From CryptoPotato · By Dimitar Dzhondzhorov
The world’s largest cryptocurrency exchange warned users to be extremely careful about a vulnerability affecting certain iOS devices. The flaw could allow bad actors to access sensitive information, putting people’s funds and personal data at risk.
Here’s what users should do to stay protected and the mistakes they should avoid.
Not a Binance Issue
The exchange took to X to alert people about a threat dubbed “worse_query,” which specifically targets iOS 26.7.1, 27.0.1, and 27.2 models. According to the warning, the vulnerability could let malicious apps access local files from other applications, potentially exposing seed phrases, private keys, and login credentials across the ecosystem. The company emphasized that this is an iOS-level issue, not unique to Binance.
It also outlined several immediate steps users should take to safeguard their funds. First, they should delete any apps installed from untrusted sources (such as sideloaded or manually signed IPAs). Second, they must update iOS and all applications to the latest official versions. Last but not least, people suspecting a breach should transfer funds to a new wallet created on a clean device and reset all active login sessions.
“Never install unauthorized packages, and keep your software up to date,” the warning reads.
The crypto community on X has seen a surge in users reporting losses caused by similar exploits lately. One member, using the moniker punktoshi, said:
“Yesterday was brutal. Both my Exodus and Phantom wallets got drained. Woke up to transaction notifications on my phone. All my seed phrases were stored physically, so I have no idea how they got access. My best guess is that my iPhone was compromised.”
Binance’s co-founder, Changpeng Zhao (CZ), said he is sorry to hear about the loss, advising people to keep their iOS updated to the latest version to prevent malicious websites from getting around built-in security protections and accessing sensitive information.
Binance Remains a Hot Topic
The company has been in the spotlight lately, though its security warning isn’t the main reason. Instead, attention has been focused on the massive hack it suffered and its regulatory setbacks in Europe.
As CryptoPotato reported at the end of October, bad actors drained over $6.3 billion from Binance, making it the largest cyber incident in the history of the cryptocurrency industry.
The company acted swiftly, initially halting withdrawals and deposits, and promised to reimburse users via its SAFU fund and its own reserves. Shortly after, it began the withdrawal recovery process, supporting popular networks such as Bitcoin, Ethereum, BNB Smart Chain, XRP, Hyperliquid, and many more.