Binance Warns iPhone Users of Major iOS Flaw That May Expose Crypto Wallet, Private Keys
Binance warns iPhone users of iOS flaw worse_query exposing crypto wallet data.
Binance has alerted iPhone users to a critical iOS flaw named 'worse_query' that allows malicious apps to access sensitive data from other applications. This vulnerability, affecting iOS versions 26.7.1, 27.0.1, and 27.2, could expose cryptocurrency wallet seed phrases, private keys, and login credentials. While the researcher describes it as a proof-of-concept, security experts warn that untrusted IPA packages could exploit this to steal wallet recovery phrases and keystore data.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Binance?
Get an email when a new story names Binance, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA critical iOS vulnerability dubbed 'worse_query' allows malicious applications to read sensitive data — including cryptocurrency seed phrases, private keys, and login credentials — belonging to other apps on the same device. The flaw affects multiple iOS versions and can be exploited via untrusted IPA packages, meaning users who sideload apps from unofficial sources face the greatest risk. This matters enormously in the crypto space because exposed private keys or seed phrases result in irreversible financial loss with no recourse. The incident highlights how unpatched mobile operating systems combined with low security awareness around app sourcing create a dangerous attack surface for high-value digital assets.
What helps against this
How we list vendors- Device management (MDM and UEM)
Every company laptop and phone is known, encrypted, locked down and up to date.
- Application allowlisting
Any program that reaches a computer can run, including ransomware and the remote-access tools attackers bring with them.
- Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.