# Researchers Disclose Telegram Sticker Flaw That Could Run Code on iOS

By Simon Yoon

Canonical URL: https://www.tokenpost.com/news/technology/42993
Published: 2026-10-28T21:54:00.000Z
Updated: 2026-10-28T21:54:00.000Z
Section: Technology

> The demonstration took place at a security conference in Tokyo. Telegram disputed the researchers’ assessment of the flaw’s risk.

A flaw in Telegram’s sticker feature could allow code to run on iOS devices without any action by their owners, researchers disclosed at a security conference in Tokyo, raising a potential security concern for crypto users who rely on the app.

The researchers described the issue as zero-click and demonstrated code execution on iOS. Here, zero-click means the device user does not need to interact for the demonstrated behavior to occur. The demonstration connects the reported risk to Telegram’s sticker feature and its use on iOS.

Telegram disputed the researchers’ assessment of the flaw’s risk. The disclosure therefore pairs a demonstrated ability to execute code without user interaction with Telegram’s disagreement over how serious that ability is.

For crypto users, the concern is the security of the messaging app they rely on. Telegram’s stickers are the feature identified in the disclosure, and iOS is the platform named in the demonstration. The key reported capability is code execution without a user action.