Telegram RCE Vulnerability Discovered by CertiK Enables Attacks on Users

Cryptowire Uncovers Telegram Vulnerability

On April 9, CertiK, a blockchain security platform, identified a critical vulnerability in Telegram that could potentially lead to remote code execution (RCE) attacks. The vulnerability allows hackers to deploy malicious code through specially crafted media files like images or videos.

Details of the Vulnerability

CertiK described the RCE attack as a high-risk threat in an official post. An RCE vulnerability enables attackers to execute unauthorized code on a remote device, posing significant security risks to users.

Telegram’s Response

Following CertiK’s disclosure, Telegram X disputed the claim, stating that there was no vulnerability in their system. Some users also expressed skepticism, suggesting that the issue was not new to the platform.

Previous Security Incidents

This is not the first time CertiK has reported security concerns related to Telegram. In the past, the platform has faced issues with bot tokens and remote media-related attacks on various application versions.

Potential Impact on Telegram’s IPO

The discovery of this vulnerability comes at a crucial time for Telegram, as the platform considers an initial public offering (IPO) on Wall Street. Despite its growing user base and revenue, Telegram’s association with cybersecurity issues, including its alleged use in illicit activities, could pose challenges for its public listing.

Telegram’s Monetization Strategy

To enhance user monetization, Telegram has integrated cryptocurrency for in-app ad purchases. This move aligns with the platform’s efforts to diversify its revenue streams and attract investors.