Cryptocurrency exchange Binance has warned iPhone and iOS users about a security vulnerability that could allow malicious apps to access sensitive information stored by other applications, potentially exposing cryptocurrency wallet credentials and private keys.
The warning comes less than two weeks after hackers stole oiver $6 billion from Binance, the largest cryptocurrency heist in history, though no connection between the two incidents has been reported.
In a security warning on social media network X, Binance identified the vulnerability, known as worse_query, in iOS 26.7.1, 27.0.1, and 27.2. The issue affects Apple’s operating system rather than any particular cryptocurrency application.
The flaw allows a malicious app to bypass iOS sandbox protections, which normally prevent applications from accessing one another’s private files. Depending on how an affected app stores its information, attackers could potentially retrieve wallet recovery phrases, private keys, and login credentials.
Binance said it had not identified any confirmed cryptocurrency thefts involving the flaw.
Researchers Say Apple’s Latest Update Does Not Fix the Flaw
Security researchers published proof-of-concept code on GitHub, demonstrating how applications could access files outside their usual permissions without requiring an iPhone to be jailbroken.
Apple recently released iOS update 27.2.1 , but the vulnerability remains unpatched in that release and iOS 27.3 beta 1.
Apple’s official security notes does list several fixes included in iOS 27.2.1 but do not identify worse_query as a resolved vulnerability.
Exploitation requires a malicious application to be installed on the device. The potential exposure also depends on how individual applications protect their stored data, meaning the vulnerability does not automatically expose every cryptocurrency wallet.
How iPhone Users Can Protect Their Cryptocurrency
While a confirmed fix remains unavailable, users can take several precautions to reduce their exposure.
- Keep iOS and apps updated, remove untrusted applications – Install official security updates through “Settings >> General >> Software Update.” While the latest update hasn’t been confirmed to fix worse_query, updates can protect against other vulnerabilities. Delete suspicious or unnecessary apps, particularly those installed from unknown sources through sideloading or manually signed installation files.
- Protect wallet recovery phrases, consider a hardware wallet – Avoid storing seed phrases or private keys in screenshots, Notes, or unencrypted files where another application might access them. Those holding substantial cryptocurrency assets can reduce their exposure by keeping private keys in a dedicated hardware wallet rather than relying entirely on software wallets.
Anyone who suspects their recovery phrase or private keys have been exposed should create a new wallet on a trusted device and transfer their assets. Potentially compromised account passwords should also be changed, and active login sessions revoked.
Binance recommends monitoring official Apple security announcements for updates addressing the vulnerability. Users should also avoid downloading unfamiliar applications while the issue remains unresolved.
Leave a Reply