Binance warns iPhone crypto holders of security flaw researchers say remains unpatched

Binance has issued a warning to iPhone users concerning a security flaw that could allow malicious apps to access sensitive data stored by other apps. This vulnerability, known as worse_query, has the potential to jeopardize seed phrases, private keys, and login credentials across the entire ecosystem. The flaw is said to affect iOS 26.7.1, iOS 27.0.1, and iOS 27.2.

However, researchers claim the vulnerability remains unpatched, even with Apple's latest security updates, such as iOS 27.2.1. Binance advises iPhone crypto holders to take immediate action, including deleting apps from untrusted sources, updating iOS and apps to the latest versions, and creating a new wallet on a clean device if they suspect a breach.

The security flaw was disclosed by researchers @0xjohnny and @forcequitOS, who showcased it in a proof of concept on GitHub. This vulnerability bypasses iOS sandbox protections, allowing unauthorized access and manipulation of data from other apps. Despite no reported attacks or cryptocurrency thefts involving the vulnerability, the researchers behind the proof of concept have not patched the issue themselves, and others have utilized it to develop applications, such as a file manager capable of accessing, modifying, and deleting data from other apps.