Binance warns of iOS flaw that could leak crypto wallet secrets

A vulnerability in specific iOS versions allows malicious third-party apps to escape their sandboxes and read private files belonging to other apps — without requiring a jailbreak. For cryptocurrency users, this is especially dangerous because sensitive data like seed phrases and login credentials stored locally on the device can be silently exfiltrated by a rogue app. The release of a working proof-of-concept exploit (WQ Files) dramatically lowers the bar for attackers, meaning exploitation is no longer theoretical. Apple has issued security updates that likely address this flaw, making prompt patching the single most important mitigation. This incident underscores the broader risk of storing highly sensitive secrets in app-local storage on shared mobile operating system environments.