Tradingview Unpatchable Chip Vulnerabilities in Older iPhones Expose Crypto Seed Phrases
Article Content
- •Older iPhones (11 and earlier) have unpatchable BootROM vulnerabilities.
- •Attackers need brief physical access to exploit these vulnerabilities.
- •Users are advised to abandon existing seed phrases and create new ones on secure devices.
On November 1, 2026, Yishi Wang, founder of OneKey, warned that iPhone 11 and older models have unpatchable BootROM vulnerabilities that could expose wallet seed phrases to attackers with brief physical access. The two known exploits, checkm8 and usbliter8, affect a range of devices from the iPhone 4S to the iPhone 11 series. The checkm8 exploit has been public since 2019, while usbliter8 was disclosed in June 2026. Attackers can exploit these vulnerabilities by putting the device into Device Firmware Update (DFU) mode and using specialized hardware to execute unauthorized code before iOS loads. This method leaves no trace, making it difficult for users to detect any compromise. Wang advised users to abandon their current seed phrases and create new ones on secure devices. He also recommended using strong passcodes and avoiding public USB ports to mitigate risks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Common questions
Which iPhone models are affected?
What should users do to protect their crypto assets?
How can attackers exploit these vulnerabilities?
Continue Reading
Cellebrite Reveals LOKI: Zero-Day Boot ROM Exploit for Apple Devices Cellebrite has unveiled a zero-day exploit named LOKI at the Hexacon conference, targeting the boot ROM of Apple chips from the iPod touch 2 to the iPhone 11. This exploit, which requires physical access to the device via USB in DFU mode, takes advantage of a timing race condition, with early proof-of-concept builds…
North Korean Hackers Steal $6.3 Billion from Binance in Record Crypto Heist On October 29, 2026, Binance, the world's largest cryptocurrency exchange, reported a massive security breach resulting in the theft of approximately $6.3 billion across ten blockchains. The attack is attributed to North Korea's TraderTraitor hacking group, which gained access via a compromised DevOps engineer's…