OneKey founder warns older iPhones carry chip flaws that threaten crypto seed storage
Using factory-reset older iPhones in airplane mode to store crypto seed phrases remains vulnerable to unpatchable hardware exploits, according to OneKey founder Yishi Wang.
Repurposing an older iPhone as an offline cold wallet may not protect cryptocurrency holdings as effectively as many users assume. According to OneKey founder Yishi Wang, factory-resetting legacy Apple devices and keeping them in airplane mode does not protect against BootROM-level chip vulnerabilities that cannot be resolved through iOS updates. The warning follows multiple public iPhone jailbreak demonstrations over the past two weeks.[1][2]
The hardware flaws span several generations of Apple smartphones. iPhone 4S through iPhone X remain affected by the checkm8 exploit, while iPhone XS, XR, 11 series, and second-generation iPhone SE handsets are subject to usbliter8. Attackers with physical access can leverage specialized USB tools to execute code before iOS boots without needing an internet connection. An unattended or borrowed device could be compromised in an evil maid attack and still appear normal when returned.[1][2]
On models such as the iPhone XS and 11, the vulnerabilities do not grant immediate access to seed phrases on their own because device passcodes and the Secure Enclave provide an added layer of defense. However, Wang noted that short PINs, weak wallet passwords, or outdated software elevate the danger. Attackers who extract an encrypted wallet file can attempt offline password guessing, and vulnerable older software may be susceptible to ChoiceJacking, a prompt-approval technique addressed in iOS 18.4.[1][2]
Wang advised crypto holders relying on vulnerable models to generate completely new seed phrases in a trusted environment and transfer their funds, cautioning that creating a new address under the existing seed is insufficient. Users operating recent, updated iPhones face significantly less risk.[1][2]
Key facts
- OneKey founder Yishi Wang warned that using older, factory-reset iPhones in airplane mode to store crypto seed phrases offline is unsafe due to unpatchable BootROM vulnerabilities.
- iPhone 4S through iPhone X are vulnerable to checkm8, while iPhone XS, XR, 11 series, and second-generation iPhone SE models are vulnerable to usbliter8.
- Attackers with physical access can use specialized USB tools to run code prior to iOS boot without requiring an active internet connection.
- On models such as the iPhone XS and 11, passcodes and the Secure Enclave prevent direct extraction of seed phrases, but offline password guessing remains a risk if encrypted wallet files are extracted.
- Wang cited ChoiceJacking as an additional threat on older software that can approve data-access prompts, an issue Apple resolved in iOS 18.4.
- Affected users are advised to generate new seed phrases in trusted environments and transfer assets, while users with recent and updated iPhones face less concern.
Sources · 2 sources
- WB
Wu Blockchain@WuBlockchainPost on X ·
OneKey Founder: Some Older iPhones Have Unpatchable Chip Vulnerabilities, Posing Risks to Seed Phrase Storage OneKey founder Yishi warned that factory-resetting an older iPhone, enabling airplane mode, and using it to store crypto wallet seed phrases offline may still be unsafe. He noted that iPhone 4S through iPhone X are affected by checkm8, while iPhone XS, XR, 11 series, and second-generation iPhone SE are affected by usbliter8, disclosed earlier this year. These BootROM-level vulnerabilities cannot be fixed through iOS updates. Attackers with physical access and specialized tools may exploit them via USB, even in airplane mode. However, on models such as the XS and 11, these flaws alone do not provide direct access to seed phrases, as device passcodes and the Secure Enclave offer additional protection. Yishi advised affected users to generate entirely new seed phrases in a trusted environment, transfer their assets, use newer devices, keep software updated, and adopt stronger passwords.
Open source - CB
Coin Bureau@coinbureauPost on X ·
⚠️ALARMING: Using an OLD iPhone as a cold wallet may not be as safe as you think, OneKey founder Yishi Wang warns. Following several public iPhone jailbreak demos over the past two weeks, he highlighted a risk for crypto holders. Wiping the device and enabling airplane mode does not remove chip vulnerabilities affecting iPhone 11 and earlier models, including the second-gen SE. The BootROM flaws cannot be fixed through iOS updates. THE RISKS: - A phone accessed while unattended or borrowed may look normal when returned. This is known as an “evil maid” attack. - An attacker could use specialized USB tools to run code before iOS starts. No internet connection is needed. - Outdated software, short PINs and weak wallet passwords could make an attack easier. If an encrypted wallet file is extracted, attackers could keep guessing its password offline. - Yishi cites ChoiceJacking, a separate technique that can approve data-access prompts on vulnerable older software. Apple addressed it in iOS 18.4. Yishi recommends generating a completely new seed in a trusted environment and transferring funds. A new address under the old seed is not enough. Of note, users with recent, updated iPhones have LESS reason for concern.
Open source