Think properly when you turning your old iphone into DIY crypto cold wallet.
While wiping an old iphone and putting it into airplane mode looks like clever thing to do and seems like cheap way to store your crypto seed phrases, it could actually leave your crypto exposed.
Yishi, the founder of crypto hardware wallet company OneKey, recently issued a stark warning to the crypto community: Older iphones model's ( Iphone 11 and earlier ) suffer from unpatchable hardware-level vulnerabilities that make them unsafe for seed phrase storage.
If you are using old Apple phone to secure your bags, here is what you need to know about these hidden hardware flaws and how to protect your assets.
The Flaws in the Silicon: Checkm8 and Usbliter8
So the flaws don't exist in your OS or sketchy apps you download but it is hardcoded into phones physical silicone chipset. meaning Apple cannot patch it via a software update.
The warning breaks down the specific risk zones by model:
• Including Iphone 4s through Iphone X these are mostly vulnerable to checkm8 exploit.
• iPhone XS, XR, 11 Series, and SE (2nd Gen) are Vulnerable to the usbliter8 exploit.
Because these are BootROM vulnerabilities, they trigger before the iOS operating system and its software security defenses even load.
Why Airplane Mode And Wiping Is Not Beneficial
The logic behind a DIY cold wallet is usually simple: reset the phone, turn off Wi-Fi/Bluetooth, pull out the SIM card, and nobody can hack it over the internet
while it protect and end issue or exploit to network but it does absolutely nothing against physical exploit.
If an attacker gain physical access of your phone they can use specialized tools via the USB-C or Lightning port to execute code at the pre-boot level. By bypassing the operating system entirely, advanced attackers can potentially extract sensitive data right out of the device, rendering your "offline" status useless.
Who Is On Most Risk
If your phone is locked in your home somewhere safe far then reach of anybody your risks are low. However just relying on fundamentally flawed hardware for long-term security goes against the core principles of crypto self-custody. The risk skyrockets if:
- Your device is ever lost lost stolen or seized.
- You leave device in unattended in shared spaces.
- You buy or use a second hand older iphone that could be tempered with.
How Properly Crypto Can Be Protected
If you are relying on older iphone to save your crypto seed phrases offline or make it as offline wallet then for this purpose, Yishi recommends taking immediate action:
• Migrate To Safe Hardware
you want to use an iPhone as a cold storage element, use an iPhone 12 or newer—though a dedicated hardware wallet (like a Ledger, Trezor, or OneKey) with a physical metal seed backup remains the gold standard.
• Generate New Seed Phrases
To not just move your crypto to a new app using the same old seed phrase. If that phrase was generated or stored on a vulnerable device, it is considered compromised. Generate a brand-new seed phrase on a secure device and transfer your assets over via a standard transaction.
• Practice Good Physical Security
Try to use complex alphanumeric device passcodes rather than simple 4-digit PINs, avoid plugging your crypto devices into public USB charging stations (juice jacking), and keep your storage hardware updated.
Let me know about your few ways to secure your seed phrases in comments section!
Image source Unplash
News source Here
