Binance Warns of iOS Flaw Exposing Crypto Wallets

The cryptocurrency exchange Binance warned on Tuesday that a vulnerability in Apple's iOS allows malicious applications to read local files from other apps. This flaw enables attackers to steal seed phrases, private keys, and login credentials from crypto wallets. The vulnerability affects iOS versions 26.7.1, 27.0.1, and 27.2.

Security researcher forcequitOS publicly disclosed the flaw on Sunday, with credit given to researcher 0xjohnny. The security firm SlowMist also flagged the issue, noting that unencrypted recovery phrases are particularly vulnerable. Binance described the situation as an "iOS-level issue" that puts the entire ecosystem at risk, though the exchange reported no confirmed cases of stolen funds.

Apple released software updates 27.2.1 and 26.7.3 on Monday, but it remains unclear if these versions resolve the vulnerability. Binance advised users to update their software, delete untrusted applications, and migrate funds to new wallets if they suspect a breach has occurred.