Binance warns of iOS sandbox escape that could expose crypto wallet keys, no fix confirmed

Apple's latest updates do not mention the flaw, so users holding crypto on iPhones have no confirmed patch to rely on.

Binance has cautioned that a sandbox escape called worse_query, posted publicly on GitHub, could let a malicious app read other apps' files on iPhones, potentially exposing seed phrases, private keys and login credentials. The flaw was released by a researcher the day before Apple shipped iOS 27.2.1 and 26.7.3, and neither the exchange nor the researcher has reported any attacks or losses. Developers have already built a file manager, WQ Files, on the code, which can browse, edit and delete other apps' data without a jailbreak, though it installs through sideloading tools rather than the App Store. The versions named in the warning differ between outlets, and it is unclear whether Apple's recent security fixes address this issue or a different one involving App Intents. Binance's guidance is to remove untrusted apps, update iOS and all apps, and move funds to a new wallet on a clean device if compromise is suspected.