Binance has warned Apple customers a couple of harmful iOS vulnerability that would expose crypto wallets, personal keys, and login credentials. The flaw, referred to as worse_query, permits malicious functions to entry recordsdata usually remoted inside different apps. Binance warning identifies a number of affected iOS software program variations and urges customers to take away untrusted functions instantly.
The vulnerability threatens greater than crypto wallets; apps storing delicate data domestically might additionally expose passwords, authentication information, and private recordsdata. That makes the newest warning significantly regarding for iPhone customers who depend on their gadgets for banking and crypto transactions.
A vulnerability (worse_query) affecting iOS 26.7.1, 27.0.1, and 27.2 permits malicious apps to learn native recordsdata from different apps, placing seed phrases, personal keys, and login credentials in danger throughout the complete ecosystem. That is an iOS-level difficulty, not distinctive to Binance.…
— Binance (@binance) November 10, 2026
Binance says the issue impacts iOS itself quite than its personal pockets infrastructure. Customers who suspect their gadgets have been compromised ought to create new wallets on clear gadgets and transfer their funds. The trade additionally recommends resetting energetic login periods and updating put in software program.
Binance Warns A Harmful iOS Sandbox Escape
The vulnerability exploits Apple’s utility sandbox, a safety mechanism designed to maintain functions separated from each other. Usually, an utility can not freely entry one other utility’s personal recordsdata. This isolation protects delicate data even when customers set up a number of functions on the identical gadget.
That is the place it will get harmful: the worse_query exploit reportedly bypasses these restrictions. A malicious utility might doubtlessly entry directories containing data belonging to different put in functions.
The researcher behind the general public GitHub repository describes worse_query as a sandbox escape affecting iOS 26 and iOS 27. The challenge identifies affected releases spanning iOS 26.0 by means of 26.7.2 and iOS 27.2. Binance warns that uncovered data might embrace cryptocurrency restoration phrases, personal keys, and login credentials.
The precise hazard relies upon partly on how particular person functions retailer delicate data. Wallets retaining restoration phrases or different credentials in accessible native recordsdata face specific dangers.
Safety researchers have additionally highlighted the significance of defending plaintext pockets data. SlowMist’s safety chief warned that the vulnerability might undermine assumptions about isolation between utility containers.
Uncover: The Finest Token Presales
Apple Customers Face Questions Over Safety Updates
Apple’s safety replace schedule provides one other dimension to the Binance iOS warning. Apple’s safety releases record iOS 27.2 and iOS 26.7.2 amongst its out there software program variations, each launched on October 26, 2026.
Nonetheless, Apple’s printed safety advisories don’t explicitly establish worse_query by identify. There may be at present no confirmed public assertion establishing that these updates absolutely resolve the particular sandbox escape.
A separate GitHub challenge implementing the exploit additionally reported on November 8 that Apple’s out there software program releases had not patched worse_query. This leaves customers with an necessary hole between putting in the newest out there replace and confirming {that a} specific vulnerability has been mounted.
Binance recommends putting in the newest official iOS launch and preserving all functions up to date. It additionally urges customers to take away functions from unknown sources, together with manually signed IPA recordsdata.
For us, crypto holders, the most secure response to suspected compromise goes past merely deleting suspicious software program.
Earlier iPhone Assaults Put Crypto Wallets within the Highlight
The newest iPhone warning follows a number of safety incidents involving malicious functions and crypto credentials. In September, Binance warned customers about FomoPeek, a third-party utility whose variations 1.1 and 1.2 reportedly contained malicious code.
Safety researchers discovered that the software program might exploit iOS vulnerabilities to acquire elevated gadget privileges. Doubtlessly uncovered data included restoration phrases, personal keys, login credentials, and different domestically saved information.
Extra not too long ago, CertiK highlighted the DarkSword exploit framework, which reportedly focused cryptocurrency functions by means of compromised web sites and susceptible iPhones.
#CertiKInsight
A brand new model of DarkSword, an iOS exploit equipment, is getting used to focus on crypto wallets on unpatched iPhones.
Merely opening a malicious web site in Safari might be sufficient: no pockets connection, no signature wanted.
Right here's what you should know— CertiK Alert (@CertiKAlert) November 6, 2026
These incidents contain separate assault strategies. Nonetheless, they show why smartphone safety has grow to be more and more necessary for crypto holders.
The Binance iOS warning highlights a elementary drawback with self-custody: defending a restoration phrase means defending each place the place that data is likely to be saved.
Uncover: The Crypto Presales This This autumn 2026
The publish Your iPhone Duo Beneath Assault? Binance Flags Harmful iOS Safety Flaw appeared first on Cryptonews.