According to Binance, on November 11, the exchange warned of an iOS 'worse_query' vulnerability that could expose crypto wallet private keys and recovery phrases. The flaw allows attackers to bypass iPhone's sandbox security and access files stored by other apps. Affected iOS versions include 26.7.1, 27.0.1, and 27.2. Security researcher forcequitOS disclosed the vulnerability on November 9, and Apple released patches iOS 27.2.1 and 26.7.3 the same day. However, Apple did not explicitly confirm whether the latest updates fixed the flaw. Developer Christoph Kolbicz released 'WQ Files' on November 9, a tool demonstrating how the vulnerability can be exploited to read, modify, and delete files from other apps without jailbreaking. Binance advised users to remove apps from unknown sources, update to the latest iOS version, and transfer assets to a new wallet if private keys or recovery phrases may have been compromised. No confirmed cases of asset theft using this vulnerability have been reported so far.
Disclaimer: This content is for informational purposes only and does not constitute investment advice or encourage the buying or selling of crypto assets. It is intended to provide information about industry developments and is not directly related to the services offered by Gate TR. Although information obtained from third-party sources has been carefully reviewed, Gate TR assumes no responsibility for any errors or omissions. Crypto assets involve high risks and may experience significant price fluctuations. Before making any investment decisions, you should assess your financial situation and risk tolerance, conduct your own research, and make decisions independently.
