Binance warns iPhone users of iOS bug that could expose crypto wallet keys

iOS has relied on app sandboxing since its early years, isolating each app's files so a malicious download cannot reach another app's data. That assumption underpins how mobile wallets store seed phrases and private keys on the device itself rather than in the cloud. A researcher published the worse_query flaw days before Apple's latest security update, describing a way for one app to read another's local files. Apple has not confirmed the bug, leaving the timeline for a fix unclear.

Binance named iOS 26.7.1, 27.0.1 and 27.2 as affected and told users to delete sideloaded or otherwise untrusted apps rather than wait for a patch. Anyone holding a wallet app outside the App Store now has to decide between removing it and losing convenience, or keeping it and risking seed-phrase exposure. Users who stored recovery phrases as screenshots or notes should move them offline. Wallet developers face pressure to add their own file-level encryption rather than trust the operating system's isolation alone.

Binance's framing of this as an iOS-level issue, not unique to Binance, is accurate but also moves responsibility onto a company that has said nothing publicly. Phone-based self-custody has always rested on an operating system neither the wallet maker nor the user controls, and this flaw shows how a single sandbox failure can turn a well-designed wallet into an open file. Billions of dollars in keys now sit on a platform whose security is simply assumed rather than audited.

Apple's response, or silence, on worse_query is the open question: whether a forthcoming iOS release patches the sandbox bypass, and whether Apple ever confirms the bug publicly. Until then, it remains unverified whether iOS 26.7.1, 27.0.1 or 27.2 updates already close the gap, meaning affected users have no official signal to stop removing sideloaded apps. A confirmed patch version, or an Apple security advisory, would mark the moment the warning can lift. (per cointelegraph.com)

Total crypto marketall crypto assets combined no single asset in the event: read against the whole market

The total crypto market rose 0.3% in the 4 hours after the first headline, after falling 1.5% in the 2 hours before.

46 prices, one every 30 minutes · The move was larger before the first headline than after: an observation, not an explanation. The market also moves on things nobody publishes.