Update (Nov. 10, 2026, 12:14 pm UTC): This piece has been revised to incorporate a statement from a Binance representative.
Digital asset platform Binance cautioned on Tuesday that a vulnerability in iOS could potentially compromise cryptocurrency wallet private keys and recovery phrases if individuals operate a harmful application on a compromised iPhone.
Binance highlighted iOS 26.7.1, 27.0.1, and 27.2 as vulnerable iterations that might permit malicious software to access local files originating from separate applications, leaving login details, private keys, and seed phrases “vulnerable throughout the entire ecosystem.” Binance further noted that this represents “a system-level flaw in iOS, rather than an issue exclusive to Binance.”
Binance strongly advised individuals to remove any software obtained from unverified channels, upgrade iOS and all programs to their most recent official builds, and move assets to fresh wallets generated on untainted hardware if they believe a compromise has already taken place.
Web3 security agency SlowMist brought attention to the matter earlier in the day on Tuesday, stating that a malicious application could access backup phrases if a wallet saves them in plaintext on the hardware.
An Apple operating system security specialist known as forcequitOS openly revealed the security gap on Sunday and acknowledged another investigator known as 0xjohnny.
Apple deployed iOS 27.2.1 and 26.7.3 on Monday, though it stays uncertain whether either patch resolves the bug. Cointelegraph reached out to Apple regarding the security flaw, but did not get a reply prior to release.
A representative for Binance informed Cointelegraph that the “underlying file access hazard could potentially affect the broader iOS environment,” while mentioning that they have not detected any verified instances where malicious actors exploited this weakness to breach digital asset wallets or misappropriate assets.
Related: Binance hackers move 81% of stolen Solana, route funds via THORChain
Originally published at https://cointelegraph.com/news/binance-warns-ios-flaw-could-expose-crypto-wallet-keys?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound.
