OneKey founder warns older iPhones have unpatchable chip vulnerabilities
OneKey founder Yishi has warned that iPhone 11 and earlier models carry unfixable hardware flaws that could expose crypto seed phrases to attackers with brief physical access.
The warning centers on two known exploits targeting the BootROM, a foundational layer of code etched directly into iPhone chips that cannot be patched through software updates. The first exploit, checkm8, affects iPhone models from the 4S through the X, while the newer usbliter8 impacts the iPhone XS, XR, 11 series, and second-generation iPhone SE.
According to Yishi, an attacker would need only brief physical access to the device to execute code before iOS starts up. The method involves putting the iPhone into DFU mode and connecting a specialized USB tool, leaving no trace of the intrusion.
Attack method and protections
The attack bypasses the operating system's defenses by exploiting the BootROM before the system boots up. While device passcodes and the Secure Enclave still provide some protection, their effectiveness depends on strong passwords and updated wallet applications.
The core recommendation is blunt. Yishi advised affected users to abandon their current seed phrases entirely.
Recommended actions
Yishi urged users to create new seed phrases on secure devices and transfer their assets to them, noting that generating fresh addresses under a compromised phrase still exposes the same master key. He also recommended using strong alphanumeric passcodes, enabling Lockdown Mode, and avoiding public USB ports.
The USB advice directly relates to how the exploits work, as limiting where the phone gets plugged in reduces potential exposure. Many crypto holders rely on legacy devices for wallet management, sometimes treating old phones as homemade cold storage, which these vulnerabilities now compromise.
Legacy hardware concerns
The checkm8 exploit has been known since 2019, but the June 2026 disclosure of usbliter8 expanded the affected range to include newer models. This means devices many users considered current now face the same security issues as phones from a decade earlier.
Yishi's warning highlights a broader issue: many crypto holders trust legacy hardware without considering fundamental vulnerabilities at the chip level. The BootROM flaws challenge the assumption that wiped old phones can serve as secure cold storage solutions.
Related
