EngageLab SDK Flaw Exposed 50M Android Users, Including 30M Crypto Wallets

A critical vulnerability in the EngageLab Android SDK, now patched, could have exposed private data for up to 50 million Android users, including 30 million cryptocurrency wallet holders. This flaw allowed apps on the same device to bypass the Android security sandbox, granting unauthorized access to sensitive information.

• Vulnerability: Critical flaw in the widely used EngageLab Android SDK.
• Mechanism: Allowed applications running on the same device to bypass the Android security sandbox.
• Impact: Enabled unauthorized access to private data. Affected up to 50 million Android users, with an estimated 30 million cryptocurrency wallet users specifically at risk due to this exposure.
• Status: The vulnerability has been patched.

Defense: Users should ensure all Android applications are updated to their latest versions. Developers utilizing the EngageLab SDK must update to the patched version immediately.

Source: https://thehackernews.com/2026/04/engagelab-sdk-flaw-exposed-50m-android.html