Binance has warned Apple customers a few harmful iOS vulnerability that might expose crypto wallets, personal keys, and login credentials. The flaw, referred to as worse_query, permits malicious purposes to entry recordsdata usually remoted inside different apps. Binance warning identifies a number of affected iOS software program variations and urges customers to take away untrusted purposes instantly.
The vulnerability threatens greater than crypto wallets; apps storing delicate info regionally might additionally expose passwords, authentication knowledge, and private recordsdata. That makes the newest warning significantly regarding for iPhone customers who depend on their gadgets for banking and crypto transactions.
A vulnerability (worse_query) affecting iOS 26.7.1, 27.0.1, and 27.2 permits malicious apps to learn native recordsdata from different apps, placing seed phrases, personal keys, and login credentials in danger throughout the whole ecosystem. That is an iOS-level problem, not distinctive to Binance.…
— Binance (@binance) November 10, 2026
Binance says the issue impacts iOS itself slightly than its personal pockets infrastructure. Customers who suspect their gadgets have been compromised ought to create new wallets on clear gadgets and transfer their funds. The alternate additionally recommends resetting energetic login periods and updating put in software program.
Binance Warns A Harmful iOS Sandbox Escape
The vulnerability exploits Apple’s software sandbox, a safety mechanism designed to maintain purposes separated from each other. Usually, an software can’t freely entry one other software’s personal recordsdata. This isolation protects delicate info even when customers set up a number of purposes on the identical machine.
That is the place it will get harmful: the worse_query exploit reportedly bypasses these restrictions. A malicious software might doubtlessly entry directories containing info belonging to different put in purposes.
The researcher behind the general public GitHub repository describes worse_query as a sandbox escape affecting iOS 26 and iOS 27. The undertaking identifies affected releases spanning iOS 26.0 by 26.7.2 and iOS 27.2. Binance warns that uncovered info might embody cryptocurrency restoration phrases, personal keys, and login credentials.
The precise hazard relies upon partly on how particular person purposes retailer delicate info. Wallets retaining restoration phrases or different credentials in accessible native recordsdata face explicit dangers.
Safety researchers have additionally highlighted the significance of defending plaintext pockets info. SlowMist’s safety chief warned that the vulnerability might undermine assumptions about isolation between software containers.
Uncover: The Greatest Token Presales
Apple Customers Face Questions Over Safety Updates
Apple’s safety replace schedule provides one other dimension to the Binance iOS warning. Apple’s safety releases record iOS 27.2 and iOS 26.7.2 amongst its obtainable software program variations, each launched on October 26, 2026.
Nevertheless, Apple’s printed safety advisories don’t explicitly establish worse_query by identify. There’s at present no confirmed public assertion establishing that these updates totally resolve the precise sandbox escape.
A separate GitHub undertaking implementing the exploit additionally reported on November 8 that Apple’s obtainable software program releases had not patched worse_query. This leaves customers with an vital hole between putting in the newest obtainable replace and confirming {that a} explicit vulnerability has been mounted.
Binance recommends putting in the newest official iOS launch and retaining all purposes up to date. It additionally urges customers to take away purposes from unknown sources, together with manually signed IPA recordsdata.
For us, crypto holders, the most secure response to suspected compromise goes past merely deleting suspicious software program.
Earlier iPhone Assaults Put Crypto Wallets within the Highlight
The newest iPhone warning follows a number of safety incidents involving malicious purposes and crypto credentials. In September, Binance warned customers about FomoPeek, a third-party software whose variations 1.1 and 1.2 reportedly contained malicious code.
Safety researchers discovered that the software program might exploit iOS vulnerabilities to acquire elevated machine privileges. Doubtlessly uncovered info included restoration phrases, personal keys, login credentials, and different regionally saved knowledge.
Extra just lately, CertiK highlighted the DarkSword exploit framework, which reportedly focused cryptocurrency purposes by compromised web sites and susceptible iPhones.
#CertiKInsight
A brand new model of DarkSword, an iOS exploit equipment, is getting used to focus on crypto wallets on unpatched iPhones.
Merely opening a malicious website in Safari might be sufficient: no pockets connection, no signature wanted.
Right here's what you must know— CertiK Alert (@CertiKAlert) November 6, 2026
These incidents contain separate assault strategies. However, they display why smartphone safety has grow to be more and more vital for crypto holders.
The Binance iOS warning highlights a elementary downside with self-custody: defending a restoration phrase means defending each place the place that info may be saved.
Uncover: The Crypto Presales This This fall 2026
The submit Your iPhone Duo Beneath Assault? Binance Flags Harmful iOS Safety Flaw appeared first on Cryptonews.