Binance has warned iPhone users about a security vulnerability in Apple's iOS that could allow malicious applications to access files stored by other apps. The flaw, known as “worse_query,” may expose cryptocurrency recovery phrases, private keys and login credentials.
In a security warning issued on November 10, the crypto exchange identified iOS versions 26.7.1, 27.0.1 and 27.2 as affected. Binance clarified that the issue originates in Apple's operating system and is not limited to its own applications.
The vulnerability involves Apple's app sandbox, a security mechanism designed to keep applications isolated from one another. Normally, an app cannot access another application's private files without permission.
Also Read: Binance Introduces 7-Level Commission Sharing Amid France Account Closures
However, the worse_query flaw reportedly allows malicious software to bypass these restrictions and reach data stored in other apps. The vulnerability was published as a proof of concept on GitHub by a researcher using the name forcequitOS. The developer described it as a tool for developers rather than a standalone attack. It is also not a jailbreak, which means exploiting the issue does not necessarily require removing Apple's usual device restrictions.
The risk depends partly on how individual applications store sensitive information. Wallets that retain recovery phrases or private keys in accessible local files could face exposure if a malicious app exploits the vulnerability. There have been no confirmed reports of cryptocurrency theft linked to worse_query so far.
Binance has recommended users delete applications that have been downloaded from unverified third parties, such as IPA applications that have been manually signed. The company has also recommended that users update iOS software to the latest versions and keep their applications up-to-date. In cases where users think their wallet information has been hacked, they can create a fresh wallet.
Also Read: Binance Hack Shakes Crypto Confidence in India as 59% Support Complete Ban, Survey Finds
Apple released iOS 27.2.1 on November 9, but its published security notes do not specifically mention worse_query. Therefore, it remains unclear whether the update fully resolves the vulnerability.
The warning highlights the risks of storing sensitive financial information on mobile devices. iPhone users should review installed applications and avoid downloading software from unfamiliar sources while the issue remains under investigation.