OneKey founder warns older iPhones have unpatchable chip vulnerabilities

If your crypto seed phrase lives on an aging iPhone, OneKey's founder thinks you should move it. Soon.

On November 1, 2026, Yishi, the founder of OneKey, warned that iPhone 11 series devices and earlier models carry hardware vulnerabilities that no software update can fix. He said these flaws could potentially expose wallet seed phrases to attackers who get their hands on the phone, even briefly.

The warning centers on two known exploits. Both target the BootROM, a layer of the iPhone that most users never think .

Think of the BootROM as the foundation poured under a house before any walls go up. It is the very first code that runs when an iPhone powers on, and it is etched directly into the chip. Because it is baked into the hardware, Apple cannot push a patch to rewrite it.

The first exploit, checkm8, affects iPhone models from the 4S through the X. It has been public knowledge since 2019.

The second, usbliter8, is the newer concern. It impacts the iPhone XS, XR, the 11 series, and the second-generation iPhone SE, and it was disclosed in June 2026.

Put together, the two flaws cover a wide stretch of iPhone history. Anyone running a device from the 11 series or earlier falls somewhere on the affected list.

According to the details Yishi shared, an attacker would need physical access to the device. That access does not have to last long.

The method involves putting the iPhone into DFU mode and connecting a specialized USB tool. DFU stands for Device Firmware Update, a low-level recovery state used to restore or reinstall the phone's software.

From there, the attacker could execute code before iOS ever starts up. The operating system's defenses never get a chance to show up for work, because the intruder is already inside before the lights come on.

Per the details Yishi shared, the attack also leaves no trace. A victim could get the phone back and have no reason to suspect anything happened.

The device passcode remains a barrier. So does the Secure Enclave, a dedicated security chip that handles sensitive data separately from the main processor.

The catch is that these protections are only as strong as how they are used. Weak passwords or outdated wallet apps increase the risk, according to the research behind the warning.

The core recommendation is blunt. Yishi advised affected users to abandon their current seed phrases entirely.

Instead, he urged users to create new seed phrases on secure devices and transfer their assets to them. Generating fresh addresses under the old phrase is not enough, in his view.

That distinction matters. A seed phrase is the master key that generates every address in a wallet, so new addresses from a compromised phrase still trace back to the same exposed key.

Yishi also recommended several secondary steps for anyone still using an affected device:

Use strong alphanumeric passcodes rather than short numeric ones

Turn on Lockdown Mode, Apple's hardened security setting

Avoid plugging into public USB ports

The USB advice ties directly to how the exploits work. If the attack relies on a USB connection, limiting where your phone gets plugged in limits your exposure.

The checkm8 exploit has been circulating since 2019. For years, that meant owners of iPhone X and older devices were living with a known, permanent hardware gap.

The June 2026 disclosure of usbliter8 pushed that boundary forward to cover newer models, including the popular 11 series and SE2. Devices that many people considered reasonably current are now in the same bucket as phones from a decade earlier.

The broader point in Yishi's warning is that plenty of crypto holders rely on legacy devices to manage their funds. Some even treat old phones as a kind of homemade cold storage, wiping them and using them only for wallet access.

That strategy assumes the hardware itself is trustworthy. These BootROM flaws challenge that assumption at the most basic level.

More news from Crypto Briefing