BootROM flaws in older iPhones expose crypto seed phrases to physical attacks
Original title: Hackers Could Exploit iPhone BootROM Flaws to Compromise Cryptocurrency Wallet Security
Physical access to affected iPhones allows BootROM code execution before iOS loads but Secure Enclave protections remain intact.
Researchers disclosed usbliter8 and checkm8 BootROM vulnerabilities on older iPhones with A12 and A13 chips. Attackers with physical access and special USB hardware can run arbitrary code before the OS starts. The flaws do not compromise the Secure Enclave protecting wallet secrets.
Unconfirmed: No confirmed real-world exploitation of these flaws reported
- Affects iPhone X to iPhone 11 family and second-gen SE
- BootROM cannot be patched via software updates
- Requires physical access and USB hardware
- No direct Secure Enclave bypass
- Potential path only, no confirmed exploits
Impact: potential seed phrase exposure via physical BootROM access
- 1.generate new seed phrases
- 2.use strong passcodes
- 3.avoid physical access to older devices
From the original article
2 min read at cybersecuritynews.com
Older iPhones used to store cryptocurrency seed phrases could expose owners to physical attacks that airplane mode cannot stop. OneKey founder Yishi has warned that wiping an aging iPhone and keeping it offline does not make it a secure cold wallet. The concern involves BootROM flaws that let attackers run code before iOS starts.
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.