Bybit Warned About Telegram Vulnerability on Android

Cryptocurrency exchange Bybit on November 13, 2026, urged Android users to update the Telegram app following the discovery of a vulnerability that could potentially allow attackers to execute third-party code on smartphones. The issue affected recently introduced interactive widgets that bots can send directly in messages. According to the exchange's warning, device compromise could create additional risks for installed cryptocurrency wallets and trading applications.

How researchers discovered the Telegram vulnerability

On November 9, Telegram expanded bot capabilities, allowing the sending of small interactive applications within chats. Such widgets can display games, polls, and other elements without redirecting to external sites.

By November 11, specialists from V12 published a video demonstration of the potential vulnerability. In the recording, after interacting with a bot on an Android smartphone, the "Calculator" app launched automatically.

Such behavior indicates the possibility of Remote Code Execution (RCE), where a program executes commands beyond intended restrictions. Initially, researchers did not disclose the technical details of the attack, so it was not possible to independently confirm all conditions for its exploitation.

Telegram reported the issue has been fixed

In response to V12's publication, Telegram representatives stated that the discovered bug has already been fixed, and the corresponding update was distributed to users on November 11.

According to a technical analysis, the fixes were included in Telegram for Android version 13.2.2. Developers also enhanced the isolation of interactive widgets to limit their access to other components of the app.

At the time of Bybit's warning, there were no confirmed reports of this vulnerability being used for real attacks on users. Telegram also did not specify whether a similar issue affected the messenger versions for iOS and desktop computers.

Why the vulnerability could affect cryptocurrency owners

The potential danger is related to the fact that users often install Telegram, cryptocurrency wallets, and trading platform applications on a single smartphone. If the device is successfully compromised, attackers could theoretically attempt to access confidential data from other services.

A separate risk is the possible access to data from active Telegram sessions. In such a scenario, two-factor authentication may not necessarily prevent the takeover of an already authorized account. However, there is no confirmation that the discovered bug was actually used for such attacks.

Bybit recommended users install the latest version of Telegram, avoid interacting with unknown bots and suspicious links, and verify information through the exchange's official channels.

Amid the development of built-in cryptocurrency tools in Telegram, the messenger's security remains an important factor for digital asset users.