CZ Urges iPhone Users to Update iOS Amid DarkSword Threat

DarkSword belongs to a lineage of iOS exploit kits, following Pegasus-style spyware and earlier Safari-based drive-by attacks, that target crypto holders because private keys often sit unencrypted in wallet apps on the same device used for browsing. Self-custody wallets assume the phone itself is a secure enclave, but that assumption only holds if the operating system is current. Apple ships patches regularly; attackers wait for users who delay installing them.

Crypto holders on iPhones must now treat an iOS update as a wallet-security action, not a routine chore, since CertiK says visiting a single malicious Safari page can be enough for compromise. Wallet developers cannot push a fix themselves, so MetaMask, Trust Wallet and similar apps are exposed until the user patches the device underneath them. Anyone running an older iOS build with a funded wallet is the immediate loser; Apple's and CertiK's visibility into the exploit kit is the only edge defenders currently have.

Self-custody is sold as removing trust in a third party, yet CZ's advice exposes the opposite: an iPhone holder's crypto security now rests entirely on Apple's patch cadence and the user's diligence in applying it. A phone running outdated software turns 'not your keys, not your coins' into 'your keys, Apple's schedule.' That is not a flaw unique to DarkSword, but a standing trade-off in holding assets on general-purpose hardware rather than dedicated signing devices.

Watch whether Apple issues a dedicated security advisory or emergency patch addressing the DarkSword kit beyond routine iOS updates, since CertiK's November 6 warning describes an active campaign rather than a closed vulnerability. A formal CVE or patch note naming the exploit chain would confirm Apple has isolated the flaw; continued silence alongside new DarkSword variants would signal the kit is still evolving faster than defenses.

The move was larger before the first headline than after. That is an observation, not an explanation: the market also moves on things nobody publishes.