ANDROID KEYSTORE WITHOUT PASSCODE in CipherProvider class

[sachinmandhare1990]

the application makes use of a Keystore with no
passcode set. Android KeyStores can be configured to require a password or passphrase
before granting access to its contents.
The configuration means that should attackers gain control of the device they may be able
to extract any secret keys embedded in the application.

[man3kin3ko]

the application makes use of a Keystore with no passcode set. Android KeyStores can be configured to require a password or passphrase before granting access to its contents. The configuration means that should attackers gain control of the device they may be able to extract any secret keys embedded in the application.

Can you please provide steps to reproduce your attack and show any impact?