OneKey founder warns that older iPhones (4S–X) have unpatchable BootROM vulnerabilities that could expose crypto seed phrases stored offline, even in airplane mode.
Regulation & Gov ·
iPhone models from 4S through X harbor unfixable BootROM flaws known as checkm8, while XS, XR, 11 series, and second-generation SE devices are vulnerable to usbliter8, making them potentially unsafe for offline crypto seed phrase storage even when in airplane mode and factory reset. An attacker with physical access and specialized tools could exploit these chip-level vulnerabilities via USB connection according to warnings from OneKey's founder. On newer affected models like the XS and 11, additional protections including device passcodes and the Secure Enclave prevent direct access to seed phrases, though users storing such credentials on vulnerable devices are advised to generate new phrases in a trusted environment, migrate assets, and switch to newer hardware.