warned About an iOS Security Vulnerability

Bybit's advisory followed a separate security warning from Binance, issued on November 10, concerning an iOS vulnerability known as worse_query. Binance warned that the vulnerability could allow malicious applications to access files belonging to other applications on an affected device. Such access could potentially expose highly sensitive information, including cryptocurrency wallet seed phrases, private keys, and account login credentials.

The two advisories were published within days of each other and involved different mobile operating systems and separate security issues. The Telegram vulnerability concerned Android and its Widgets feature, while the worse_query vulnerability identified by Binance involved iOS application file access. Together, they also show major exchanges issuing direct, user-facing guidance on mobile platform security within a span of three days. Both incidents nevertheless underscore the importance of mobile device security for cryptocurrency holders, as sensitive wallet information and exchange credentials can become vulnerable when weaknesses in applications or operating systems provide opportunities for unauthorized access.

Telegram has confirmed that the Android vulnerability has been fixed and that the relevant update has been distributed to users. Bybit's November 13 advisory urged users to install the latest version, avoid suspicious links and unknown bots, and rely only on verified official channels. Binance's separate November 10 warning concerned the potential exposure of wallet seed phrases, private keys, and login credentials through the iOS worse_query vulnerability.

Source: Hokanews