Covered by 3 outlets — first reported by The Hacker News, Nov 10, 12:15 UTC
Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed
Summary
Binance has warned that a publicly released iOS sandbox escape lets one app read the files of other apps on iPhones, which could expose cryptocurrency seed phrases, private keys and login credentials to a malicious app. The Hacker News says a researcher going by forcequit published the exploit, called worse_query, on GitHub on Sunday. Apple's latest iOS updates do not list a fix, and Security Affairs notes that no attacks have been reported and no fix is confirmed.
AI summary by the SecurityTabs newsroom, checked against The Hacker News, Security Affairs, BleepingComputer. Read the outlets below for the full story.
Continue reading
3 outlets, in the order they reported it.
The Hacker NewsFirst report
Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed
An iOS sandbox escape published on GitHub lets an app read other apps' files on iPhones running iOS 26 and 27. That puts seed phrases, private keys, and login credentials at risk of exposure to malicious apps, Binance warned today.
Security Affairs
iOS Sandbox Escape Is Public, and Apple Hasn’t Confirmed a Fix
A public iOS sandbox escape could expose wallet keys, Binance warns. No attacks are reported and no fix is confirmed. On 10 November, Binance warned users about a public iOS sandbox escape that lets one app read the files of other apps.
BleepingComputer
Binance warns of iOS flaw that could leak crypto wallet secrets
Binance is warning about a vulnerability in Apple's iOS 26.7.1, 27.0.1, and 27.2 that could allow third-party apps to read private files stored by other apps, including cryptocurrency seed phrases, secret keys, and login credentials.