Binance warns of iOS flaw that could leak crypto wallet secrets - BleepingComputer
Binance has warned about a critical iOS flaw that could allow third-party apps to access sensitive data including cryptocurrency seed phrases and private keys.
The crypto exchange clarifies that the issue is at the iOS level and does not impact only the Binance app. "A vulnerability (worse_query) affecting iOS 26.7.1, 27.0.1, and 27.2 allows malicious apps to read local files from other apps, putting seed phrases, private keys, and login credentials at risk across the entire ecosystem," Binance says.
Public exploit available
"worse_query" is a publicly disclosed iOS sandbox escape technique that allows an application to cross security boundaries and access the storage of other applications. Yesterday, a proof-of-concept exploit has been published that uses a tool called WQ Files to perform attacks relying on the technique.
WQ Files uses "worse_query" to browse, export, edit, and delete other apps' data without requiring a jailbreak.
Apple releases updates
Apple on November 9 released iOS security updates (iOS 27.2.1, 26.7.3, and 18.7.12) that address nine flaws. One of the fixed vulnerabilities, tracked as CVE-2026-113963, could allow an app to access sensitive user data. It is unclear if this is the same security issue Binance is warning of.
Related
