Binance Warns of iOS Vulnerability That Could Lead to Data Leak
The issue was discovered in iOS 26.7.1, 27.0.1, and 27.2
Binance has warned about an issue in iOS versions 26.7.1, 27.0.1, and 27.2. It allows third-party applications to access files from other programs, where seed phrases, private keys, and login credentials may be stored. The company emphasized that this concerns the iOS level, not just a vulnerability in the Binance app.
There are no confirmed cases of cryptocurrency loss so far. Users are advised to remove applications installed from untrusted sources, including manually downloaded IPA files, and to update iOS and other programs to the latest official versions.
If there is suspicion of compromise, Binance recommends transferring funds to a new wallet created on a clean device and terminating all active login sessions.
The issue is linked to a publicly disclosed technique for bypassing the iOS sandbox called worse_query. The published tool WQ Files uses it to view, export, modify, and delete data from other applications without jailbreaking. For the attack, the tool must be installed on an iPhone, for example, through an application from an untrusted source bypassing the App Store.
On November 9, Apple released security updates iOS 27.2.1, 26.7.3, and 18.7.12, addressing nine vulnerabilities. One of them, CVE-2026-113963, could allow an application to access sensitive data. However, it is not yet clear whether this specifically resolves the issue warned about by Binance.
