GoKawiilBinance flags unpatched iOS flaw risking crypto wallet data
Binance has warned iPhone users of an iOS vulnerability dubbed worse_query that lets malicious apps read files from other apps, potentially exposing seed phrases, private keys, and login credentials. Security researchers who disclosed the flaw say it affects iOS 26.7.1, 27.0.1, and 27.2, and remains unpatched even in iOS 27.2.1 and the 27.3 beta.
GoKawiil's interpretation of the reporting above, not reported fact.
Because the issue bypasses Apple's sandbox protections at the OS level, it threatens any app storing sensitive data, not just crypto wallets, which suggests the exposure extends well beyond Binance's user base. Until Apple issues a fix, users relying on iOS security guarantees for safeguarding private keys may be more vulnerable than commonly assumed.
- Binance warns of an iOS flaw called worse_query that lets malicious apps read other apps' local files.
- Researchers say the vulnerability remains unpatched as of iOS 27.2.1 and the 27.3 beta.
- Binance advises deleting sideloaded apps, updating iOS, and moving funds to a new wallet if a breach is suspected.
Ledger Nano X Hardware Wallet — If seed phrases and private keys stored on your iPhone could be at risk from this vulnerability, moving your crypto credentials to a dedicated offline hardware wallet is a smart safeguard. The Ledger Nano X keeps your keys isolated from any phone app vulnerabilities, giving crypto holders extra peace of mind amid these kinds of iOS security concerns.
See Ledger Nano X Hardware Wallet on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: 9to5mac.com — Marcus Mendes, 2026-11-11
Published there as: “Binance warns iPhone crypto holders of security flaw researchers say remains unpatched”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.