I might start advising against running crypto wallets on android devices soon

[KiaKia]

The vulnerability problems with android smartphones is getting alarming this days and it looks like it won't be stopping any time sooner either. Two new vulnerabilities have already come to the light, and this one is more deadly than the past ones, they are called

The Zero days vulnerabilities.

This was confirmed to be under active exploitation in targeted attacks as of December 2025.

CVE-2025-48633: is an information disclosure flaw in the framework layer, and it is rated high severity.
CVE-2025-48572: this is also rated high severity, this could allow a malicious app to execute arbitrary code after gaining initial access.

These flaws have ffects Android version 13, 14,15 and 16.

If you are using Google device it's is possible that they are been patched already if you are the type that keeps constant updates as very important thing to do, if you haven't done this already I think you should consider doing so right away.

I strongly advice everyone to update their chrome browsers and also their android devices to the latest security patches to reduce the risk of been spy on via spyware vendors like NSO Group and Candiru.

You should consider your device not safe if you don't get OEM updates anymore, it could be a good time to get a new smartphone, as you can see, latest updates are very important to keep devices safe.

Those of you running your money app and crypto wallets on your Android phones, do you want to keep doing this? Even if your coins are not yet stolen or lost this seem unrest to me, the more this keeps happening the possibility of something very bad happening in the future is growing bigger.

I still consider getting a hardware wallet every time every day over anything else and I think it is time we should start encouraging people to buy hardware wallet instead. I can't assure the safety of android framework in the future no more.

[_act_]

This is not only about Android devices but iPhone OS vulnerability was also reported. I can find the topic if you need it, I posted the vulnerability on this forum.

Vulnerabilities can get to all devices that do not have secure element, it is better you get yourself a hardware wallet instead. Let the hardware wallet be open source and reputable.

[Rikafip]

Those of you running your money app and crypto wallets on your Android phones, do you want to keep doing this?

Yes, because I am not using my mobile phone wallet for storing large amount of bitcoin and instead I only have no more than $200 worth of it at any given moment, for everyday expenses.

For everything else, I use hardware wallet.

[DubemIfedigbo001]

There are several vulnerabilities fixed by android this month alone as contained in their December bulletin, although CVE-2025-48633 and CVE-2025-48572 appears to be two high severity vulnerabilities, if you go through the bulletin, you'll see there are critical ones that were fixed too. like you said, people need to update their device.

This could be helpful: Learn how to find and update your Android version.

I still consider getting a hardware wallet every time every day over anything else and I think it is time we should start encouraging people to buy hardware wallet instead. I can't assure the safety of android framework in the future no more.

Hardware wallets are fine and the best, but if it is not available you can use a computer, make sure it is air gapped and use it for your cold storage which you would only use to sign your transactions. As long as the device does not go online and isn't tampered by a third party, it is very secured as well.

[Kasabus]

I’m an Android user too and I wasn’t aware of this vulnerability, but even then I’m not really scared about my wallets getting compromised since I only keep limited funds there. Most of my crypto is on a hard wallet anyway. What worries me more is the other information on my phone, stuff that’s worth way more than the small amount of crypto I keep like my details, photos, and other important files. If someone spies on my device and gets access to those, that’s something I’d have a hard time accepting.

(By the way, my device is updated to the latest version.)

[Somegory]

I’m an Android user too and I wasn’t aware of this vulnerability, but even then I’m not really scared about my wallets getting compromised since I only keep limited funds there. Most of my crypto is on a hard wallet anyway. What worries me more is the other information on my phone, stuff that’s worth way more than the small amount of crypto I keep like my details, photos, and other important files. If someone spies on my device and gets access to those, that’s something I’d have a hard time accepting.

(By the way, my device is updated to the latest version.)

That's the thing with these Android phones, you won't even know that they are vulnerable until Google found them first, how ridiculous is that? If this isn't scary I don't know what is.

This is why you can't store private information on smartphones anymore, don't even take screenshots if you don't want them scattered around the internet, also don't record videos that you don't want to be revealed online.

Till kingdom comes some people still can't figure out how their nudes was exposed even when they are prepared to naturalise any way that the nudes can get leaked.

