iPhone Security Flaw Could Put Crypto Wallets at Risk, Binance Warns

Binance has warned iPhone users about a security flaw that could put their cryptocurrency wallets and personal information at risk. The issue affects Apple's iOS operating system and could allow harmful apps to access private files stored by other applications.

The vulnerability, known as "worse_query," may expose important details such as crypto wallet recovery phrases, private keys, and login information. If hackers get hold of these details, they could gain access to users' wallets and steal their digital assets.

Binance shared the warning after security researchers found that certain iOS versions could allow apps to bypass Apple's built-in security protections.

Security Flaw Could Put Crypto Wallets at Risk

The issue affects iOS versions 26.7.1, 27.0.1, and 27.2, according to Binance. Normally, iPhone apps are kept separate from each other, which prevents one app from accessing another app's private files.

However, the newly reported flaw could allow a harmful application to get around these restrictions. This means an app could access information that should normally remain protected.

Security researchers have also released a working demonstration of the flaw. A tool called WQ Files can reportedly access, copy, change, and delete files belonging to other apps without requiring an iPhone to be jailbroken.

However, hackers would first need to get a harmful app installed on the target device. This could happen if users download apps from unknown websites or other untrusted sources.

Binance Asks Users to Update Their iPhones

Binance has advised iPhone owners to install the latest official iOS updates and keep their applications updated. The exchange has also asked users to remove apps they do not recognize or trust.

Apple released new security updates on November 9, but it is still unclear whether these updates fully fix the worse_query issue. Users should therefore continue to follow official security updates.

Binance also suggested moving funds to a new wallet created on a clean device if users believe their phones may have been affected. They should also reset active login sessions to reduce the risk of unauthorized access.

No Confirmed Crypto Theft Linked to the Flaw

So far, there have been no confirmed reports of cryptocurrency stolen through this particular vulnerability. However, the issue has raised concerns because wallet recovery phrases and private keys can give someone direct access to digital assets.

The warning also comes shortly after the reported $6.3 billion Binance crypto theft in October. However, there is no known connection between the two incidents.

The latest warning is a reminder for crypto holders to pay attention to device security. Avoiding unknown apps, keeping software updated, and storing wallet recovery phrases offline can help reduce the risk of losing funds.