Binance has warned iPhone users about an iOS security vulnerability known as "worse query," which could allow malicious applications to access files stored by other apps. The flaw could put cryptocurrency wallet recovery phrases, private keys, and login credentials at risk.
The vulnerability involves Apple's app sandbox system, a security feature designed to keep applications from accessing one another's private files. A sandbox escape allows an application to bypass these restrictions and potentially access information outside its permitted storage.
Binance identified iOS versions 26.7.1, 27.0.1, and 27.2 among those affected. The exchange stressed that the issue exists at the operating system level and is not limited to its own application. The potential exposure depends on how individual applications store and protect sensitive information. Wallets that keep recoverable credentials in accessible local files could face greater risks if a malicious application gains access.
The vulnerability was publicly demonstrated by security researchers, making the issue more concerning for users who install applications from untrusted sources. However, Binance and the researchers have not reported confirmed cases of cryptocurrency theft linked to the flaw.
Binance advised users to remove untrusted or manually installed applications and install the latest available iOS and app updates through official channels. Users who suspect their wallet information has been exposed should create a new wallet on a clean device, transfer their assets, and reset active login sessions.
The warning highlights how cryptocurrency security extends beyond blockchain networks and wallet providers. Even when funds are held in a self-custody wallet, weaknesses in the device storing its credentials can create another point of exposure. For crypto users, protecting recovery phrases and controlling which applications have access to their devices remain essential.
