Crypto Warning Targets Older iPhone Recovery Phrases
OnKey founder Yishi says seed phrases stored on iPhone 11 and older models may be exposed to physical-access attacks that updates cannot fix.
Updated on Nov. 1, 2026 in Cybersecurity
Live Poll
Do you trust your phone to keep your personal data secure?
OnKey founder Yishi warned crypto users against storing wallet recovery phrases on iPhone 11 and older models. The warning follows the disclosure of boot-level flaws that iOS updates cannot patch.
Why it matters
The checkm8 flaw affects iPhone 4S through iPhone X, and the usbliter8 vulnerability affects XS, XR, 11 series and second-generation iPhone SE devices. Because the attack runs before iOS loads, users with affected phones face risk to stored crypto assets regardless of software updates.
The usbliter8 vulnerability was disclosed in June 2026 and affects iPhone XS, XR and 11 series plus second-generation iPhone SE devices. The source does not report how many devices are affected or whether exploitation has been observed.
The players
OnKey
OnKey is a cryptocurrency wallet company whose founder issued the warning about recovery phrase storage.
Yishi
Yishi is the founder of OnKey, a crypto wallet company, who advised users to move assets from affected devices.
The details
An attacker with physical access can connect a phone by USB and run code before iOS starts, which allows extraction of wallet recovery phrases. Yishi advised users with affected devices to create new recovery phrases in a trusted environment and move assets. Airplane mode does not prevent the attack, and generating another wallet address from an existing recovery phrase does not address the risk.
Timeline
June 2026: usbliter8 vulnerability disclosed.
November 1, 2026: Yishi warning published against storing seed phrases on affected devices.
Big Picture
The usbliter8 vulnerability extends the boot-level exposure first documented in the checkm8 BootROM flaw, which affects iPhone 4S through iPhone X, to iPhone XS, XR and 11 series models. Because neither flaw can be fixed with an iOS update, the exposure persists on hardware already in users' hands.
Users of iPhone 11 and older models who store crypto recovery phrases on those devices face exposure to physical-access attacks. Moving assets to a new wallet created in a trusted environment is the step the source recommends.
The takeaway
Treat recovery phrases on affected iPhones as compromised by moving funds to a new wallet created in a trusted setting. Software updates will not close boot-level flaws, so hardware age matters for wallet security.
Further reading
Explore more in Cybersecurity coverage for context on device-level threats.
Live Poll
Do you trust your phone to keep your personal data secure?
