Binance warns that an iOS vulnerability—described as “worse_query”—could let malicious apps on affected iPhones access private files stored by other apps. In Binance’s account, this includes cryptocurrency wallet recovery phrases (seed phrases), private keys, and login credentials, if a user installs and runs a harmful application.
Multiple outlets say the issue affects specific iOS versions, including iOS 26.7.1, 27.0.1, and 27.2. Binance frames the risk as an iOS-level file-access problem rather than something unique to its own services, and it advises users to delete apps from untrusted sources and update to official software. If users suspect a breach, Binance recommends creating new wallet credentials on clean devices.
Outlets also note surrounding context: a researcher publicly disclosed the bug days before Apple’s subsequent iOS updates, and at least one report says it is unclear whether those updates fully fix the vulnerability. Coverage generally agrees there is no confirmed evidence of theft tied to the flaw, while describing how security experts flagged the issue and how Apple’s latest releases relate to it.
