Binance Warns iOS Flaw Could Expose Wallet Seed Phrases as Apple’s Latest iPhone Patch Stays Silent
By Micah Zimmerman
AI summary of the source article
Binance warned iPhone users that a publicly disclosed iOS sandbox escape vulnerability, dubbed worse_query, could allow malicious apps to read local files, including crypto wallet seed phrases and private keys.
Why it matters
The vulnerability "allows malicious apps to read local files from other apps, putting seed phrases, private keys, and login credentials at risk across the entire ecosystem."
Key facts
- A researcher released the worse_query sandbox escape exploit on GitHub on Nov. 8, affecting versions of iOS 26 and 27.
- The flaw allows malicious apps to read local files from other apps if a user installs an untrusted app outside the App Store.
- Apple released iOS 27.2.1 and iOS 26.7.3 on Nov. 9, but the security notes did not mention worse_query or a sandbox escape fix.
Source excerpt · Bitcoin Magazine
Bitcoin Magazine Binance Warns iOS Flaw Could Expose Wallet Seed Phrases as Apple’s Latest iPhone Patch Stays Silent Binance told iPhone users a public iOS sandbox escape called worse_query could let malicious apps read seed phrases and private keys stored by other apps, while Apple's Nov. 9 updates do not mention the bug. This post Binance Warns iOS Flaw Could Expose Wallet Seed Phrases as Apple’…