iPhone BootROM Exploits Raise Physical-Access Risks for Crypto Seed Storage

OneKey founder Yishi warned that older iPhones repurposed to store cryptocurrency seed phrases can remain vulnerable to physical attacks even after being wiped and kept offline. Reporting cited the checkm8 and usbliter8 BootROM exploits, which can allow an attacker with physical access to execute code before iOS starts. The reports describe usbliter8, disclosed in June 2026, as extending this capability to A12- and A13-based iPhones. Because the vulnerable BootROM is embedded in hardware, ordinary software updates cannot replace it.

BootROM code execution does not automatically expose wallet secrets. The reports note that usbliter8 does not directly compromise the Secure Enclave; stealing encrypted seed phrases would require additional weaknesses or access to decrypted information. The warning concerns potential exposure rather than a documented wallet-theft campaign. Recommended precautions include installing available updates, using strong device passcodes and wallet passwords, avoiding untrusted USB equipment, and restricting physical access. If a seed may have been exposed, users should replace it and move funds to a wallet derived from the new seed—not merely generate another address from the existing seed.