Skip to content
Binance Alerts Users to iOS Flaw Exposing Crypto Wallet Keys

Binance Alerts Users to iOS Flaw Exposing Crypto Wallet Keys

First seen 10 Nov 2026, 13:42 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 10, 2026 at 13:43 UTC
  • •An iOS sandbox escape vulnerability could expose sensitive crypto data.
  • •Binance advises users to uninstall untrusted apps and update their devices.
  • •No confirmed attacks have been reported, but proof-of-concept code is public.

Binance has issued a warning regarding an iOS sandbox escape vulnerability that could allow malicious apps to access sensitive data, including crypto wallet keys and recovery phrases, on devices running iOS 26 and 27. The vulnerability, named worse_query, was released by a researcher on GitHub and enables apps to read files from other applications without requiring a jailbreak. Although Apple released updates for iOS 26 and 27 on November 9, 2026, it remains unclear if these updates address the vulnerability. Binance has advised users to uninstall apps from untrusted sources and to transfer funds to new wallets if they suspect a breach. No confirmed attacks have been reported at this time, but the potential for exploitation exists due to the proof-of-concept code available publicly. The affected iOS versions include 26.7.1, 27.0.1, and 27.2, with the latest updates not mentioning the worse_query issue in their security notes.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 2h ago How this analysis works

Timeline

2026-11-09
Apple releases iOS updates
Apple released iOS 27.2.1 and 26.7.3, but these updates do not address the worse_query vulnerability.
The Hacker News
2026-11-10
Binance issues security warning
Binance warns users about the worse_query vulnerability that could expose crypto wallet keys on iOS devices.
Cointelegraph

More articles in this cluster (5)

Following this threat?

Track Apple in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (7)

1 / 3

Common questions

Which iOS versions are affected?
The vulnerability affects iOS versions 26.7.1, 27.0.1, and 27.2.
Is there a fix for this vulnerability?
As of now, it is unclear if the recent iOS updates address the worse_query vulnerability.
What should users do to protect their wallets?
Users should uninstall untrusted apps and consider transferring funds to new wallets on clean devices.