⚠️ TG stickers hide a dangerous 0‑click bug — you don’t even need to tap a sticker.

How it works:

• Attacker sends a crafted sticker — malicious code is tucked inside the animation.
• The sticker slips past TG’s shields — server checks don’t stop the tampered file.
• The app automatically processes the animation — bugs in the rlottie library corrupt program memory.
• Attacker gains arbitrary code execution.

The bright side: TG devs are swapping the unsafe rlottie for a new tlottie, but rollout is gradual. Update your client as soon as the patch drops.

Alert everyone.