Binance’s iOS Vulnerability Warning Highlights Risks to Locally Stored Wallet Data

Key Facts

CoinNess reported on November 10, 2026, a Binance warning about an iOS vulnerability known as worse_query that could allow malicious apps to read local files belonging to other apps. The warning said the risk could extend to wallet recovery phrases, private keys and login credentials if they are stored on the device. The verified Binance News account described the flaw as an escape from app-container isolation, not a full compromise of the phone’s operating system. That description means the risk concerns access between app containers, not simply using an iPhone. The warning also does not mean assets are automatically stolen merely because the vulnerability is present on a device.

According to a Binance News post, the risk arises when an IPA file from an untrusted source is installed and run; the app can then read other apps’ containers. The post said this capability could expose wallet data if it is stored locally in plain text. The data it cited includes recovery phrases, key stores and the WebView cache. Accordingly, the warning says wallet exposure depends on how data is stored and on an untrusted app being installed; it is not limited to owning a device running iOS. The warning did not say that all wallets or all users of the system face the same level of risk.

The project’s public page describes worse_query as a proof of concept for an escape from isolation, and lists a range covering iOS 26.0 to 26.7.2, as well as version 27.2. The repository said the tool is intended for developers and is “not useful by itself.” Its use also requires setting up an App Group container for the app, according to the project description. These details describe the published tool and its operating requirements; on their own, they do not establish how widely the vulnerability has been exploited. This is consistent with Binance’s description of it as a flaw in container isolation, not a full device jailbreak.

PANews’ technology coverage linked the risk to the ability to read other apps’ containers, with the impact varying according to the data an app retains locally. Sensitive wallet data is therefore the concern when stored as plain text, not a confirmed outcome of every installation or use. This condition limits the validity of extending the warning to all wallets, but leaves open the possibility of information being exposed when an untrusted app is run and local data is unprotected. The sources gave no figure for the number of devices or wallets actually put at risk. They also did not report any thefts resulting from the vulnerability.

A Binance News post, citing a recommendation from security firm SlowMist, advised updating operating systems to the latest version and avoiding app installations from untrusted sources. The advice targets the two aspects of the risk cited in the post: the presence of the vulnerability on one hand and running an IPA file from an unknown source on the other. On updates, PANews said Apple had released iOS 27.2.1 and reported that the update addresses the flaw affecting iOS 27.2. But Apple’s support page dates the release of iOS 27.2.1 to November 9, 2026, and does not name worse_query among the security issues addressed. Apple’s page therefore does not establish that this version fixed the vulnerability in the warning.

Apple shares closed at $350.69 on November 9, 2026, according to EL7 data, in the session before CoinNess published its warning the following day. The price places the stock’s movement before the warning in context and does not measure the market’s response to it. The available information did not include verified data on the stock’s movement after the report was published. Nor are reliable figures available in this article on the number of affected wallets or financial losses linked to the vulnerability. The developments following the warning remain the recommendation to update the system and avoid untrusted apps, while Apple’s update page does not confirm that the stated version addresses this specific flaw.