Ledger's Donjon team exposed a MediaTek Android flaw enabling attackers to extract PINs and wallet seed phrases in seconds.