Have you ever wiped an old iPhone, switched on airplane mode, and decided it made the perfect offline vault for your crypto recovery phrases? Plenty of people have. It feels clever, almost resourceful. You remove the apps, cut the network, and sleep better thinking the device sits safely beyond the reach of online thieves. Yet that quiet confidence may rest on shaky ground. A recent warning from the founder of a well-known hardware wallet company has forced many holders to look again at those aging devices sitting in drawers or locked in safes.
The issue is not some new app vulnerability or a clever phishing page. It sits much deeper, inside the silicon itself. Certain iPhones manufactured before 2020 carry permanent weaknesses in their earliest startup code. Software updates cannot touch that code. Once the flaw exists in the chip, it stays there for the life of the device. That reality changes the risk calculation for anyone treating an older iPhone as a cold storage solution.
Why Older iPhones Suddenly Look Less Safe for Crypto
Most of us treat a factory reset as a clean slate. We assume that wiping the phone and keeping it offline removes any realistic path for an attacker. In the world of cryptocurrency self-custody, that assumption has become almost standard advice for secondary devices. The founder of OneKey challenged that thinking directly. He pointed out that some older Apple devices contain BootROM vulnerabilities that survive every reset and every iOS update.
The BootROM holds the first instructions the processor runs when the phone powers on. Those instructions live in permanent memory inside the chip. Apple cannot rewrite them after the device leaves the factory. When a flaw exists at that level, the only real fix is a new generation of hardware. Two known exploits illustrate the problem clearly.
The Checkm8 Reality for Pre-2018 Devices
Checkm8 became public knowledge years ago and still works on a wide range of older models. It covers devices from the iPhone 4S all the way through the iPhone X. Researchers and security enthusiasts have used it extensively. The exploit allows an attacker with physical access and the right equipment to interrupt the normal boot process and load unauthorized code before the operating system even starts.
I remember the first time I saw a demonstration of checkm8. The process looked almost routine once the tools were set up. Plug the phone into a computer while it sits in recovery mode, run the exploit, and the device becomes far more open than Apple ever intended. For ordinary users the technical steps feel distant. For someone motivated to extract data from a specific phone, those steps are simply part of the toolkit.
Usbliter8 and the A12-A13 Generation
A more recent discovery expanded the worry. Usbliter8 targets the A12 and A13 chips found in the iPhone XS, XR, the entire iPhone 11 series, and the second-generation iPhone SE. These phones still feel relatively modern to many owners. They remain common secondary devices precisely because they still run decent software and feel secure enough for offline use.
The attack path again requires physical access and specialized hardware connected over USB. The phone enters Device Firmware Update mode. From there an attacker can influence the startup sequence. Airplane mode offers no protection because the exploit never needs a network connection. The danger lives at the hardware boundary between the USB port and the earliest boot stages.
What makes this particularly unsettling is how quiet the process can be. An “evil maid” scenario suddenly feels less theoretical. Leave a phone in a hotel room, hand it over for inspection, or let someone charge it while you step away, and a skilled attacker might have enough time to act. When you return, the phone looks exactly the same. Nothing appears altered. Yet the security boundary may already have been crossed.
Physical Access Does Not Equal Instant Theft
It is important to keep perspective. Exploiting the BootROM does not automatically hand an attacker your seed phrases. On devices that still contain a functioning Secure Enclave, passcodes and encryption continue to matter. The Secure Enclave is designed to keep sensitive material isolated even when the main processor is compromised. That extra layer still provides meaningful resistance.
However, resistance is not the same as immunity. Short numeric passcodes create a limited search space. A six-digit code offers only one million possibilities. Forensic tools and dedicated hardware can attempt to work through those combinations far more efficiently once low-level access exists. Outdated software or weak application-level passwords on wallet apps add further opportunities. If an encrypted wallet file can be pulled off the device, offline password guessing becomes realistic.
In my view the real risk concentrates on users who treat the offline phone as completely trustworthy. They store the recovery phrase in a notes app, a password manager with a simple master code, or even a screenshot. Those habits turn a difficult technical attack into a practical one.
Recent Jailbreak Demonstrations Add Context
The timing of the warning is not accidental. Over a short period several public jailbreak demonstrations involving newer iPhones appeared. One team showed elevated access on a recent flagship running a current iOS version. Apple responded with patches. Those events reminded the community that software security remains a constant contest. The founder was careful to separate those temporary software issues from the permanent hardware problems affecting older models.
Another technique called ChoiceJacking also entered the conversation. It involves malicious USB accessories that can spoof user input and authorize data access. Apple closed the relevant authentication gap in a later iOS release, yet the episode underlines how physical connections remain a recurring weak point.
Wiping an old iPhone and leaving it offline is no longer the simple safety measure many assumed. Hardware-level flaws change the equation permanently.
Practical Steps If You Already Use an Affected Device
The advice is straightforward and slightly uncomfortable. If you have ever stored a recovery phrase on an iPhone covered by checkm8 or usbliter8, treat that phrase as potentially compromised. Generating a new address from the same seed does not solve the problem. The original seed itself may have been exposed. Create an entirely new wallet in a trusted environment and move the funds.
