If you're holding crypto on your iPhone, there's bad news. Crypto exchange Binance has issued a warning to iPhone users about an iOS vulnerability that could potentially allow third-party apps to read and steal valuable data such as seed phrases, private keys, and login credentials.
Worse_Query iOS vulnerability puts iPhone crypto holders at risk
The vulnerability was found by two independent security researchers and disclosed by Binance. | Image by X
The vulnerability was found by two independent security researchers and disclosed by Binance via a post on X. The post warned iPhone users that this Worse_Query vulnerability, affecting iOS versions 26.7.1, 27.0.1, and 27.2, allows malicious apps to read local files—seed phrases, private keys, and login credentials—across the entire ecosystem.
According to Binance, the issue is at the iOS level and affects all devices running the aforementioned iOS versions.
The vulnerability remains unpatched
Worse_Query is NOT patched in iOS 27.2.1 and 27.3 beta 1. | Image by X
What's even scarier is that this vulnerability was found way back in August by security researchers @0xjohnny and @forcequitOS.
Both chimed in on X to confirm that Worse_Query is NOT patched in iOS 27.2.1 and 27.3 beta 1. There's also a GitHub page with a proof-of-concept method that can bypass Apple's sandbox environment, which normally prevents apps from accessing each other's data.
This means anyone with basic knowledge of app design could use the code and create malicious apps that can access sensitive data on your iPhone.
Recommended For You
The researchers weren't planning on making the vulnerability public, but Apple was stalling. | Image by X
As a matter of fact, some developers have already used the GitHub page to design a file manager that can access and modify data in other apps without root access or a jailbreak.
One of the researchers posted on X that he wasn't planning on making the vulnerability public, but Apple was stalling (probably working on a fix), and people were starting to play with the proof-of-concept code.
Poll
0 Votes
Have you noticed anything suspicious lately regarding your crypto on your iPhone?
How to keep your iPhone safe from this Worse_Query iOS vulnerability
There's not much you can do, since Apple hasn't officially plugged this hole yet. However, Binance has shared several things you should do to limit the risk.
Immediate Action Required:
Delete any apps installed from untrusted sources (such as sideloaded or manually signed IPAs).
Update iOS and all apps to the latest official versions.
If you suspect a breach, transfer funds to a new wallet created on a clean device and reset all active login sessions.
According to The Hacker News, there are no reports of actual attacks on cryptocurrency wallets or other critical systems using this vulnerability at the time of this writing.
In the case of the Worse_Query vulnerability, it's up to Apple to fix this as soon as possible. According to the security researchers who found the backdoor, the company has been aware of it since August, but for some reason (probably refusing to spend money on a bounty for the researchers) has stayed silent.
Crypto wallets are normally pretty secure and encrypted, so there's probably no immediate risk of people losing crypto assets. That said, exposing credentials, passwords, recovery phrases, and other sensitive data stored outside a crypto wallet could effectively lead to people losing their money.
Have you noticed anything suspicious lately regarding your crypto on your iPhone? Share your experience in the comment section below.
Read more about smartphone vulnerabilities and security breaches here:
Mariyan, a tech enthusiast with a background in Nuclear Physics and Journalism, brings a unique perspective to PhoneArena. His childhood curiosity for gadgets evolved into a professional passion for technology, leading him to the role of Editor-in-Chief at PCWorld Bulgaria before joining PhoneArena. Mariyan's interests range from mainstream Android and iPhone debates to fringe technologies like graphene batteries and nanotechnology. Off-duty, he enjoys playing his electric guitar, practicing Japanese, and revisiting his love for video games and Haruki Murakami's works.
A discussion is a place, where people can voice their opinion, no matter if it
is positive, neutral or negative. However, when posting, one must stay true to the topic, and not just share some
random thoughts, which are not directly related to the matter.
Things that are NOT allowed:
Off-topic talk - you must stick to the subject of discussion
Offensive, hate speech - if you want to say something, say it politely
Spam/Advertisements - these posts are deleted
Multiple accounts - one person can have only one account
Impersonations and offensive nicknames - these accounts get banned
To help keep our community safe and free from spam, we apply temporary limits to newly created accounts:
New accounts created within the last 24 hours may experience restrictions on how frequently they can
post or comment.
These limits are in place as a precaution and will automatically lift.
Moderation is done by humans. We try to be as objective as possible and moderate with zero bias. If you think a
post should be moderated - please, report it.
Have a question about the rules or why you have been moderated/limited/banned? Please,
contact us.
Things that are NOT allowed:
To help keep our community safe and free from spam, we apply temporary limits to newly created accounts: