alerts

Binance warns of unconfirmed iOS flaw that could expose wallet keys

Binance says an iOS bug could let a malicious app reach crypto wallet private keys. Apple hasn't confirmed it, so install iOS updates as they arrive and avoid unfamiliar apps.

November 10, 2026 · 1 min read

Affected: see below

What happened

Binance has warned about an iOS flaw, reported as a "sandbox escape" called "worse_query", that could let a malicious app get at data in other apps, including crypto wallet private keys. A researcher published details days before Apple's latest iOS security update. Apple has not publicly confirmed the bug, and sources say no fix is confirmed. It is unclear whether any users have actually been attacked.

Who is affected

iPhone users who hold crypto in self-custody wallet apps are the main concern. Affected iOS versions are not specified in the sources. Exchange-only users are at lower risk, but the same device safety steps still apply.

What to do now

Install the latest iOS update from Settings > General > Software Update, and keep checking for new ones.
Only install apps you need from the official App Store, and delete apps you don't recognize or no longer use.
Make sure your wallet recovery phrase is backed up offline, and never type it into any app, form or message.
If you hold a large amount, consider a hardware wallet so keys are not stored on your phone.
Turn on passkeys or an authenticator app for your exchange accounts and check recent account activity.
Watch for phishing emails or texts that use this news to push you to 'secure' your wallet, and ignore them.

Our alerts never ask you to click a link, log in, "verify" a wallet or move funds. Expect scammers to copy this news: if a message about it asks for any of that, it's a scam.

Sources

Written by AI Security Watch from the sources above and published automatically. Education only, not financial advice.