Reporting · technology
Binance warns Apple users of iOS sandbox flaw that could expose wallet data
Binance says an iOS flaw called worse_query could let malicious apps read wallet secrets, and it advised users to move funds to new wallets.
Quick take
- Binance warned Apple users that an iOS sandbox escape named worse_query could expose wallet data.
- The exchange said the flaw lies in iOS rather than its wallet, and it advised users to move funds to new wallets.
- Apple has not named the flaw explicitly in its advisories, and a GitHub project said on November 8 that Apple's releases remained unpatched.
Cryptonews reported that Binance has warned Apple users about a weakness in iOS that could let malicious apps reach data they should not see. The flaw is named worse_query and is described as a sandbox escape, which would allow an app to read the local files belonging to other apps. According to the warning, that access could expose recovery phrases, private keys and login details.
The warning lists iOS 26.7.1, 27.0.1 and 27.2 as affected. A GitHub researcher has published a broader list that covers iOS 26.0 through 26.7.2, along with 27.2. Binance said the issue lies in iOS and not in its own wallet, so the exchange placed the cause outside its product.
Binance advised users to create new wallets and move their funds into them. The exchange also recommended resetting login sessions and updating software on their devices. Apple released iOS 27.2 and 26.7.2 on October 26, 2026, but Cryptonews noted that Apple's advisories do not name worse_query explicitly. A GitHub project said on November 8 that Apple's releases remained unpatched at that point, leaving the scope of the fix unclear.
Sources
Machine-written from the publishers’ reports and checked against them · How Dextape writes
