OneKey founder Yishi, a manufacturer of cryptocurrency hardware wallets, warned that security vulnerabilities found in older iPhone models, which cannot be fixed with software updates, could compromise the seed phrases of cryptocurrency wallets. Yishi specifically mentioned that investors using older iPhones as cold wallets without connecting them to the internet should be cautious.
According to Yishi, iPhone models from the 4S to the iPhone X are affected by the previously discovered checkm8 vulnerability, while the iPhone XS, XR, iPhone 11 series, and second-generation iPhone SE models have the usbliter8 vulnerability, announced in June 2026. Both vulnerabilities are located at the BootROM level, which manages the device’s boot process, and therefore cannot be completely fixed with iOS updates. Attackers can exploit these vulnerabilities via USB connection if they have physical access to the devices and use specialized tools. Therefore, restoring the phone to factory settings or putting it in airplane mode does not eliminate these risks.
However, Yishi emphasized that these vulnerabilities alone do not mean that cryptocurrency wallets gain direct access to recovery phrases. Device passwords and Apple’s Secure Enclave security system continue to provide additional protection, especially on models like the iPhone XS and iPhone 11. However, prolonged exposure to third parties or physical tampering with the device can create additional security risks for cryptocurrency assets.
The founder of OneKey advised users who have stored recovery phrases on affected iPhone models to create entirely new seed phrases in a trusted environment and transfer their cryptocurrency assets to these newly created wallets. Yishi also suggested using newer devices, keeping operating systems up-to-date, and employing strong passwords.
*This is not investment advice.
Continue Reading: Important Notice for Users of These iPhone Models: Your Bitcoin and Altcoins May Be at Risk