Technology
Researchers say unpatched iOS flaw could expose crypto wallet data, Binance warns
9to5Mac reports Binance warned iPhone users about the worse_query iOS flaw, which researchers say remains unpatched.
The short version
- 9to5Mac reports that Binance warned iPhone users about an iOS flaw named worse_query that could let malicious apps read other apps' data.[9to5Mac]
- Binance says the flaw affects iOS 26.7.1, 27.0.1, and 27.2, and researchers disclosed it with a public proof of concept on GitHub.[9to5Mac]
- Researchers describe the flaw as an unpatched zero-day, and a researcher says iOS 27.2.1 and 27.3 beta 1 do not patch it.[9to5Mac]
- No attacks or cryptocurrency thefts involving the flaw have been reported so far, leaving real-world impact unknown.[9to5Mac]
Key facts
- Binance warned iPhone users about an iOS vulnerability named worse_query that could let malicious apps access sensitive data stored by other apps.[9to5Mac]
- Binance says the flaw affects iOS 26.7.1, iOS 27.0.1, and iOS 27.2.[9to5Mac]
- Security researchers @0xjohnny and @forcequitOS disclosed the vulnerability and published a proof of concept on GitHub.[9to5Mac]
- The proof of concept shows how the flaw can bypass iOS sandbox protections that normally keep apps from accessing each other's files.[9to5Mac]
- Researcher @forcequitOS noted that neither iOS 27.2.1 nor iOS 27.3 beta 1 patches the vulnerability.[9to5Mac]
- Neither Binance nor the researchers have reported any attacks or cryptocurrency thefts involving the vulnerability so far.[9to5Mac]
What remains uncertain
- Whether the flaw is unpatched is not independently established; the claim rests on researcher testing and a Community Note, and the reporting includes no Apple response.[9to5Mac]
- The full range of affected devices and versions beyond the iOS versions Binance listed is unclear from the reporting.[9to5Mac]
Sources
Outlet counts describe coverage, not independent confirmation. Reports may share a wire service or original source.