Binance launches on November 10Official A warning is issued that a vulnerability named worse_query affects iOS 26.7.1, 27.0.1 and 27.2, which allows malicious apps to read the local files of other apps. Mnemonic phrases, private keys and login credentials may be exposed as a result.

Binance emphasized that this is an iOS system-level problem. Not only the Binance App is affected, but iPhone users in the entire crypto ecosystem are at risk.

Binance recommends deleting sideloaded apps first and changing to a new wallet if you suspect it has been leaked.

Binance wants users to do three things immediately:

  • Remove any apps installed from unofficial sources, such as sideloaded or manually signed IPA installers.
  • Update iOS and all apps to the latest official version.
  • If you suspect a breach, create a new wallet on a clean device, transfer funds there, and reset all logged-in sessions.

Binance also reminds not to install unauthorized installation packages, and the software must be kept up to date at all times.

Apple launches iOS 27.2.1, 26.7.3 on November 9

According to AppleSecurity updates page, Apple released iOS 27.2.1 and iOS 26.7.3 on November 9. Both versions have patched multiple vulnerabilities such as Bluetooth pairing and iMessage groups.

in iOS 27.2.1 For a patched vulnerability (CVE-2026-113963), Apple's impact statement is that "Apps may be able to access sensitive user data."

However, the name worse_query did not appear in Apple’s announcement, and Binance did not explain whether this vulnerability has been patched in the new version. It is currently unclear whether the two are the same vulnerability.

This is not the first time this year that iPhone wallets have been targeted

In March this year, the high-risk vulnerability "DarkSword" also broke out in the iPhone, allowing hackers to steal encrypted wallets and private keys (Related reports).

The handling method listed by Binance this time focuses on apps of unknown origin: only install them from the App Store, and transfer the funds in question to a new wallet on a new device.

this article Binance warns about iOS vulnerability: Malicious apps may read wallet mnemonic words and private keys first appeared in Chain News ABMedia。