Choose Rich Live
Crypto News

Binance warns iOS flaw risks wallet seed phrases and private keys

Binance has issued an alert regarding an iOS vulnerability dubbed worse_query that allows malicious applications to read local files from other apps, threatening seed phrases, private keys, and login credentials.

Screenshot of a security warning issued by Binance detailing the iOS worse_query vulnerability alongside the Binance logo.
Image: @DegenerateNews

Binance has issued a security warning concerning an iOS vulnerability dubbed "worse_query" that impacts iOS versions 26.7.1, 27.0.1, and 27.2. The security flaw permits malicious applications to read local files stored by other apps on the device, putting sensitive data including wallet seed phrases, private keys, and login credentials at risk across the entire ecosystem.[1][2][3][4]

The cryptocurrency exchange emphasized that the flaw exists at the operating system level and is not unique to Binance. In response, Binance advised users to delete any applications installed from untrusted sources, such as sideloaded or manually signed IPAs, and to update iOS and all applications to their latest official releases. Users who suspect their devices may have been compromised are urged to transfer their funds to a new wallet created on an uncompromised device and reset all active login sessions.[3][4]

Key facts

  • Binance warned of an iOS vulnerability named worse_query affecting versions 26.7.1, 27.0.1, and 27.2.
  • The flaw enables malicious apps to access local files from other apps, potentially exposing seed phrases, private keys, and login credentials.
  • Binance stated that the issue is an iOS-level vulnerability and is not unique to its platform.
  • Binance advised users to delete apps from untrusted sources, including sideloaded or manually signed IPAs, and update iOS and all apps.
  • Users suspecting a breach were urged to transfer funds to a new wallet set up on a clean device and reset all active login sessions.

Sources 路 4 sources

  1. SS

    SolanaNews.sol@solananewPost on X 路

    馃毃BREAKING: @BINANCE WARNS AN IOS FLAW IN VERSIONS 26.7.1, 27.0.1 AND 27.2 CAN LET MALICIOUS APPS ACCESS SEED PHRASES AND PRIVATE KEYS, URGING ALL IPHONE USERS TO UPDATE NOW!!!馃毃 https://t.co/GxV2NpKBPo

    Open source
  2. SI

    Solid Intel 馃摗@solidintel_xPost on X 路

    INTEL: Binance warns iOS flaw lets malicious apps read seed phrases and private keys from other apps

    Open source
  3. CB

    Crypto Banter@crypto_banterPost on X 路

    馃毃BINANCE WARNS OF iOS VULNERABILITY RISKING WALLET SEED PHRASES! @binance has flagged a vulnerability called worse_query that affects iOS 26.7.1, 27.0.1, and 27.2. The flaw allows malicious apps to read local files from other apps, potentially exposing seed phrases, private keys, and login credentials. Binance stressed that this is an iOS-level issue and not unique to its platform. Users are advised to delete apps from untrusted sources, update iOS, and move funds to a new wallet on a clean device if a breach is suspected.

    Open source
  4. DN

    DEGEN NEWS@DegenerateNewsPost on X 路

    NEW: @binance WARNS AN iOS VULNERABILITY CALLED "WORSE_QUERY" LETS MALICIOUS APPS READ FILES FROM OTHER APPS, PUTTING SEED PHRASES, PRIVATE KEYS AND LOGIN CREDENTIALS AT RISK IT URGES USERS TO DELETE SIDELOADED APPS AND UPDATE iOS https://t.co/fwTCawc1iI

    Open source