Apple users get urgent security warning over iPhone flaw

Binance, the world's largest cryptocurrency exchange by spot trading volume, has warned iPhone users against a security vulnerability. The warning came days after a cyberattack impacted billions of dollars in digital assets under the exchange's custody.

On Oct. 29, Binance suffered a massive cyberattack affecting approximately $6.34 billion in digital assets.

Now, it has flagged a separate security threat that could potentially expose private information of crypto users.

Binance's alert to crypto holders using iPhones

In a Nov. 10 warning , Binance alerted Apple users an iOS vulnerability called worse_query , that could allow malicious applications to access files tied to other apps.

The researcher described the vulnerability as a "sandbox escape," meaning a malicious application could bypass security barriers designed to prevent apps from accessing each other's data.

A malicious app using the flaw could potentially expose crypto wallet recovery phrases, private keys and login credentials if those files are accessible on an affected device.

More on TheStreet Roundtable

Democrats' sweep sends Trump-linked assets reeling

Democrats' sweep sends Trump-linked assets reeling

Bitcoin, stocks crash in steepest selloff since Liberation Day

Bitcoin, stocks crash in steepest selloff since Liberation Day

Circle crushes Q3 estimates as staff shrinks 5%

Circle crushes Q3 estimates as staff shrinks 5%

The reach of this threat is estimated to be wide, given that roughly one in four active smartphones worldwide is an iPhone.

Binance says the flaw is an iOS-level issue, not one unique to its app. The risk to any user depends on a malicious app reaching their device and finding such files accessible.

According to a researcher's GitHub repository , the vulnerability seems to affect a broader range of iOS versions, although the published proof of concept requires additional configuration to work.

Neither Binance nor the researcher, as of now, has reported attacks or thefts involving the vulnerability, and no specific wallet application has been identified as exposed, as per The Hacker News .

What Apple users need to do

Binance advised users to remove applications downloaded from untrusted sources and install official iOS and app updates.

Users who suspect their devices have been compromised should create new wallets on clean devices, transfer their assets and reset active login sessions.

Meanwhile, Apple released iOS 27.2.1 and iOS 26.7.3 on Nov. 9, addressing several security issues. Apple's release notes, however, do not confirm whether either update fixes the worse_query vulnerability.

The attack on Binance earlier, that was brought to light by the company earlier last week, involved compromised employee computers.