OnKey Founder Warns iPhone 11 and Older Models Have Unpatchable Hardware Flaws

ME News reported on Nov. 1 (UTC+8) that OnKey founder Yishi warned on X that using older iPhones as cryptocurrency cold wallets may pose security risks. The checkm8 vulnerability in the BootROM affects iPhone 4S through iPhone X. The usbliter8 vulnerability, disclosed in June, also affects iPhone XS, XR, the iPhone 11 series and the second-generation iPhone SE. These are low-level boot code flaws that cannot be patched through iOS updates. With physical access to a device, attackers can execute code over USB before iOS boots; airplane mode does not prevent such attacks. Yishi advised users not to store recovery phrases on iPhone 11 and earlier models. Users who have already done so should create entirely new recovery phrases in a trusted environment and migrate their assets, rather than simply changing wallet addresses under the original phrase. Users should also update their systems promptly, use stronger device and wallet passwords, avoid charging through public USB ports, and stay alert to physical attacks when devices are outside their control. Yishi previously recommended using iPhones as cold wallets on X, but only iPhone 17 or newer models. Source: ChainCatcher.