Binance Warns iPhone Users of iOS File-Access Flaw

Binance warned iPhone users on November 10 that a flaw called worse_query could allow malicious apps to access files stored by other apps, potentially exposing wallet recovery phrases, private keys and login credentials. The exchange identified iOS versions 26.7.1, 27.0.1 and 27.2 as affected, and said the issue lies in iOS rather than in Binance’s own software.

The warning describes a possible route to sensitive information, not confirmed theft. Binance has not identified any cryptocurrency theft caused by worse_query, and the published research does not establish that attackers have used the technique against users. Exposure would depend in part on where an app stores credentials and what protections it applies to them.

Researcher forcequitOS published a proof of concept on November 8. The demonstrated technique requires an App Group entitlement, a prerequisite that limits how broadly the demonstration applies. The researcher described it as a developer proof of concept, not a jailbreak. Access to a file also does not by itself mean that encrypted or otherwise protected information can be read.

Apple released iOS 27.2.1 and 26.7.3 on November 9. Its published security...