Turns out iPhones are even less reliable than Android phones
OneKey founder: iPhone 11 and earlier models have hardware vulnerabilities that cannot be fixed through system updates and are not recommended for storing recovery phrases
OneKey founder Yishi posted a warning on X that using older iPhones as cold wallets for crypto assets may pose security risks. The checkm8 vulnerability in the BootROM affects iPhone 4S through iPhone X. The usbliter8 vulnerability, disclosed this June, affects the iPhone XS, XR, and 11 series, as well as the second-generation SE. All involve low-level boot code and cannot be fixed through iOS system updates. After gaining physical access to a device, an attacker can execute code via the USB port before iOS starts. Enabling Airplane Mode cannot prevent this type of attack.
Yishi advised against using iPhone 11 and earlier models to store recovery phrases. Users who have already saved recovery phrases on such devices should generate new ones in a trusted environment and transfer their assets, rather than simply changing the wallet address associated with the original recovery phrase. Users should also keep their systems up to date, use more complex device and wallet passwords, avoid charging through public USB ports, and be alert to the risk of physical attacks while their devices are out of their control for extended periods.
Previously, OneKey founder Yishi had posted on X recommending that users use an iPhone as a cold wallet, but only an iPhone 17 or newer model. $SOL
OneKey founder: iPhone 11 and earlier models have hardware vulnerabilities that cannot be fixed through system updates and are not recommended for storing recovery phrases
OneKey founder Yishi posted a warning on X that using older iPhones as cold wallets for crypto assets may pose security risks. The checkm8 vulnerability in the BootROM affects iPhone 4S through iPhone X. The usbliter8 vulnerability, disclosed this June, affects the iPhone XS, XR, and 11 series, as well as the second-generation SE. All involve low-level boot code and cannot be fixed through iOS system updates. After gaining physical access to a device, an attacker can execute code via the USB port before iOS starts. Enabling Airplane Mode cannot prevent this type of attack.
Yishi advised against using iPhone 11 and earlier models to store recovery phrases. Users who have already saved recovery phrases on such devices should generate new ones in a trusted environment and transfer their assets, rather than simply changing the wallet address associated with the original recovery phrase. Users should also keep their systems up to date, use more complex device and wallet passwords, avoid charging through public USB ports, and be alert to the risk of physical attacks while their devices are out of their control for extended periods.
Previously, OneKey founder Yishi had posted on X recommending that users use an iPhone as a cold wallet, but only an iPhone 17 or newer model. $SOL