Huo Xing Finance reports that Yishi, founder of OnKey, posted on X platform warning that using older iPhone models as cryptocurrency cold wallets may pose security risks. The checkm8 vulnerability present in the BootROM of iPhone 4S through iPhone X, and the usbliter8 vulnerability disclosed in June—which also affects iPhone XS, XR, 11 series, and second-generation SE—both involve the device’s low-level boot code and cannot be patched via iOS updates. After gaining physical access to the device, attackers can execute code via USB before iOS boots, and enabling airplane mode does not prevent such attacks.
Yishi recommends that iPhone 11 and earlier models should not be used to store recovery phrases. Users who have already stored their recovery phrases on such devices should generate a completely new recovery phrase in a trusted environment and migrate their assets, rather than simply changing the wallet address under the original recovery phrase. Additionally, users should promptly update their system software, use more complex device and wallet passwords, avoid charging via public USB ports, and remain vigilant against potential physical attacks during periods when their device is out of their control.
Previously, OneKey founder Yishi posted on X recommending users use an iPhone as a cold wallet, but only suggested iPhone 17 or newer models.
OnKey Founder Warns iPhone 11 and Older Models Have Unpatchable Hardware Vulnerabilities
MarsBitShare
Summary
OnKey founder Yishi highlighted in the latest crypto updates that iPhone 11 and older models contain unpatchable hardware vulnerabilities such as checkm8 and usbliter8. These flaws allow attackers to execute code before iOS boots, even when the device is in Airplane Mode. Yishi urged users to avoid storing mnemonic phrases on these devices and to upgrade to newer models. KuCoin updates recommend that traders review their security practices to safeguard their digital assets.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.