Don't think that using a MacBook with an M Series chip makes you safe from hackers!

For cryptocurrency investors, safeguarding their private key or seed phrase (master private key) is paramount. If our seed phrase is lost or compromised, anyone who discovers it can immediately access the cryptocurrency we've carefully stored. Therefore, we must strive to protect our private key offline, such as by storing it in a hardware wallet or by writing down the seed phrase on paper or a metal plate.

Why is a Seed Phrase important?

"A seed phrase is a series of 12-24 English words randomly generated by a hardware wallet. It acts like a 'safe key duplicator' (for creating a private key) used to access digital assets stored in that wallet, and is typically encountered during the initial setup process."
 
Following news about the renowned computer brand Apple, whose MacBook M Series (M1, M2, M3) could potentially have seed phrases hacked if generated on these computers, is this hypothesis true? Where does the problem lie? And how could our seed phrase be stolen?

 

History of M Series CPUs in Apple Devices

After Steve Jobs returned as Apple's CEO in 1997, we saw many changes in Apple products. At that time, Apple still used PowerPC chips, which were based on the RISC (Reduced Instruction Set Computer) architecture and manufactured by IBM.

Around 2006, Apple switched to a new CPU architecture, using Intel CPUs, which were based on the X86 architecture, a Complex Instruction Set Architecture (CISC) capable of executing multiple instructions simultaneously. Simply put, these were the same CPUs we use in home computers, identical to those purchased from computer assembly stores, but Apple integrated them directly into their machines, making them non-replaceable.

Apple began transitioning to ARM architecture CPUs, which are Reduced Instruction Set Computer (RISC) processors developed by Apple itself. This move leveraged their experience in developing CPUs for iPhones, which had begun to rival Intel chips in processing speed. More importantly, ARM chips offered better power efficiency and heat management.

M Series chips have been incorporated into many Apple devices, including MacBooks, iMacs, and iPads, gaining immense popularity for their processing performance. This is because Apple designed them as System on Chip (SoC) solutions, integrating a GPU to provide an excellent visual experience for image display and video playback, with the devices running cooler compared to Intel CPUs.

The belief that Apple devices are safer than Windows

Regarding security and operational stability, I believe most people trust Apple more than Windows. Many who entered the crypto world even switched to Apple devices, thinking they were safer in many aspects. I agree, as their operating system is built on a Unix foundation, allowing for robust permission control. This is not even considering the addition of the Secure Enclave chip by Apple starting from the M2 and later.

Vulnerability discovered in M Series Chips

However, a recent disclosure about a vulnerability in the M Series Chip might change your perspective. This flaw allows hackers to dump seed data from memory history without requiring root privileges, which are the highest level of access. This means that even a regular user's privileges can access this data. This vulnerability is extremely serious because data created with the intention of high-level security can be accessed. Crucially, this problem is a structural design issue and cannot be fixed with a software patch, or if it could, it would severely impact the device's performance.

What's next for those in the crypto world? Is our Seed Phrase still safe?

Apple has yet to comment on GoFetch's research. So, what will become of this issue? How can MacBook M Series users be confident that their seed phrase won't be leaked? No one can answer that. The best thing is to secure your assets yourself, not trusting or relying on any company. When creating or generating a seed phrase, do so without using a Mac. For those who have a hardware wallet and generate their seed from it, you can rest assured; you are not affected by this. But for those who use a seed from a Mac, I recommend changing your seed. Currently, storing digital assets with a hardware wallet is a highly effective tool at an affordable price and the most worthwhile investment.