Critical iOS flaw threatens crypto wallets—update now
6.6 Security A severe iOS flaw lets malicious apps steal wallet data. Update iOS, remove suspicious apps, and move assets if you suspect compromise.
A critical vulnerability called worse_query has been discovered in multiple iOS versions, including 26.7.1, 27.0.1, and 27.2. This flaw enables malicious apps to access sensitive information such as seed phrases, private keys, and login credentials stored by other applications. The vulnerability is a sandbox escape rather than a jailbreak. The primary risk arises when users install IPA files or apps from untrusted sources, making it easier for attackers to exploit the flaw. Security experts and leading crypto platforms strongly recommend updating iOS devices to the latest version, removing suspicious or untrusted apps, and transferring digital assets to a new wallet on a different device if compromise is suspected. This issue affects the entire Apple ecosystem, highlighting the importance of strong security practices for anyone managing digital assets on iOS.
