Binance Warns of iOS Flaw That Could Expose Wallet Secrets

Binance warned iPhone users on November 10 that a publicly described iOS vulnerability could let malicious apps read files belonging to other apps, potentially exposing stored cryptocurrency wallet secrets and login credentials. The exchange identified iOS versions 26.7.1, 27.0.1 and 27.2 as affected and said the issue lies in Apple’s operating system, not Binance’s own app.

The flaw, called worse_query, is described as a sandbox escape: a technique that can cross protections intended to keep apps’ data separate. Binance said malicious software could access local files containing seed phrases, private keys and login information. The warning describes a possible exposure path, not evidence that all devices or wallets running the listed versions have been compromised.

Security researcher forcequitOS published proof-of-concept code on GitHub on November 8. The researcher described the code as intended for developers and not useful by itself. Other developers have used the technique to build WQ Files, a file manager reported to access, edit and delete data from other apps without a jailbreak. The demonstration therefore shows access to app data, but does not by itself establish that...