thehackernews.com
Nov 10, 2026
Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed
AI-summarised brief · reviewed before publication
Binance warned users that a newly published iOS sandbox escape, named worse_query, allows malicious apps to read other apps’ files on iPhones running iOS 26 and 27. The code, released by researcher forcequit with 0xjohnny, can expose seed phrases, private keys, and login credentials. Apple’s recent iOS 26.7.3 and 27.2.1 updates do not address the flaw, and no fix has been confirmed. Binance advised users to delete untrusted apps, update iOS, and move funds to a new wallet if a breach is suspected.
💡 Why It Matters
- · The vulnerability bypasses iOS’s core isolation, threatening the security of crypto wallets without requiring a jailbreak.
- · It forces users to rely on manual mitigation steps while Apple investigates, exposing a critical gap in mobile app security.
