Recent revelations about iPhone BootROM vulnerabilities have raised alarms for those using older devices to store cryptocurrency seed phrases. Despite common beliefs, keeping an iPhone offline does not guarantee its safety as a cold wallet, warns OneKey founder Yishi.
Understanding the BootROM Vulnerability
The primary concern revolves around flaws in the BootROM, the initial code a device executes upon powering up. These flaws allow attackers to execute code before the iOS system starts, potentially compromising the device. However, gaining access to the BootROM does not automatically reveal sensitive wallet information, such as the seed phrases crucial for cryptocurrency access.
Yishi emphasizes that these security risks are particularly significant for those who rely on older Apple devices, mistakenly assuming that disconnecting from networks eliminates the threat. The vulnerability requires physical access to the iPhone, making it susceptible to hands-on attacks.
Specific Exploits Targeting iPhone Models
The exploit known as checkm8 affects iPhones up to the iPhone X. Meanwhile, another exploit, usbliter8, extends the risk to later models, including those with A12 and A13 chips, like the iPhone XS, XR, iPhone 11, and the second-generation iPhone SE. Researchers brought usbliter8 to light in June 2026, highlighting its ability to undermine the device’s trusted boot process.
By placing a compatible iPhone into Device Firmware Update mode and using specialized USB hardware, attackers can induce memory corruption, allowing them to run unauthorized code. Demonstrations have shown that this attack doesn’t require expensive equipment, as a simple Raspberry Pi Pico 2 can suffice.
Protective Measures and Future Outlook
Although the usbliter8 exploit does not directly breach Apple’s Secure Enclave, which guards vital keys and passcodes, it underscores the need for strong passwords and up-to-date software to mitigate exposure. While airplane mode is not a foolproof defense, users should stay vigilant about their device’s security.
To protect against potential threats, iPhone owners are encouraged to verify their device model, apply all available security updates, and maintain robust passcodes for both the device and any associated wallets. If there is any suspicion of seed exposure, generating a new seed in a secure environment and transferring funds is advisable.
In conclusion, while BootROM vulnerabilities pose significant risks, understanding these threats and implementing necessary security measures can help safeguard cryptocurrency assets. Remaining informed and proactive is essential to countering such cybersecurity challenges.
