Apple has released a patch, but the update notes still aren’t clear about whether it fixes the vulnerability that could let apps peek at files belonging to other apps.
At 17:56 on November 10 (UTC+8), Binance issued a warning: iOS 26.7.1, 27.0.1, and 27.2 have a system vulnerability called worse_query that could allow malicious apps to read other apps’ local files, potentially exposing seed phrases, private keys, and login credentials. Binance stressed that this is an issue at the iOS level, not one unique to Binance.
The SlowMist team had also issued a warning that day at 14:46: this is a container sandbox escape, not a jailbreak, and the vulnerability itself won’t automatically transfer assets. The real risk is users installing packages from untrusted sources. Once run, they could potentially read information stored in plain text by other apps. At 19:20, Binance co-CEO He Yi reposted the warning.
Apple released iOS 27.2.1 and 26.7.3 on November 9. The official security update notes say they fix issues involving Bluetooth, iMessage, and other areas, but do not mention worse_query by name, so it’s still unclear whether this vulnerability has been fixed. Update at 20:14 on November 10 (UTC+8): A Binance spokesperson said there are no confirmed cases of attackers using this vulnerability to access crypto wallets or steal funds.
Binance recommends first deleting apps from untrusted sources, such as sideloaded or self-signed apps, then updating the operating system and apps to the latest official versions. If you suspect your device has already been compromised, transfer your funds to a wallet newly created on a clean device and reset all login sessions.
#币安 #安全 #iOS This is not investment advice.
At 17:56 on November 10 (UTC+8), Binance issued a warning: iOS 26.7.1, 27.0.1, and 27.2 have a system vulnerability called worse_query that could allow malicious apps to read other apps’ local files, potentially exposing seed phrases, private keys, and login credentials. Binance stressed that this is an issue at the iOS level, not one unique to Binance.
The SlowMist team had also issued a warning that day at 14:46: this is a container sandbox escape, not a jailbreak, and the vulnerability itself won’t automatically transfer assets. The real risk is users installing packages from untrusted sources. Once run, they could potentially read information stored in plain text by other apps. At 19:20, Binance co-CEO He Yi reposted the warning.
Apple released iOS 27.2.1 and 26.7.3 on November 9. The official security update notes say they fix issues involving Bluetooth, iMessage, and other areas, but do not mention worse_query by name, so it’s still unclear whether this vulnerability has been fixed. Update at 20:14 on November 10 (UTC+8): A Binance spokesperson said there are no confirmed cases of attackers using this vulnerability to access crypto wallets or steal funds.
Binance recommends first deleting apps from untrusted sources, such as sideloaded or self-signed apps, then updating the operating system and apps to the latest official versions. If you suspect your device has already been compromised, transfer your funds to a wallet newly created on a clean device and reset all login sessions.
#币安 #安全 #iOS This is not investment advice.
