Ethical Hacking News
Binance has issued a warning about a newly discovered iOS sandbox escape that could potentially expose crypto wallet keys to malicious apps. The vulnerability, dubbed "worse_query," was published on GitHub by a researcher known by their handle, forcequit. The escape allows an app to read other apps' files on iPhones running iOS 26 and 27, putting sensitive information such as seed phrases, private keys, and login credentials at risk. If you're a user of an iPhone running iOS 26 or 27, it's essential to take precautions to protect yourself from this potential threat. Read more to find out how.
Binance warns of a newly discovered iOS sandbox escape that exposes crypto wallet keys to malicious apps. The escape, dubbed "worse_query," was published on GitHub by a researcher known as forcequit. The vulnerability allows an app to read other apps' files on iPhones running iOS 26 and 27, putting sensitive information at risk. Binance advises users to take precautions such as deleting apps from untrusted sources and updating their iOS and all apps. The vulnerability could potentially be exploited to gain access to users' crypto wallets and steal their funds.
Binance, a leading cryptocurrency exchange, has issued a warning about a newly discovered iOS sandbox escape that could potentially expose crypto wallet keys to malicious apps. The vulnerability, dubbed "worse_query," was published on GitHub by a researcher known by their handle, forcequit. The escape allows an app to read other apps' files on iPhones running iOS 26 and 27, putting sensitive information such as seed phrases, private keys, and login credentials at risk.
The researcher, forcequit, released the escape on Sunday, a day before Apple's updates for iOS 26 and 27 were released. The updates, which were released yesterday, do not include a fix for the vulnerability. Instead, Binance advised users to take precautions to protect themselves, such as deleting apps installed from untrusted sources and updating their iOS and all apps.
The vulnerability is significant because it allows an app to access sensitive information without the user's knowledge or consent. This could potentially be exploited by malicious actors to gain access to users' crypto wallets and steal their funds. Binance warned users that if they suspect a breach, they should move their funds to a new wallet created on a clean device and reset all active login sessions.
The researcher behind the vulnerability, forcequit, stated that the code is intended for developers and is not useful on its own. However, other developers have built apps on top of the worse_query escape, which can reach other apps' data without the need for a jailbreak or kernel exploit. One such app, WQ Files, a file manager developed by Christoph Kolbicz, can edit, delete, and clear data from other apps' containers.
Binance has not named any specific wallet app as being exposed, but the exchange has advised users to be vigilant and take steps to protect themselves. The researcher behind the vulnerability has also stated that he had not planned to release the escape early, but was pushed to do so by Apple's slow response to his initial inquiry.
The incident highlights the importance of keeping software up to date and being cautious when installing apps from untrusted sources. It also underscores the need for more robust security measures to protect users' sensitive information. Binance's warning serves as a reminder to users to be vigilant and take proactive steps to protect themselves from potential threats.
The vulnerability has also sparked debate about the need for more transparency from Apple regarding security issues. The researcher behind the vulnerability stated that Apple was slow to respond to his initial inquiry and that people had begun to discuss the issue on social media before he released the escape. This lack of transparency and communication has led some to question whether Apple was aware of the vulnerability before it was released.
Despite the lack of a fix for the vulnerability, Binance's warning serves as a wake-up call for users to take extra precautions to protect themselves. By staying informed and taking proactive steps to protect themselves, users can reduce the risk of falling victim to this and other potential threats.
In conclusion, the discovery of the iOS sandbox escape and Binance's warning highlights the importance of staying vigilant and taking proactive steps to protect ourselves from potential threats. By staying informed and taking extra precautions, we can reduce the risk of falling victim to this and other vulnerabilities.
Related Information:
https://www.ethicalhackingnews.com/articles/Binance-Sounds-the-Alarm-iOS-Sandbox-Escape-Puts-Crypto-Wallet-Keys-at-Risk-ehn.shtml
https://thehackernews.com/2026/11/binance-warns-of-ios-sandbox-escape.html
Published: Tue Nov 10 07:46:46 2026 by llama3.2 3B Q4_K_M
