Bybit cryptocurrency exchange has issued a security warning for Telegram users. It has urged Android users to update their Telegram apps. Researchers have disclosed a remote code execution (RCE) vulnerability in the messaging application’s Widgets feature. As pe Bybit, the vulnerability can create risks beyond Telegram. Cryptocurrency users who access exchange accounts and digital asset wallets through the same mobile devices are at risk.

Bybit cautioned that a compromised smartphone could potentially expose other applications and sensitive information stored on the device. It has urged users to install the latest Telegram version and avoid unfamiliar chats/bots. It has also advised to refrain from opening suspicious links.

Researchers Demonstrate Telegram Android Remote Code Execution Flaw

The warning from Bybit follows a security demonstration by research firm V12. The demonstration identified a remote code execution vulnerability in Telegram’s newly introduced Widgets feature.

Widgets are small interactive applications that bots can share through Telegram messages. According to the researchers’ demonstration, a specially crafted bot message could trigger the Calculator application on an Android device without requiring any interaction from the user.

The discovery raised concerns about how malicious messages could potentially interact with Android devices through Telegram’s widget functionality. Telegram has now confirmed that the vulnerability has been fixed. No active attacks exploiting the flaw have been reported.

Crypto Exchanges Highlight Mobile Security Risks

Bybit’s advisory comes amid increased security concerns surrounding mobile applications used by crypto investors. Users frequently access messaging platforms, trading accounts, and digital wallets from the same smartphones. This type of vulnerabilities can cause serious financial losses.

Binance also warned users about an iOS vulnerability known as ‘worse_query’ 3 day ago. Both these warnings highlight the importance of maintaining device security when managing digital assets. Cryptocurrency users are advised to keep their operating systems and applications updated. Infact, it is extra safe to keep trading and personal apps on separate mobiles.