CertiK Claims Solana’s Saga Phone Has Critical “Bootloader Vulnerability” — Solana Labs Disputes Claims
Blockchain security firm CertiK recently released a video claiming that Solana’s crypto-enabled Saga phone has a critical security vulnerability known as a “bootloader unlock” attack. CertiK alleges that this vulnerability could allow malicious actors to install a hidden backdoor in the phone, compromising sensitive data including cryptocurrency private keys. However, Solana Labs has disputed these claims, stating that the video does not reveal any legitimate threat to the Saga device. Solana Labs explains that unlocking the bootloader and installing custom firmware requires multiple steps and can only be done with the user’s passcode or fingerprint. Additionally, users are warned about the implications of unlocking the bootloader, and if they proceed, their device will be wiped along with their private keys. Solana Labs reduced the price of the Saga phone from $1,099 to $599 after a decline in sales four months after its launch.
Key Points:
- CertiK claims Solana’s Saga phone has a critical security vulnerability called a “bootloader unlock” attack.
- Solana Labs disputes CertiK’s claims, stating that the video does not reveal any legitimate threat to the Saga device.
- Unlocking the bootloader and installing custom firmware requires multiple steps and can only be done with the user’s passcode or fingerprint.
- If users proceed to unlock the bootloader, their device will be wiped along with their private keys.
- Solana Labs reduced the price of the Saga phone from $1,099 to $599 after a decline in sales four months after its launch.