That process feels tedious, especially for people managing multiple wallets or larger portfolios. Still, the cost of inaction can be far higher. Cryptocurrency transactions are irreversible. Once assets leave a compromised seed, recovery options disappear.
- Generate new recovery phrases on a device you fully trust
- Transfer holdings carefully and verify every address
- Retire the older iPhone from any seed-related role
- Prefer longer alphanumeric passcodes on remaining devices
- Avoid connecting any wallet device to unknown USB chargers or accessories
For those worried about targeted physical attacks, Apple’s Lockdown Mode offers an additional layer of restriction. It is not a complete solution, yet it reduces the attack surface in meaningful ways. Keeping software fully updated remains essential even when the underlying chip carries permanent limitations.
Why Hardware Wallets Still Hold an Edge
The conversation inevitably returns to purpose-built hardware wallets. These devices are designed from the start to isolate private keys and to resist physical extraction attempts. Recent cases of tampered devices in certain markets show that even specialized hardware is not immune to sophisticated supply-chain or modification attacks. Still, the security model of a dedicated hardware wallet generally exceeds that of a general-purpose smartphone, especially an older one.
I have watched many people move from phone-based storage to hardware devices after a close call or a well-timed warning. The transition feels like insurance. You pay a modest upfront cost for a clearer separation between everyday computing and long-term key storage.
Which Devices Fall Outside the Known Risks
The founder noted that iPhone 12 and newer models are not known to be affected by the two BootROM exploits discussed. That does not grant them perfect security, of course. Newer phones still face software vulnerabilities, sophisticated spyware, and social-engineering attacks. Yet the absence of these particular permanent hardware flaws removes one persistent worry.
For anyone currently relying on an iPhone 11 or earlier as an offline seed vault, the practical recommendation is clear. Upgrade the storage method. Newer hardware, regularly updated, combined with strong passcodes and careful physical handling, offers a better baseline.
The Broader Lesson About Self-Custody
Self-custody remains one of the most powerful ideas in cryptocurrency. It also carries ongoing responsibility. Every storage decision involves trade-offs between convenience, cost, and security. Using an old phone feels free and simple until the threat model changes. Hardware flaws that cannot be patched force a reevaluation.
Perhaps the most interesting aspect is how slowly these risks surface in everyday practice. Most people will never face a sophisticated physical attack. The probability for any single individual stays low. Yet the impact of a successful attack is total loss. That imbalance pushes careful holders toward stronger defaults.
Security is rarely about eliminating every possible risk. It is about raising the cost and complexity for an attacker until the effort no longer makes sense. Leaving an older iPhone with known BootROM issues as the guardian of significant value fails that test for many realistic threat models.
Balancing Convenience and Long-Term Safety
Not every holder needs military-grade procedures. Someone managing a small amount of crypto for experimentation faces different stakes than a person holding life-changing sums. Still, good habits scale. Generating new seeds on trusted hardware, writing them carefully on paper or metal, and storing those backups in separate secure locations remains the classic approach for a reason.
Digital storage of seed phrases on any networked or previously networked device introduces additional variables. Even an offline phone once connected to the internet carries residual risk. The permanent nature of BootROM flaws simply makes that residual risk more concrete and harder to ignore.
I have found that the people who sleep best are usually those who treat their recovery phrases as highly sensitive physical objects rather than digital files. Paper or steel backups in a safe, a safety deposit box, or a well-chosen hidden location still outperform most phone-based schemes when the goal is multi-year resilience.
What to Watch Going Forward
Security research never stands still. New exploits appear. Old ones receive better tooling. Apple continues to harden each generation of silicon. The gap between consumer devices and dedicated security hardware narrows in some areas and widens in others. Staying informed without becoming paralyzed by every new demonstration is the practical middle path.
For now the message from the hardware wallet founder is clear and actionable. Older iPhones carrying known unpatchable startup vulnerabilities deserve retirement from seed storage duties. Newer devices, updated software, strong authentication, and careful physical handling form a more durable foundation.
If you have been relying on an iPhone 11 or earlier as an offline wallet, the moment to reassess has arrived. The vulnerabilities are real, the attack path requires physical access and expertise, and the consequences of underestimating them can be permanent. Moving to stronger storage practices is not paranoia. It is simply the cost of taking self-custody seriously in a world where hardware flaws can outlive software patches.
The quiet confidence that once came from an airplane-mode iPhone sitting in a drawer may need replacing with a more deliberate approach. In the long run that extra effort protects both the assets and the peace of mind that self-custody is supposed to provide.
Crypto security rewards those who revisit assumptions. The old phone that felt safe yesterday may no longer meet the standard today. Acting on that realization while the choice remains voluntary is far better than discovering the limitation after an incident. Strong seed management, purpose-built tools where appropriate, and a healthy respect for physical access risks continue to form the practical foundation for holding cryptocurrency with confidence.
