OnKey Founder Warns iPhone 11 and Older Models Have Unfixable Hardware Vulnerabilities

ME News reports that on November 1 (UTC+8), Yishi, founder of OnKey, posted on X cautioning that using older iPhone models as cryptocurrency cold wallets may pose security risks. The checkm8 vulnerability embedded in the BootROM affects iPhone 4S through iPhone X, while the usbliter8 vulnerability, disclosed in June this year, extends to iPhone XS, XR, iPhone 11 series, and the second-generation SE—all of which involve low-level boot code that cannot be patched via iOS updates. After gaining physical access to the device, attackers can execute code via USB before iOS boots, and enabling airplane mode does not prevent such attacks. Yishi recommends that users avoid storing recovery phrases on iPhone 11 and earlier models. Users who have already stored recovery phrases on such devices should generate entirely new recovery phrases in a trusted environment and migrate their assets, rather than simply changing wallet addresses under the original phrase. Additionally, users should promptly update their systems, use more complex device and wallet passwords, avoid charging via public USB ports, and remain vigilant against potential physical attacks during periods when their devices are out of their control. Previously, Yishi had recommended on X using iPhones as cold wallets—but only for iPhone 17 or newer models. (Source: ChainCatcher)