Trust Wallet Screen Lock Bypass Vulnerability in Version 8.45

A vulnerability in Trust Wallet for Android, specifically in version 8.45, allows physically proximate attackers to bypass the lock screen and access the wallet balance without authentication. This issue arises from insufficient validation of the screen lock mechanism, which fails to consistently enforce the in-app PIN when the app is accessed through the recent apps screen.

Impact

Exploitation of this vulnerability allows unauthorized access to the wallet balance by bypassing the lock screen authentication.

Reproduction

To reproduce this vulnerability, open Trust Wallet and then access the recent apps screen. Without entering the PIN, repeatedly open Trust Wallet from the recent apps. Eventually, the lock screen will be bypassed, allowing access to the wallet balance.