Apple Patches Critical iPhone Flaw Linked to Crypto Attacks
Apple pushed emergency iOS and iPadOS fixes for a CoreGraphics flaw on September 28, with Apple saying the issue could let specially crafted files trigger arbitrary code execution on affected devices. Several pieces tie the flaw to sophisticated or targeted attacks, and one says no public evidence links it to confirmed cryptocurrency theft. One piece also says the bug may have been exploited against specific people on older iOS versions.
What this rests on
What it means
Each sentence links inside to the piece that supports it.
iPhone users and crypto wallet holders are the groups most likely to notice this first, because the flaw is described as affecting devices that can be reached through a file and as being tied to attacks on sensitive wallet data. On older iOS versions, people using those devices are the ones named in the description of the attacks.
Before these updates, a specially crafted or malicious file could be used against the CoreGraphics flaw; after the updates, Apple says iOS 26.7.1 and iPadOS 26.7.1 contain the fix for that issue. What stays unchanged in the descriptions is that no public evidence is given linking the flaw to confirmed cryptocurrency theft.
What remains unknown is whether the activity touching crypto wallet data is the same activity Apple links to the CoreGraphics flaw, since one piece only says there is no public evidence of confirmed cryptocurrency theft. A fuller picture would come from more detail about the attacks themselves and whether any wallet theft was verified.
Market reaction
How the story was built
Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.
Other recent incidents
| When | What happened | Figure |
|---|---|---|
| 2 days ago | KolanHook (1.279453 ETH) incident | no figure in dollars |
| 3 days ago | UNCX Network V2 · Incorrect Share Accounting incident | $86k |
| 3 days ago | Pirate Chain · Transaction validation vulnerability incident | $10.7M |
| 4 days ago | Gamdom · Hot wallet server compromise incident | $4.2M |
| 7 days ago | Papertrade · Price manipulation incident | $1.3M |
4197 incidents stored