OneKey Founder: Some Older iPhones Have Unpatchable Chip Vulnerabilities, Posing Risks to Seed Phrase Storage OneKey founder Yishi warned that factory-resetting an older iPhone, enabling airplane mode, and using it to store crypto wallet seed phrases offline may still be unsafe. He noted that iPhone 4S through iPhone X are affected by checkm8, while iPhone XS, XR, 11 series, and second-generation iPhone SE are affected by usbliter8, disclosed earlier this year. These BootROM-level vulnerabilities cannot be fixed through iOS updates. Attackers with physical access and specialized tools may exploit them via USB, even in airplane mode. However, on models such as the XS and 11, these flaws alone do not provide direct access to seed phrases, as device passcodes and the Secure Enclave offer additional protection. Yishi advised affected users to generate entirely new seed phrases in a trusted environment, transfer their assets, use newer devices, keep software updated, and adopt stronger passwords.

OneKey automatically aggregates your balances across Legacy, Nested SegWit, Native SegWit, and Taproot addresses. It shows the type with funds right away. No manual switching needed.

OneKey has zero official Telegram groups or channels (except the Perps community). Nothing on other chat apps either.If someone DMs claiming to be us and asks you to click links, connect a wallet, share seeds, or send crypto — pure scam. Don’t fall for it.

Switched from Ledger to OneKey a few years ago because their screens kept dying on me, and I never looked back. Still using OneKey daily with zero drama. Just got the OneKey Pro 2 — if you’re still on Ledger, maybe time to switch. #OneKey# #HardwareWallet# #Ledger#

we hacked ledger. the @OneKey_Anzen team has successfully reproduced a transaction replacement attack against ledger ethereum app 1.22.1 in our lab. the bug is a race condition between the transaction display logic and the underlying transaction buffer. an attacker can overwrite the transaction waiting to be signed while the user is still reviewing a legitimate one. in simple terms: - you see transaction a on your ledger. - you approve transaction a. - your ledger can end up signing transaction b. - and you never see transaction b. to reproduce this, we built the 1.22.1 ELF ourselves, fixed the speculos reset 502 issue, and got the full attack flow working end to end. ledger fixed this in ethereum app 1.22.3. if you’re still on an older version, update it.

Phishing emails impersonating OneKey may target you even if you have never used OneKey before. We will never ask you to download software by email or share your recovery phrase. The only official download site is

part of me is crying watching our onekey pro 2 get torn apart like this. the other part is damn proud of how well it’s built. massive respect for such a thorough teardown @aldaronhardware