Cryptocurrency exchange Bybit issued a security advisory on November 13, warning Android users about a vulnerability in the Telegram messaging application that could expose other installed apps to potential cyberattacks. The exchange urged users to update Telegram immediately and avoid interacting with unknown chats, unverified bots, or suspicious external links.
The warning follows a disclosure from security research firm V12, which identified a remote code execution flaw linked to Telegram’s Widgets feature. Researchers demonstrated that a malicious bot message could launch secondary applications on Android devices, including the operating system’s calculator. Although Telegram representatives confirmed that the issue was resolved through a corrective update, security specialists stressed that users must manually download the latest version from official app stores to apply the patch.
Bybit emphasized that the flaw represents a significant operational risk for digital asset holders who rely on messaging platforms for coordinating crypto activity. A compromised device could potentially put other applications at risk, raising concerns about the safety of wallet credentials, private keys, and institutional access data.
The alert follows a similar warning from Binance on November 10, which flagged vulnerabilities on Apple iOS devices. That issue, named worse_query, could have allowed malicious applications to access private files belonging to other platforms, increasing the potential risk to cryptocurrency wallet seed phrases and sensitive credentials. Together, the incidents highlight the growing importance of rigorous software update protocols and credential management across the digital financial industry.
