OneKey founder Yishi warned that factory-resetting an older iPhone, switching on airplane mode and storing crypto wallet seed phrases offline may not make them safe. The checkm8 vulnerability affects iPhone 4S through iPhone X, while usbliter8 affects iPhone XS, XR, the iPhone 11 series and the second-generation iPhone SE. Both flaws sit at the BootROM level and cannot be fixed through iOS updates.
Why it matters
An attacker with physical access and specialized tools may exploit the flaws over USB, even when a device is in airplane mode. Offline use therefore does not remove the hardware-level risk.
Market impact
The vulnerabilities alone do not directly expose seed phrases on models such as the XS and 11, where device passcodes and the Secure Enclave provide additional protection. Yishi advised affected users to generate new seed phrases in a trusted environment, transfer their assets, move to newer devices, keep software updated and use stronger passwords.
Frequently asked questions
-
Which iPhone models does the checkm8 vulnerability affect?
The checkm8 vulnerability affects iPhone 4S through iPhone X, according to OneKey founder Yishi.
-
Which iPhones are affected by usbliter8?
The usbliter8 vulnerability affects iPhone XS, XR, the iPhone 11 series and the second-generation iPhone SE.
-
Can iOS updates fix these iPhone vulnerabilities?
No. Both flaws are at the BootROM level and cannot be fixed through iOS updates.
-
Does airplane mode prevent an attacker from exploiting the flaws?
No. An attacker with physical access and specialized tools may exploit the flaws over USB, even when the phone is in airplane mode.
-
Do the vulnerabilities directly reveal seed phrases on newer affected iPhones?
Not by themselves on models such as the XS and 11. Device passcodes and the Secure Enclave provide additional protection.
WuBlockchain