OneKey Founder Warns Older iPhones Pose Risks to Crypto Wallets

The issue centers on the BootROM, where the processor’s initial startup instructions are stored. Because this code is hardwired, standard iOS updates cannot fix vulnerabilities like checkm8, which affects the iPhone 4S through the iPhone X, or usbliter8, which impacts the iPhone XS, XR, iPhone 11, and the second-generation SE. These exploits allow attackers with physical access and specialized equipment to run unauthorized code before the operating system even loads.

While hardware-level access does not grant immediate entry to encrypted wallet data, it creates a dangerous entry point. An attacker could potentially bypass passcode restrictions or exploit weak application passwords to extract sensitive information. Wang highlights the risk of "evil maid" attacks, where a device is tampered with while left unattended, such as in a hotel room or while charging. Given these permanent flaws, users relying on older devices for cold storage should generate entirely new recovery phrases and migrate their assets to more secure, updated hardware. For those who must continue using smartphones for crypto, Wang suggests using models newer than the iPhone 11 and employing robust, alphanumeric passcodes alongside Apple’s Lockdown Mode.