Back En.Bloomingbit

Android SDK Vulnerability Raises Risk of Data Exposure at Crypto Wallet Apps With 30 ...

En.Bloomingbit • April 9, 2026

A vulnerability found in an Android software development kit, or SDK, has raised the possibility of data leaks affecting users of cryptocurrency wallet apps. Multiple applications may be affected.

U.Today reported on May 9 that Microsoft Defender's security research team said the flaw could expose personal information, authentication credentials and financial data if exploited.

Crypto wallet apps exposed to the vulnerability have been downloaded more than 30 million times. No cases of the flaw being used in an actual attack have been confirmed so far.

The vulnerability was found in an Android SDK component. That means it could affect a broad range of apps built using the component during development.

The market views security weaknesses in mobile-based wallets as a factor that could affect the protection of user assets. Patch deployment and broader security responses will be key variables.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Android SDK Vulnerability Exposes Millions of Crypto Wallets A significant vulnerability in the EngageLab SDK has left over 50 million Android users, including 30 million cryptocurrency wallet users, at risk of data theft. The flaw allows malicious applications to bypass Android's security sandbox, potentially exposing personally identifiable information (PII), authentication credentials, and sensitive financial data. Microsoft Defender's security research team reported that the vulnerability could be exploited by malicious apps installed on the same device, which could craft manipulated messages to gain unauthorized access to the wallet's private data. Fortunately, there is currently no evidence that this vulnerability has been actively exploited in the wild. Swift actions are being taken across the Android ecosystem to mitigate the threat, including patch deployment. The flaw is particularly concerning given the high value of the data stored in cryptocurrency wallets. Developers are urged to address this vulnerability promptly to protect user assets. 8 sources 52

Android SDK Vulnerability Raises Risk of Data Exposure at Crypto Wallet Apps With 30 ...

The full story

Extracted Entities

Attack Types (1)

Platforms (1)