Cointelegraph
Adrian Zmudzinski
Written by Adrian Zmudzinski,Staff Writer
Bryan O'Shea
Reviewed by Bryan O'Shea,Staff Editor

‘Pixnapping’ Android attack could expose crypto wallet seed phrases

Researchers have uncovered a new Android vulnerability that allows malicious apps to reconstruct on-screen content, such as recovery phrases and two-factor authentication codes.

‘Pixnapping’ Android attack could expose crypto wallet seed phrases
News

A newly discovered Android vulnerability enables malicious applications to access content displayed by other apps, potentially compromising crypto wallet recovery phrases, two-factor authentication (2FA) codes and more.

According to a recent research Best crypto hardware wallets for 2025

Hardware wallets offer safe protection

The most obvious solution to the issue is to avoid displaying recovery phrases or any other particularly sensitive content on Android devices. Even better would be to avoid displaying recovery information on any internet-capable device.

A simple solution to achieve just that is to use a hardware wallet. A hardware wallet is a dedicated key management device that signs transactions externally to a computer or smartphone without ever exposing the private key or recovery phrase. As threat researcher Vladimir S put it in an X post on the subject:

“Simply don’t use your phone to secure your crypto. Use a hardware wallet!“

Magazine: ‘Help! My robot vac is stealing my Bitcoin’: When smart devices attack

Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph’s Editorial Policy and aims to provide accurate and timely information. Readers are encouraged to verify information independently. Read our Editorial Policy https://cointelegraph.com/editorial-policy