Binance Warns iOS Flaw Could Expose Wallet Recovery Phrases and Private Keys

Binance warned that a flaw called “worse_query” in several iOS releases may let malicious apps read files held by other apps, putting wallet recovery phrases, private keys and login credentials at risk.

The warning lists iOS 26.7.1, 27.0.1 and 27.2 among affected versions. It describes the issue as a system-level weakness that may bypass iOS app isolation, rather than a vulnerability limited to Binance’s own app.

App isolation normally keeps an app from opening files stored by another app; the reported flaw would weaken that boundary on the listed releases.

Binance advised users to remove apps installed from untrusted sources and update iOS and their apps to the latest official versions. Anyone who suspects a device has been compromised should use a secure device to create a new wallet, transfer assets and reset all login sessions.

The warning describes an iOS-wide issue rather than a defect confined to Binance’s platform.