ChainThink reports that on November 1, OneKey founder Yishi warned that iPhone 11 and earlier models have a hardware vulnerability that cannot be fixed via system updates and are not recommended for storing seed phrases.
iPhone 4S through iPhone X are affected by the BootROM vulnerability checkm8; the usbliter8 vulnerability, disclosed in June this year, impacts iPhone XS, XR, 11 series, and the second-generation SE.
After gaining physical access to the device, an attacker can execute code via the USB interface before iOS boots up, and enabling airplane mode cannot prevent the attack.
Yishi recommends that users who have stored their mnemonic phrases using such devices should generate a completely new mnemonic phrase in a trusted environment and migrate their assets, rather than simply changing the wallet address under the original mnemonic phrase.
He also recommended keeping systems up to date, using more complex device and wallet passwords, avoiding charging via public USB ports, and being aware of the risk of physical attacks when devices are out of personal control for extended periods.