We're aware of claims spread on German social media about GrapheneOS being exploited. We looked into it in case there was substance behind it. OS and hardware security isn't actually much of a factor in the story. Instead, the central claim is disk encryption with a strong passphrase can be cracked. A story about a GrapheneOS device in After First Unlock state being exploited would be believable. Similarly, a story that a device with a PIN kept for years eventually having it brute forced via a secure element exploit would be believable. The story is neither of those things and is not credible. These claims likely originate from documents with omissions and misrepresentations. For example, someone may use the same password for their smartphone and Windows/Linux laptop. Online brute force attacks can be performed based on imaging the laptop and eventually the phone can be unlocked with it. It isn't believable a device in Before First Unlock state with a strong passphrase had all of the data extracted without obtaining the passphrase elsewhere. It would mean the disk encryption algorithms themselves have been cracked. It's not the first of these stories where the details don't add up. A bunch of companies in Europe sell devices with forks of GrapheneOS. These don't keep up with our updates and have problematic changes. These are regularly misrepresented as being GrapheneOS by law enforcement. One using a subset of our code was an FBI honey pot: darknetdiaries.com/episode/1… Companies using our code frequently attack GrapheneOS with inaccurate claims. They aim to mislead people into believing it isn't safe and to use their products instead. We used to believe this was primarily being done for profit but now believe multiple of these companies are likely also honey pots. Operation Trojan Shield (ANOM) involved selling backdoored phones to criminals. These phones were regularly marketed as being based on GrapheneOS. In some cases, the marketing claimed the phones were GrapheneOS. Due to this, we had told people it was a scam before it came out it was a honey pot. Many European law enforcement agencies participated in this operation. Their operation put GrapheneOS developers at risk of being targeted by criminals by selling backdoored products as being based on GrapheneOS. Some of the people who purchased these harassed us due to baselessly blaming us for it. These agencies want people to use sketchy products instead of GrapheneOS, iPhones and high quality end-to-end encrypted messaging apps. It's in their interest to mislead people into believing they should be buying sketchy devices with poor security whether or not they work with governments. They want people to believe disk encryption and end-to-end encryption messaging don't work. They simultaneously claim not having mandatory backdoors prevents doing their jobs. They never had a near equivalent to mind reading before but now somehow private thoughts and conversations are unacceptable.