Unpatchable hardware flaws in older iPhones allow crypto seed theft
Original title: Unpatchable Hardware Flaws in Older iPhones Allow Attackers to Steal Crypto Wallet Recovery Phrases
BootROM and usbliter8 exploits in older iPhones (4S to iPhone 11) enable attackers with physical access to steal recovery phrases despite factory resets and airplane mode.
Older iPhones remain vulnerable to unpatchable BootROM and usbliter8 hardware exploits that survive software updates and wipes. The flaws allow boot-chain compromise via specialized USB hardware. Attackers need physical access but can potentially extract recovery phrases when combined with weak passcodes or other weaknesses. Recommendation is to migrate exposed wallets to new phrases.
Unconfirmed: Exact mechanism for stealing recovery phrases without additional weaknesses not fully detailed
- Affects iPhone 4S through iPhone X (BootROM)
- usbliter8 extends to iPhone XS, XR, 11 family and second-gen SE
- No software patch possible for BootROM
- Airplane mode offers no protection
- Physical access required for exploitation
Impact: theft of cryptocurrency recovery phrases
- 1.migrate exposed wallets to new recovery phrases
- 2.use stronger alphanumeric passcodes
- 3.use trusted charging equipment
From the original article
2 min read at gbhackers.com
Older iPhones that store cryptocurrency recovery phrases are at a continuous security risk due to unpatchable BootROM vulnerabilities, even if the devices are wiped and kept in airplane mode. While attackers require physical access to exploit this vulnerability, doing so does not automatically reveal encrypted wallet data. However, other weaknesses could potentially allow them to […]
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.