Back to Feed
VulnerabilitiesNov 10, 2026

Binance Warns iPhone Users of Major iOS Flaw That May Expose Crypto Wallet, Private Keys

Binance warns iPhone users of iOS flaw worse_query exposing crypto wallet data.

Binance has alerted iPhone users to a critical iOS flaw named 'worse_query' that allows malicious apps to access sensitive data from other applications. This vulnerability, affecting iOS versions 26.7.1, 27.0.1, and 27.2, could expose cryptocurrency wallet seed phrases, private keys, and login credentials. While the researcher describes it as a proof-of-concept, security experts warn that untrusted IPA packages could exploit this to steal wallet recovery phrases and keystore data.

AI summary of the linked source. Not reviewed by an editor. How this works

Vendor Watch

Run Binance?

Get an email when a new story names Binance, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

The lesson from this incident

Full lesson

A critical iOS vulnerability dubbed 'worse_query' allows malicious applications to read sensitive data — including cryptocurrency seed phrases, private keys, and login credentials — belonging to other apps on the same device. The flaw affects multiple iOS versions and can be exploited via untrusted IPA packages, meaning users who sideload apps from unofficial sources face the greatest risk. This matters enormously in the crypto space because exposed private keys or seed phrases result in irreversible financial loss with no recourse. The incident highlights how unpatched mobile operating systems combined with low security awareness around app sourcing create a dangerous attack surface for high-value digital assets.

What helps against this

How we list vendors

Entities

Binance (vendor)iOS (product)