Binance warned users on Nov. 10 that a reported iOS vulnerability called worse_query could let malicious apps read files belonging to other apps, potentially exposing wallet credentials. The researchers’ demonstration was not a complete attack tool: exploitation requires an app with added malicious functions, and access to files does not automatically mean funds can be stolen. As of Nov. 10, no confirmed cryptocurrency theft had been publicly attributed to worse_query.
Binance advised users to remove apps from untrusted sources and install the latest official updates. Apple released updates on Nov. 9, but its published notes did not explicitly confirm a worse_query fix. A Slowmist security executive said iOS 27.2.1 blocks the technique.
