Binance Warns iPhone Users of iOS Security Flaw That Could Expose Crypto Wallet Keys

Binance has issued an urgent security warning to iPhone users after researchers identified an iOS vulnerability that could expose sensitive cryptocurrency wallet information. The flaw, known as “worse_query,” may allow malicious applications to access private files belonging to other apps.

In its November 10 advisory, Binance identified iOS versions 26.7.1, 27.0.1, and 27.2 as potentially affected. The exchange warned that attackers could access private keys, wallet recovery phrases, and login credentials stored on vulnerable devices.

iOS Vulnerability Raises Crypto Wallet Security Concerns

The worse_query vulnerability targets Apple’s application sandbox, which normally prevents apps from accessing each other’s private information. Researchers demonstrated that the flaw could bypass certain file-access restrictions and expose directories belonging to other applications.

However, the vulnerability does not automatically compromise every cryptocurrency wallet. The actual risk depends on how individual applications store and protect sensitive information.

Wallets that store recovery phrases or private keys in accessible local files could face greater exposure. Meanwhile, applications using stronger encryption and hardware-backed security may have additional protections against unauthorized access.

The published research describes worse_query as a proof-of-concept exploit. No confirmed cryptocurrency theft directly linked to this vulnerability has been established.

Binance Urges Users to Remove Untrusted Applications

Binance advised iPhone owners to immediately review installed applications and remove software obtained from untrusted sources. The warning particularly highlights sideloaded applications and manually signed IPA files.

The exchange also recommended updating iOS and installed applications to their latest official versions. However, Apple’s published security advisories have not explicitly confirmed whether recent updates completely address worse_query.

Users who suspect their wallet credentials have been exposed should create a new wallet on a trusted device. They should then transfer their cryptocurrency holdings and reset potentially compromised login sessions.

Growing Mobile Security Threats Challenge Crypto Investors

The warning highlights broader security concerns surrounding mobile cryptocurrency storage. Unlike traditional banking accounts, self-custody wallets rely on private keys that directly control access to digital assets.

Anyone obtaining a wallet’s recovery phrase may gain control of its funds without requiring the owner’s authorization. Consequently, protecting these credentials remains essential for cryptocurrency investors.

Binance’s latest advisory follows earlier warnings involving malicious iPhone applications designed to steal sensitive financial information. Although researchers have not confirmed active exploitation of worse_query against crypto wallets, the discovery reinforces the importance of device security.