OnKey Founder: iPhone 11 and Earlier Models Have Hardware Vulnerabilities That Cannot Be Fixed via System Updates, Not Recommended for Storing Mnemonics

Odaily reports: OnKey founder Yishi posted a warning on X platform that using older iPhones as cold wallets for crypto assets may pose security risks. iPhone 4S through iPhone X are affected by the checkm8 vulnerability in BootROM, and the usbliter8 vulnerability disclosed in June this year affects iPhone XS, XR, 11 series, and second-generation SE, all of which involve low-level boot code that cannot be fixed through iOS system updates. After gaining physical access to a device, attackers can execute code via the USB interface before iOS boots, and airplane mode cannot prevent such attacks.Yishi recommends against using iPhone 11 and earlier models for storing mnemonics. Users who have already used such devices to store mnemonics should generate entirely new mnemonics in a trusted environment and migrate their assets, rather than merely changing the wallet address under the original mnemonic. In addition, users should promptly update their systems, use more complex device and wallet passwords, avoid charging via public USB ports, and remain vigilant against physical attacks during periods when the device is out of their control for extended periods.Previously, OneKey founder Yishi had posted on X platform recommending users use iPhone as a cold wallet, but only recommended iPhone 17 or newer models.