Binance Warns iPhone Users of iOS Flaw That Could Expose…
By Abdelaziz Fathi
AI summary of the source article
Binance has warned cryptocurrency users of an iOS sandbox flaw dubbed "worse_query" that could allow malicious apps to access locally stored private keys and recovery phrases. The issue affects multiple iOS versions, prompting recommendations to update devices.
Why it matters
The vulnerability is more serious for self-custody users because possession of a seed phrase or private key can give an attacker direct control over assets. Unlike an exchange password, compromised wallet credentials generally cannot simply be reset after funds are transferred.
Key facts
- Binance warned on November 10 that an iOS sandbox flaw known as "worse_query" could expose locally stored private keys and recovery phrases.
- The proof of concept demonstrates sandbox escapes affecting iOS 26.0 through 26.7.2 and iOS 27 through 27.2, letting apps read files across directories.
- Apple released iOS 27.2.1 and iOS 26.7.3 on November 9, though neither security release explicitly identifies worse_query by name.
Source excerpt · FinanceFeeds
Binance Warns iPhone Flaw Could Expose Crypto Wallet Keys Binance has warned cryptocurrency users that a publicly documented iOS sandbox flaw could allow a malicious application to read files belonging to other apps, potentially exposing locally stored recovery phrases, private keys and account credentials. The exchange issued the warning on November 10, identifying iOS 26.7.1, 27.0.1 and 27.2 amo…