Binance warns one malicious iPhone app can reach your wallet keys
Binance told iPhone users to delete sideloaded apps and update iOS after a public sandbox escape showed access to other apps' data containers.
By Ryan Merket · Published
Primary source: X · @binance
Why it matters
A public sandbox escape undermines the separation iPhone users rely on between apps, and wallet apps store local material - including seed phrases, private keys and session credentials - that separation is meant to protect.
Binance warned iPhone users on November 10th that an iOS flaw dubbed worse_query could let malicious apps read local files belonging to other apps, exposing seed phrases, private keys and login credentials. Binance (@binance) called it "an iOS-level issue, not unique to Binance" in its post on X.
The exchange named iOS 26.7.1, 27.0.1 and 27.2 in its warning. It advised users to remove apps from untrusted sources, update their software and take steps to protect their funds and accounts if they suspect a breach.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.