What happened
Yishi Wang, the founder of hardware wallet maker OneKey, used a public post on Saturday to warn that older iPhone models contain chip-level vulnerabilities that Apple cannot patch through a standard iOS update. CryptoBriefing reported the warning first, citing Wang directly. The claim is specific in a way that matters for crypto readers: the weakness, as Wang described it, lives in the hardware itself.
That rules out the usual fix of pushing a point release and asking users to tap 'Update Now'. Wang did not name a single CVE in the post reported by CryptoBriefing, and Apple has not publicly responded. The disclosure arrived during a weekend window when markets are thin and security chatter travels fast across crypto Twitter and Telegram groups focused on self-custody.
Why it matters
Hot wallets live on phones. That is the uncomfortable truth behind this warning. MetaMask Mobile, Trust Wallet, Phantom, Rainbow, Coinbase Wallet - these apps hold private keys inside the device's secure enclave or encrypted storage, and they rely on Apple's hardware stack to keep attackers out.
If the chip itself is compromised, the perimeter the whole stack sits on gets thinner. The second-order risk is 2FA. A lot of crypto users still run Google Authenticator or Authy on an old iPhone they never traded in.
If that device is also the recovery route for an exchange account, a chip-level flaw turns a dusty backup phone into a single point of failure. Wang is a hardware wallet CEO, so the pitch is not neutral. He sells the alternative.
That does not make the warning wrong, but it is worth naming.