[OcTradism]

I still consider getting a hardware wallet every time every day over anything else and I think it is time we should start encouraging people to buy hardware wallet instead. I can't assure the safety of android framework in the future no more.

It is your good strategic change for long term storage of your bitcoin and cryptocurrencies as hardware wallets are best to store your coins. There are important things to know for your purchases of hardware wallet.

It's must be open-source.
It's must be good historically in security and products.

People also need to know how to buy hardware wallets.
[LIST] Open Source Hardware Wallets
[GUIDE] How to buy a Hardware Wallet the right way

They can type a wallet name and get reviews there.
https://walletscrutiny.com/

[joniboini]

That's the thing with these Android phones, you won't even know that they are vulnerable until Google found them first, how ridiculous is that? If this isn't scary I don't know what is.

To be fair, zero day exploits exist in basically any product. I'm sure you can find other zero-day exploits on other phones, laptops, etc. Google doesn't have to be the one who found the bug either. That being said, I agree that their security needs improvement. People shouldn't use phones for long-term storage unless they disconnect everything from the internet. Being careful and aware that clicking random links is dangerous is a good step for the average joe.

[salad daging]

OP is there a link about this news? I would like to read the article, because this crypto wallet vulnerability on android phones is very worrying.

I still consider getting a hardware wallet every time every day over anything else and I think it is time we should start encouraging people to buy hardware wallet instead. I can't assure the safety of android framework in the future no more.

It is your good strategic change for long term storage of your bitcoin and cryptocurrencies as hardware wallets are best to store your coins. There are important things to know for your purchases of hardware wallet.

I always use hardware wallets to store my bitcoins long term for much better security, preferring to spend about $50 - $100 on hardware wallets rather than free wallets (not to demonize free wallets but just for extra security).

I believe hot wallets on android or on PC always have vulnerabilities that we don't realize it can be an error from ourselves that the device has been compromised.

[Satofan44]

All operating systems, browsers and devices have zero-day vulnerabilities that have not been discovered. So does each hardware wallet. Perhaps you should refrain from talking about topics in which you have no real knowledge.

This is not only about Android devices but iPhone OS vulnerability was also reported. I can find the topic if you need it, I posted the vulnerability on this forum.

OP is an idiot. But hey at least Charles-Tim merited it, in the future he may include this spammer into his DefaultTrust list too.  

Vulnerabilities can get to all devices that do not have secure element, it is better you get yourself a hardware wallet instead. Let the hardware wallet be open source and reputable.

The secure element can also have vulnerabilities. It reduces some of the attack surface, but many kinds of attacks are still possible. Therefore the correct thing would be to say that devices with secure element are better, but neither those are not invulnerable. The way that you have written has an underlying implication that devices with secure elements can't be exploited.

I believe hot wallets on android or on PC always have vulnerabilities that we don't realize it can be an error from ourselves that the device has been compromised.

Wrong. The hardware wallets also always have vulnerabilities and different kinds of attacks are possible. Don't exclude one group when something applies to everything. Your seed phrase on your hardware wallet could be compromised, the hacker could be sitting on it for years and waiting for the right or a better opportunity to strike. This is true for any type of device.

[sokani]

OP is there a link about this news? I would like to read the article, because this crypto wallet vulnerability on android phones is very worrying.

Here you go.

https://www.phonearena.com/news/two-serious-vulnerabilities-make-the-latest-android-security-update-one-you-cant-ignore_id176416

Op can still share his source as well.

It is worth noting that the severity of the attack that can be carried out through these vulnerabilities is not limited to crypto wallets. A hacker can do more harm than one can imagine. That's why the United States Cybersecurity Agency is on red alert following the update from Google about these security updates.

[FirmWars]

The vulnerability is becoming alarming now like you said and it's yet not everyone can afford switching from from android devices to other safe device like the hardware wallet, also these attacks are not even targeted on only the android users but on every device as long as your device is used every day for different internet activities, browsing different website, downloading different files and softwares and many more. All those activities put the device at risk, hardware is better off but it's not easily accessible to most people.

[CryptSafe]

It would be best if we use an Android phone with no apps installed on it, but only your wallet app, and the internet only when you want to make any transfer. This method is safe and secure for the time being, and one should not use such devices for any purpose except for their wallet services. No phone call with it, no internet surfing with it, no chat app with it, such a phone should just be for your wallet. I practice it, and it has been very safe with me ever since my first experience.

