Back Kucoin

SlowMist Warns of Malware Risk from the ComeCome App on iOS Devices

Kucoin • September 20, 2026

BlockBeats news, on September 20, Yu Xian, founder of SlowMist, posted that, compared to the case of the FomoPeek app being poisoned on iPhone leading to users' crypto assets being stolen, greater attention should be paid to the incident where the food delivery app ComeCome used a similar method to poison and steal crypto assets.

He noted that such cases demonstrate that even apps appearing normal may be poisoned, putting users at risk of asset security issues after use, and that these incidents occurred on iPhone devices.

Cosine advises users to complete their system updates as soon as possible after the new iOS version is released, and cautions that iPads and Macs may also be at similar risk, urging continued vigilance.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

FomoPeek Malware Exposes Crypto Wallets on iOS Devices Binance and SlowMist have issued warnings regarding the FomoPeek app, versions 1.1 and 1.2, which contain malicious code capable of stealing private keys, seed phrases, and login credentials from iPhone and iPad users. The malware exploits iOS vulnerabilities, allowing it to escape the application sandbox and access sensitive data from other apps. Users who installed FomoPeek are advised to delete the app, update their iOS, and create new wallet credentials on a clean device. The malware's exploitation framework includes eight attack methods targeting iOS versions from 12.0 to 26.1. The incident has raised significant concerns among self-custody crypto users, as attackers can control stolen assets without needing continued access to the victim's device. Binance has recommended immediate action for affected users to safeguard their assets. The situation follows multiple reports of stolen assets linked to the malicious app. 11 sources 69

Extracted Entities

SlowMist Warns of Malware Risk from the ComeCome App on iOS Devices

The full story

Extracted Entities

Attack Types (1)

Malware (2)

Platforms (1)