CZ Urges iPhone Users to Update iOS Amid DarkSword Threat

DarkSword belongs to a lineage of iOS exploit kits, following Pegasus-style spyware and earlier Safari-based drive-by attacks, that target crypto holders because private keys often sit unencrypted in wallet apps on the same device used for browsing. Self-custody wallets assume the phone itself is a secure enclave, but that assumption only holds if the operating system is current. Apple ships patches regularly; attackers wait for users who delay installing them.

Crypto holders on iPhones must now treat an iOS update as a wallet-security action, not a routine chore, since CertiK says visiting a single malicious Safari page can be enough for compromise. Wallet developers cannot push a fix themselves, so MetaMask, Trust Wallet and similar apps are exposed until the user patches the device underneath them. Anyone running an older iOS build with a funded wallet is the immediate loser; Apple's and CertiK's visibility into the exploit kit is the only edge defenders currently have.

Self-custody is sold as removing trust in a third party, yet CZ's advice exposes the opposite: an iPhone holder's crypto security now rests entirely on Apple's patch cadence and the user's diligence in applying it. A phone running outdated software turns 'not your keys, not your coins' into 'your keys, Apple's schedule.' That is not a flaw unique to DarkSword, but a standing trade-off in holding assets on general-purpose hardware rather than dedicated signing devices.

Watch whether Apple issues a dedicated security advisory or emergency patch addressing the DarkSword kit beyond routine iOS updates, since CertiK's November 6 warning describes an active campaign rather than a closed vulnerability. A formal CVE or patch note naming the exploit chain would confirm Apple has isolated the flaw; continued silence alongside new DarkSword variants would signal the kit is still evolving faster than defenses.

The total crypto market fell 0.1% in the 4 hours after the first headline, after rising 0.3% in the 2 hours before.

48 prices, one every 30 minutes · The move was larger before the first headline than after: an observation, not an explanation. The market also moves on things nobody publishes.