Binance warns iPhone crypto holders about unpatched iOS flaw
Nov 12, 2026, 4:37 AM UTC
•Lukas Brandt
•1min read
Advertisement
Advertise on LavX NewsSee options
Binance urged iPhone users who hold cryptocurrency to take precautions after researchers disclosed a flaw that can expose data stored by other apps. The company and security researchers disagree on whether Apple has patched the issue.
Binance warned iPhone users on Nov. 11 that an iOS vulnerability could let malicious apps read sensitive data from other apps, including cryptocurrency seed phrases, private keys and login credentials.
What Binance and researchers reported
Binance identified the flaw as worse_query and said it affects iOS 26.7.1, iOS 27.0.1 and iOS 27.2. The company urged users to delete apps installed from untrusted sources, including sideloaded or signed IPA files, update iOS and all apps, move funds to a new wallet created on a clean device if they suspect a breach, and reset active login sessions.
Security researchers @0xjohnny and @forcequitOS disclosed the vulnerability and published a proof of concept on GitHub. Their demonstration shows how the flaw can bypass iOS sandbox protections that block apps from accessing files owned by other apps.
Patch status remains unclear
A Community Note on Binance’s post described worse_query as an unpatched zero-day. @forcequitOS said neither iOS 27.2.1 nor iOS 27.3 beta 1 fixes the vulnerability. Apple has not listed a fix in its recent security updates, including iOS 27.2.1.
The researchers said they built the code for developers, but other developers have already created apps that use it. One file manager built with the proof of concept can access, change and delete data from other apps <a href="https://myappsplus.com/vela-maps-is-the-closest-thing-to-google-maps-without-google/” title=”Vela Maps is the closest thing to Google Maps without Google”>without a jailbreak.
No confirmed attacks
Neither Binance nor the researchers have reported attacks or cryptocurrency thefts tied to the flaw. iPhone users who store crypto assets on their devices face the greatest risk until Apple confirms a patch.
ac, by Marcus Mendes, 9to5Mac, Nov 11, 2026
Advertisement
Advertise on LavX NewsSee options
