Bybit Warns Android Users About Telegram Security Vulnerability After Remote Code Execution Report

Bybit security advisory warning cryptocurrency users about a Telegram Android vulnerability and the importance of updating the messaging application.

Cryptocurrency exchange Bybit issued a security advisory on November 13, urging users to update Telegram for Android immediately after researchers disclosed a vulnerability that could potentially expose other applications on compromised devices. The warning highlights the security risks facing cryptocurrency users who rely on messaging platforms for communication and access to digital asset services.

Bybit cautioned that a compromised Android device could create risks beyond Telegram itself, potentially affecting other applications installed on the same device. The exchange recommended several precautionary measures, including installing the latest Telegram version, avoiding unfamiliar chats and unknown bots, and refusing to open suspicious links.

The advisory also emphasized the importance of relying exclusively on verified official communication channels. The recommendations are particularly relevant to cryptocurrency users, whose devices may contain applications used to access wallets, exchanges and other financial services.

Security Researchers Demonstrate Telegram Android Vulnerability

The warning followed a disclosure earlier in the week by security research firm V12, which identified a remote code execution vulnerability involving Telegram's Widgets feature on Android devices.

According to Wu Blockchain the reported demonstration, a message sent through a bot could trigger the launch of the Calculator application on an Android device. The demonstration illustrated how the vulnerability could potentially allow an attacker to execute actions on a targeted device through Telegram's messaging functionality.

Remote code execution vulnerabilities are particularly significant because they can allow unauthorized code or commands to run on a device under certain conditions. In a cryptocurrency security context, weaknesses affecting mobile devices can create additional concerns when those devices are also used to access financial applications or store sensitive information.

Telegram subsequently confirmed that the vulnerability had been fixed and that an update addressing the issue had been rolled out to users. Bybit's November 13 advisory reinforced the need for users to install the latest available version rather than continue using potentially vulnerable software.

Bybit Outlines Precautionary Measures for Users

In its security guidance, Bybit highlighted several steps intended to reduce exposure to suspicious activity involving Telegram for Android.

The exchange urged users to:

Update Telegram to the latest version immediately, avoid unfamiliar conversations and unknown bots, refrain from opening suspicious links, and communicate only through verified official channels.

These recommendations address common risks associated with malicious messages and potentially compromised applications. The warning about other applications is particularly important because mobile devices frequently serve as access points for multiple digital services, including cryptocurrency wallets and trading platforms.

Binance Previously Warned About an iOS Security Vulnerability

Bybit's advisory followed a separate security warning from Binance on November 10 concerning an iOS vulnerability known as worse_query.

Binance warned that the vulnerability could allow malicious applications to access files belonging to other applications on an affected device. Such access could potentially expose highly sensitive information, including cryptocurrency wallet seed phrases, private keys and account login credentials.

The two warnings involved different mobile operating systems and separate security issues. The Telegram vulnerability concerned Android and its Widgets feature, while the worse_query vulnerability identified by Binance involved iOS application file access.

Both incidents nevertheless underscore the importance of mobile device security for cryptocurrency holders. Sensitive wallet information and exchange credentials can become vulnerable when weaknesses in applications or operating systems provide opportunities for unauthorized access.

Telegram has confirmed that the Android vulnerability was fixed and that the relevant update was distributed to users. Bybit's November 13 advisory urged users to install the latest version, avoid suspicious links and unknown bots, and rely only on verified official channels. Binance's separate November 10 warning concerned the potential exposure of wallet seed phrases, private keys and login credentials through the iOS worse_query vulnerability.

Writer: Victoria Hale
Technology & Blockchain Writer

Victoria Hale writes about blockchain technology, digital infrastructure, and the intersection of emerging technologies with finance. Her articles explore how new protocols and systems are shaping the evolving digital economy.

She prioritises clarity and accuracy when explaining technical developments to a general audience.

Check out other news and articles on Google News

Disclaimer:

The articles on Hokanews are here to keep you updated on the latest buzz in crypto, tech, and beyond—but they’re not financial advice. We’re sharing info, trends, and insights, not telling you to buy, sell, or invest. Always do your own homework before making any money moves.
Hokanews isn’t responsible for any losses, gains, or chaos that might happen if you act on what you read here. Investment decisions should come from your own research—and, ideally, guidance from a qualified financial advisor. Remember: crypto and tech move fast, info changes in a blink, and while we aim for accuracy, we can’t promise it’s 100% complete or up-to-date.