[nakamura12]

Those of you running your money app and crypto wallets on your Android phones, do you want to keep doing this?

Yes, because I am not using my mobile phone wallet for storing large amount of bitcoin and instead I only have no more than $200 worth of it at any given moment, for everyday expenses.

For everything else, I use hardware wallet.

I would also do the same although not for storing huge amount of money if ever I have but since I don't have huge amount of money and even if I only have small amount is that it won't stay in the wallet in my Android mobile device for too long but only for receiving and sending. I only use it as a secondary wallet and not the main wallet. As stated in OP that the mobile device that it isn't completely safe running crypto wallets.

[PrivacyG]

It is almost like the Smart phone industry combined in strategies driven by consumerism are a really bad thing to ever consider 'Secure'.  They come filled up with Bloatware, they have out dated Security after at MOST a few years, their Operating System is not Open Source and the users tend to install a large variety of Applications and Games, many tend to Root their devices et cetera.  They are a risk I would never be able to assume particularly for files I would not want other Parties to see or know about and particularly for large amounts of Bitcoin.

[Mia Chloe]

~snip

Actually I'll rate android over iOS any time and day. The biggest upside android has over iOS is that it is open source however sadly every day that passes, as android progresses it seems to be getting less open source. Even if these updates are important they may not be effective if you are a careless user especially in terms of visiting random sites.

I've seen a few persons who make use of old rooted devices and still hasn't had a single spyware or hack issue for a couple years.

[Stalker22]

I agree that hardware wallets are great, but Im not sure they are the right solution for absolutely everyone out there.

Mobile wallets are good enough for quick buys and small amounts.  If you are using a good app, keep your phone updated, and use common sense, you are probably fine.  The risk is really small.  Most security issues happen because people mess up - like, downloading sketchy apps, clicking on phishing scams, or using ridiculously simple passwords.

Telling everyone to ditch their wallets for expensive hardware just makes it harder for new people to get into crypto.  Its typically safe enough for the average person.  I thionk we should focus on teaching people the basic digital hygiene instead of pushing expensive gadgets.

[OcTradism]

I agree that hardware wallets are great, but Im not sure they are the right solution for absolutely everyone out there.

Each person has own conditions that are different with available conditions of the others so a best Bitcoin wallet is different with different people from knowledge, experience to budget.

A newbie should use different wallet than a senior person with more Bitcoin experience. A person with better finance can more easily buy a hardware wallet while another person with less budget can use free, open-source non-custodial wallet with multisig and still has good security.

How do I choose a Bitcoin wallet?
Choose your Bitcoin wallet.

Mobile wallets are good enough for quick buys and small amounts.

Recommended Bitcoin mobile wallets.

[pawanjain]

CVE-2025-48633: is an information disclosure flaw in the framework layer, and it is rated high severity.
CVE-2025-48572: this is also rated high severity, this could allow a malicious app to execute arbitrary code after gaining initial access.

The second issue seems lesser risky when compared to the first one since it needs the initial access to execute the arbitrary code.
So it depends on the users whether to install such malicious apps or not but the first issue is  frightening.
Having such a high severity issue on the framework layer is concerning and I hope that Google resolves the issue and provides security updates soon.
Having said that, a hardware wallet is by far the best beginner friendly option out there to keep our funds whether it be a newbie or an experienced crypto user.

[DPHOR]

Those of you running your money app and crypto wallets on your Android phones, do you want to keep doing this?

Yes, because I am not using my mobile phone wallet for storing large amount of bitcoin and instead I only have no more than $200 worth of it at any given moment, for everyday expenses.

For everything else, I use hardware wallet.

Desktop wallet not recommended as well?
Because I am using Electrum desktop wallet and since then till now I haven't incurred any hack or breakdown on that wallet, but I hardly used the mobile wallet because I do not trust my phone as I can lose access at any given time, so what I does is to install desktop version of the wallet instead of hardware wallet, although I had to understand Electrum wallet is an Open source code wallet which I am more comfortable with than using any other wallet apart from mobile version of it.