Binance warns of iOS flaw that could leak crypto wallet secrets

Binance has issued an alert about a weakness affecting iOS versions 26.7.1, 27.0.1, and 27.2 that lets a rogue third-party app read files belonging to other apps, potentially exposing crypto seed phrases, private keys, and saved passwords. The exchange stresses this is a system-level problem in iOS itself, not something specific to the Binance app, and urges all users to update immediately, remove untrusted apps, and—if compromise is suspected—move funds to a fresh wallet on a clean device while invalidating active sessions. The underlying technique, nicknamed "worse_query," is a publicly documented sandbox-escape method, and a proof-of-concept tool called WQ Files was released that exploits it to browse, copy, edit, or wipe other apps' data without jailbreaking, provided it's sideloaded outside the App Store. Apple shipped fixes on November 9 in iOS 27.2.1, 26.7.3, and 18.7.12, covering nine issues including CVE-2026-113963—a separate data-exposure bug via App Intents reported by László Várady—though it remains unconfirmed whether this patch also addresses the flaw Binance described.