Binance warned iPhone users on November 10, 2026, that an iOS flaw called “worse_query” could let malicious apps read other apps’ files, putting crypto wallet seed phrases, private keys and logins at risk. Binance said it affects iOS 26.7.1, 27.0.1 and 27.2, and urged users to remove apps from untrusted sources and install official updates.
The researcher who published the flaw described it as a proof of concept that “isn’t useful by itself.” There have been no confirmed reports of crypto stolen through it. Apple released iOS 27.2.1, but its security notes do not mention worse_query, and Apple has not confirmed whether the update fixes it; a SlowMist security officer said it would block the flaw.
