Binance warns iPhone users that an iOS flaw could expose crypto wallet keys

Binance warned that a malicious iPhone app could read files from other apps, potentially exposing crypto wallet recovery phrases, private keys and passwords.

The company flagged iOS 26.7.1, 27.0.1 and 27.2. A demo posted on GitHub under the name worse_query shows how a malicious app already installed on an iPhone can access some files that iOS normally keeps private. Binance cited no confirmed thefts using the technique.

Binance advised users to delete apps installed from untrusted sources and update iOS and all apps to the latest official versions. Anyone who suspects their iPhone was compromised should move their funds to a new wallet created on a clean device and sign out of all active sessions, the company said.