OneKey Founder Warns of Chip-Level Vulnerabilities in Older iPhones

The founder of OneKey, a prominent hardware wallet provider, has issued a critical security warning regarding the use of older Apple devices for storing cryptocurrency mnemonic phrases. Yishi, the founder, highlighted that users relying on an iPhone 11 or earlier models as "cold storage" devices are exposed to hardware-level risks that cannot be mitigated by software updates. The warning emphasizes that common security practices, such as enabling airplane mode or erasing device data, are insufficient against exploits targeting the physical architecture of these specific chipsets.

Hardware Vulnerabilities: Checkm8 and Usbliter8

The core of the security threat lies in BootROM vulnerabilities, specifically identified as checkm8 and usbliter8. Unlike typical software bugs, these flaws exist within the read-only memory of the hardware, meaning Apple cannot patch them through iOS system updates. These vulnerabilities affect a wide range of devices, including the iPhone XS, XR, 11 series, and the second-generation iPhone SE.

• Physical Access Risk: An attacker with physical possession of the device can exploit these flaws.
• DFU Mode Exploitation: By connecting a specialized USB device while the phone is in Device Firmware Update (DFU) mode, malicious code can be executed before the operating system even boots.
• Ineffectiveness of Software: Because the breach occurs at the hardware level, traditional mobile security measures are bypassed.

The Illusion of Air-Gapped Security

Many cryptocurrency holders repurpose old smartphones by wiping the data and keeping them offline to act as a DIY cold wallet. However, Yishi pointed out that airplane mode is ineffective against these specific hardware exploits. If a device containing a private key or seed phrase is lost or stolen, an attacker with the necessary technical tools can potentially extract the sensitive information despite the device being offline.

"The practice of erasing data on older iPhones, turning on airplane mode, and using them solely as mnemonic word storage devices is not as secure as most people imagine", Yishi stated.

BootROM refers to the first code that runs on an iPhone upon startup; since it is hard-coded into the chip during manufacturing, it remains unchangeable throughout the device's lifespan.

Users are strongly advised to migrate their mnemonic words and digital assets to more secure environments, such as dedicated hardware wallets or newer smartphone models (iPhone 12 and later) that utilize updated chip architecture resistant to these specific boot-level exploits. As the value of the blockchain ecosystem continues to grow, maintaining rigorous standards for private key storage remains the primary defense against sophisticated physical and digital theft.