OnKey founder: The iPhone 11 and earlier models have hardware vulnerabilities that cannot be fixed through system updates, and it is not recommended to use them for storing mnemonic phrases

OnKey founder Yishi posted on platform X to remind users that using older iPhone models as cold wallets for cryptocurrency assets may pose security risks. The checkm8 vulnerability exists in the BootROM of iPhone 4S to iPhone X, and the usbliter8 vulnerability, which was disclosed in June this year, affects iPhone XS, XR, 11 series, and second-generation SE, all involving the device's low-level boot code, which cannot be fixed through iOS system updates. Once an attacker gains physical access to the device, they can execute code via the USB interface before iOS boots, and turning on airplane mode cannot prevent such attacks.

Yishi advises that iPhone 11 and earlier models are not recommended for storing mnemonic phrases. Users who have used such devices to save mnemonic phrases should generate a brand new mnemonic phrase in a trusted environment and migrate their assets, rather than just changing the wallet address under the original mnemonic phrase. Additionally, users should promptly update their systems, use more complex device and wallet passwords, avoid charging through public USB interfaces, and be vigilant about potential physical attacks during periods when the device is out of their control for extended periods.

Previously, OneKey founder Yishi had posted on platform X suggesting users use iPhones as cold wallets, but only recommended using iPhone 17 or newer models.