Binance, the world's largest cryptocurrency exchange, has issued an urgent warning to millions of iPhone users, advising them to delete any applications not downloaded from the official Apple App Store. The alert concerns a vulnerability dubbed 'worse_query' present in iOS versions 26 and 27, which could enable harmful apps to access private information stored by other applications on the device.
While not malware itself, the 'worse_query' flaw creates an opening that malicious apps can exploit. This could allow hackers to potentially access sensitive data, including recovery words or secret keys stored in cryptocurrency wallets, leading to the theft of digital funds or account takeovers. Binance emphasized that apps downloaded from outside the App Store typically undergo less security scrutiny than those approved by Apple, making them a potential vector for exploitation.
The warning comes shortly after Binance experienced a significant cyberattack, though this new threat is unrelated. The vulnerability has been identified on phones running iOS 26.7.1, iOS 27.0.1, and iOS 27.2. An independent software researcher suggested on GitHub that the flaw might affect nearly every version of iOS 26, from 26.0 to 26.7.2.
Normally, iOS isolates each app, preventing them from accessing each other's data. 'Worse_query' breaks this isolation, allowing a compromised app to read, copy, or alter files from other applications. For cryptocurrency users, this could expose the critical information needed to control their digital assets.
As of now, there are no confirmed cases of the 'worse_query' vulnerability being exploited by hackers. A Binance spokesperson confirmed that they have not identified any instances where attackers used this specific flaw to access crypto wallets or steal funds. The company has urged users who suspect their device may be compromised to transfer funds to a new wallet created on a clean device and reset all active login sessions.
Apple recently released security updates, including iOS versions 26.7.3 and 27.2.1, which included fixes for issues that could allow malicious apps to access private user data. However, the 'worse_query' vulnerability was not explicitly addressed in these updates. Binance has committed to covering losses for customers affected by the recent North Korean cyberattack.