Owners of iPhones used for handling cryptocurrency are now being warned about a dangerous security loophole that could let malicious apps access sensitive files from other apps—meaning private keys, seed phrases, and login credentials could be exposed. The issue, dubbed “worse_query,” has been confirmed to affect iOS versions 26.7.1, 27.0.1, and 27.2, yet remains unfixed despite recent iOS updates.
What Is Worse_Query and Who’s Impacted
Binance first raised the alarm about the worse_query vulnerability in an X post, explaining that it allows hostile software to read local files owned by other apps. That undermines the protective boundaries—i.e. the sandbox—that Apple normally enforces. The flaw is believed to place “seed phrases, private keys, and login credentials” at risk throughout the iOS ecosystem.
Security researchers who discovered the issue note that it’s not limited to one app but affects all apps running on vulnerable iPhones. Although Apple has rolled out iOS 27.2.1 and a 27.3 beta, neither version is understood to contain a patch for worse_query. Developers have uploaded proof-of-concept code showing how the exploit bypasses sandbox protections, and even a third-party file manager app has been built around it—capable of reading, modifying, or deleting data from other apps without the device being jailbroken. However, there’s no evidence yet that the vulnerability has been used to steal crypto or personal data.
Recommendations Until a Patch Drops
Binance is advising users to immediately remove any apps installed via non-trusted sources such as sideloaded applications or manually signed IPAs. On top of that, users should ensure they’ve updated iOS and apps to their latest official releases, reset any active login sessions, and if they suspect their wallet has been compromised, move assets to a newly created wallet on a clean device.
This flaw matters a lot for anyone relying on iPhone apps for crypto wallets or secure credentials. Until Apple releases a security update, these kinds of steps provide the best defense. Whether Apple will address this flaw immediately is still uncertain.
