Changpeng Zhao Urges iPhone Users to Update Amid DarkSword Threat

Changpeng Zhao urged iPhone users to install the latest iOS updates as the DarkSword exploit toolkit targets crypto wallet data through malicious Safari pages, a risk for self-custody users.

DarkSword exploits flaws in iOS 18. The attack can start when someone opens an infected website in Safari, after which malicious code runs in the phone’s background. The user does not need to connect a wallet or approve a transaction. Data at risk includes passwords, photos, files, wallet private keys and recovery phrases.

At least 18 malicious websites have been identified. The toolkit can operate without a wallet connection or signature, putting the attack at the device and browser level before a wallet approval step. That makes the phone’s operating system part of the security chain for users whose wallet data is on the device.

Zhao urged particular attention from people who had not updated their systems for some time. He said wallet software cannot update an operating system on a user’s behalf and described self-custody as personal responsibility. His warning centers on updating iOS, rather than authorizing or changing a wallet transaction.