Security Concerns for Cryptocurrency Investors Using Older iPhone Models

The founder of OneKey, Yishi, has raised alarms over security vulnerabilities in older iPhone models, warning that these issues could jeopardize the safety of cryptocurrency wallet seed phrases. He specifically cautioned that investors employing older iPhones as cold wallets should be particularly vigilant.

Identified Vulnerabilities

Yishi pointed out that iPhone models ranging from the 4S to the iPhone X are susceptible to the checkm8 vulnerability. Additionally, the iPhone XS, XR, iPhone 11 series, and second-generation iPhone SE are impacted by the usbliter8 vulnerability, which was unveiled in June 2026. Both vulnerabilities reside at the BootROM level, responsible for initiating the device’s boot process, making them impervious to standard iOS updates. If attackers gain physical access to these devices, they can exploit these vulnerabilities via usb using specialized tools, rendering solutions like factory resets or enabling airplane mode ineffective.

Implications for Cryptocurrency Wallets

Despite the identified vulnerabilities, Yishi emphasized that they do not permit direct access to cryptocurrency wallet recovery phrases. The device’s password and Apple’s Secure Enclave security system continue to provide a layer of protection, particularly for models like the iPhone XS and iPhone 11. However, risks increase with extended exposure to unauthorized third parties or if the device undergoes physical tampering.

Recommendations for Users

To mitigate potential security risks, Yishi advised users with recovery phrases stored on the affected iPhone models to generate entirely new seed phrases in a secure environment. Additionally, he recommended transferring cryptocurrency assets to these newly established wallets. Keeping operating systems current, using newer devices, and employing strong password practices are also essential steps suggested by Yishi.

Note: This information is not investment advice.