Binance Warns of Apple iOS Flaw That Could Expose iPhone Users’ Private Keys

Binance has warned that an iOS vulnerability could allow malicious apps to access files held by other apps, potentially exposing iPhone users’ crypto wallet recovery phrases, private keys and login details. The warning matters because iOS normally uses app sandboxes to keep private files separate, though no crypto theft linked to this flaw has been confirmed.

A researcher published a proof of concept called “worse_query”, describing it as a sandbox escape affecting several iOS 26 and 27 versions. Apple released iOS 27.2.1 after its publication, but its security notes do not mention the flaw, and Apple has not confirmed whether the update fixes it; a security expert says it does. Binance advises users to remove apps from untrusted sources and update iOS and apps, and says anyone who suspects a breach should move funds to a new wallet made on a clean device and reset active login sessions.