OneKey Founder Warns Against Using Old iPhones as Crypto Cold Storage
Key Summary
OneKey founder Yishi Wang issued a public security warning cautioning self-custody traders against repurposing decommissioned iPhones as offline cold wallets. According to public security disclosures cited by Wang, physical access exploits and bootrom vulnerabilities compromise older Apple hardware even without network connectivity. Dedicated signing devices remain the primary standard for safeguarding substantial capital holdings against physical extraction.
Key Bullets
- OneKey founder Yishi Wang warned self-custody users that offline iPhones remain vulnerable to direct physical access attacks.
- Hardware security disclosures highlighted unpatchable bootrom vulnerabilities across multiple generations of Apple devices.
- Traders holding substantial capital must rely on dedicated signing hardware rather than decommissioned smartphones.
- Device encryption and secure key isolation provide necessary barriers against unauthorized seed phrase recovery.
OneKey Founder Warns Against Phone Wallets
OneKey founder Yishi Wang warned self-custody users Tuesday that repurposing old iPhones as offline cold storage units introduces severe physical security vulnerabilities. Self-custody participants frequently wipe decommissioned mobile devices and store private recovery phrases locally while keeping network connections disabled. Wang noted that disconnecting Wi-Fi and cellular radios provides zero defense against an attacker who obtains physical possession of the hardware.
Public security research documents low-level architectural weaknesses residing in the early boot stages of older Apple hardware. Apple cannot patch these vulnerabilities through standard iOS updates because the flaws exist within immutable boot code. Traders holding substantial capital continue ignoring these fundamental device limitations at their own peril.
Physical Access Exploits Override Offline Status
Device encryption and alphanumeric passcodes serve as primary barriers against unauthorized access, but physical exploits bypass conventional operating system protections. Wang explicitly singled out iPhone 11-generation and older devices as unsuitable for safeguarding recovery phrases due to the documented checkm8 bootrom exploit. Hardware security researchers emphasize that an offline state only prevents remote network extraction.
Generating new addresses from a compromised seed phrase fails to resolve underlying exposure risks when the root keys remain vulnerable. Users who suspect exposure must establish completely fresh setups using dedicated hardware. Liquidity migrates quickly when foundational security assumptions fail across improvised storage methods.
Dedicated Signing Devices Outperform Repurposed Hardware
Purpose-built signing devices isolate private keys inside secure elements and display transaction details directly on onboard screens for user verification. Repurposed mobile phones lack these specialized isolation boundaries despite offering convenient interfaces for casual asset tracking. Counterfeit hardware and compromised distribution channels still present separate operational risks for cold storage holders.
Wang urged market participants to evaluate their threat models rigorously before committing significant funds to smartphone-based storage schemes. Proper key management demands dedicated hardware built specifically for cryptographic isolation. Security standards must adapt as physical attack vectors evolve.
About CryptoNewsFree Market Intelligence Wire
The CryptoNewsFree Market Intelligence Wire provides rapid, objective coverage of breaking crypto developments, regulatory actions, and market liquidity trends. Our reporting strictly follows our Editorial & Verification Standards.