Binance Warns iPhone Users
Billions of dollars in losses have rattled the crypto sector as Binance issued an urgent security warning on Tuesday, Nov. 10, telling millions of iPhone users to delete apps downloaded outside Apple’s official App Store.
The exchange linked the alert to a newly discovered vulnerability in iOS operating systems. This flaw allows malicious software to access private data stored by other applications on the same device.
Binance described a North Korea-linked cyber attack that caused billions of dollars in losses as the largest in history, according to sozcu.com.tr. However, the exchange emphasized that the newly found security flaw operates independently from that massive breach.
Software Vulnerability Risks
The flaw targets iPhone owners running iOS 26 and iOS 27 operating systems, focusing on a vulnerability named worse_query. Binance said that this opening permits malware to secretly reach sensitive information held by legitimate apps on the device.
Independent software researcher Taj posted code on GitHub showing the problem may impact a wider user base, spanning versions 26.0 through 26.7.2. Teknolojioku reported that Apple released iOS 27.2.1 with security fixes, meaning users who skipped the update remain exposed.
“Never install unauthorized packages and keep your software updated,” Binance said in its advisory.
Normally, Apple isolates apps from one another to prevent direct access to private files. This alleged vulnerability bypasses those barriers, potentially exposing private messages, photos, documents, and login credentials to cyber criminals.
Hackers can seize control of wallets and funds
Digital wallets holding recovery phrases and private keys face acute danger from the flaw. If hackers breach these safeguards, they can empty crypto wallets and seize complete control of user funds.
Teknolojioku reported that threatened data includes seed phrases, which serve as the exact word sequences required to restore access to a crypto wallet. Stolen private keys and account credentials also leave multiple wallets vulnerable simultaneously.
Immediate Security Steps
Binance urged affected users to upgrade their devices to the latest operating system version immediately. Users suspecting a security breach should create a new wallet on a confirmed clean device and terminate all active sessions.
Teknolojioku said that users must remove unverified apps at once. Apple did not respond to requests for comment regarding the security vulnerability.
iOS versions affected and ways to protect crypto assets
Which iOS versions are affected by the vulnerability?
The flaw affects devices running iOS 26 through 26.7.2, as well as specific versions including iOS 26.7.1, iOS 27.0.1, and iOS 27.2, according to sozcu.com.tr and independent researcher Taj.
What specific data is at risk on compromised iPhones?
Malware can access seed phrases, private keys, account login credentials, private messages, photos, and documents stored by other apps on the device.
How can users protect their crypto assets?
Users must update to iOS 27.2.1, delete any apps installed outside the official App Store, and transfer funds to a new wallet created on a clean device if a breach is suspected.