Markets › News › Technology

Binance Alerts iPhone Users to Wallet-Hijacking iOS Flaw

Binance warned that a flaw in three listed iOS versions could expose wallet keys and recovery phrases through malicious sideloaded apps.

Binance warned that a flaw in three listed iOS versions could expose wallet keys and recovery phrases through malicious sideloaded apps. This is an original Token Times brief synthesising 6 outlets (Blockonomi, Crypto.news, Coinfomania, and others), plus live market data, as of Tue, 10 Nov 2026 13:30:01 UTC.

Why it matters

The flaw turns applications installed outside the official App Store into a potential route for stealing access to crypto wallets. Users on affected systems may need to remove suspect software, patch iOS and examine wallet activity.

Key takeaways
  • worse_query affects iOS 26.7.1, 27.0.1 and 27.2
  • Disguised sideloaded apps may target wallet keys and seed phrases
  • Binance recommends updating to iOS 27.2.1
  • Total crypto market cap stands at $2.54T; sentiment remains fearful
What the reporting agrees on

Blockonomi, Crypto.news and Coinfomania all report that Binance issued a warning about the worse_query vulnerability affecting iOS users and warned that crypto wallet data could be compromised. Blockonomi and Crypto.news specifically identify exposure of wallet keys and recovery phrases, while Coinfomania more broadly describes a risk to user data on affected iOS versions. Blockonomi provides the most detail, including the three affected versions, the use of disguised sideloaded apps, and Binance’s recommended response; none of the other summaries contradicts those specifics.

The story so far · 2 briefs
  1. BTCPay Server Alerts Users to Hot Wallet Attacks, Advises Server Shutdown
  2. Binance Alerts iPhone Users to Wallet-Hijacking iOS Flaw — this brief

Binance has warned iPhone users about the worse_query vulnerability, which reportedly affects iOS 26.7.1, 27.0.1 and 27.2. Crypto.news reported that the flaw could expose crypto wallet keys and recovery phrases, while Coinfomania described it as a significant vulnerability affecting specific iOS versions and potentially compromising user data. The warning applies to wallet security rather than to a particular cryptocurrency or exchange transaction.

According to Blockonomi, attackers can exploit the issue through disguised sideloaded applications, including fake file-manager apps distributed through Telegram. Binance’s response is to remove untrusted applications, update affected phones to iOS 27.2.1 and move funds if a breach is suspected. The advisory therefore addresses both prevention through software updates and remediation for users who believe their devices may already have been compromised.

The three outlets agree on the central warning: Binance has publicly cautioned iOS users that worse_query may put wallet credentials at risk. Blockonomi and Crypto.news are more explicit about the assets at stake, naming private keys and recovery phrases, while Coinfomania frames the danger as potential compromise of user data. Blockonomi alone supplies the exact affected versions, the Telegram-linked app technique and the recommended update to iOS 27.2.1; the other summaries neither dispute nor independently expand those details.

The mechanism described by Blockonomi centers on applications sideloaded outside the normal App Store channel. Such apps can appear disguised as legitimate utilities and may provide the attacker with access to sensitive wallet information on an affected device. Binance’s recommended response includes deleting software that is not trusted, installing the current update and considering a transfer of funds when compromise is suspected.

The supplied market data shows a total crypto market capitalization of $2.54T, with the broader market described as flat. Bitcoin was down 0.06% over 24 hours, and the Fear & Greed index stood at 32, indicating a Fear reading. No specific coin linked to the advisory is named, so these figures provide broad market context rather than evidence of a token-specific reaction; the immediate security issues to monitor are the affected iOS versions and any use of disguised sideloaded apps.

The market when this published · November 10, 2026
Total market cap₹238.92T
Bitcoin 24h-0.06%
Ethereum 24h-1.02%
BTC dominance58.8%
Fear & Greed32 · Fear

Binance Alerts iPhone Users to Wallet-Hijacking iOS Flaw — questions & answers

Which iOS versions are affected?

Blockonomi reports that worse_query affects iOS 26.7.1, 27.0.1 and 27.2.

What could the vulnerability expose?

Crypto.news reports that the flaw could expose crypto wallet keys and recovery phrases.

What does Binance recommend affected users do?

Binance advises removing untrusted apps, updating to iOS 27.2.1 and moving funds if a breach is suspected.

Which outlets reported this story?

This is an original Token Times brief that synthesises reporting from Blockonomi, Crypto.news, Coinfomania, Decrypt, CryptoNews, Cointelegraph, with the key figures cross-checked for agreement across them. It is not a copy of any one article — follow the source links above for the original reporting.

In this storyBinance Company
Token Times Newsdesk Data-stamped

Token Times's newsdesk writes original briefs by synthesising coverage from across the crypto press — 50+ outlets including CoinDesk, The Block, Decrypt and Cointelegraph — cross-checking the figures they report — and verifying them against on-chain data from DeFiLlama and mempool.space — plus live market context (CoinGecko, Binance). We summarise and link to every source; we never reproduce full articles. Read our editorial standards and how we use AI. Not financial advice.

Market data verified against CoinGecko & Binance · November 10, 2026 ⛓ Timestamped at Bitcoin block #975,299 sha256:c6004e4d16fac87d
Corroborated across 6 outlets, reported over about 2.1 h — this is an original Token Times summary with live market data, not the original article.Crypto.news · Nov 10 10:38 ↗Coinfomania · Nov 10 11:19 ↗Cointelegraph · Nov 10 11:25 ↗Blockonomi · Nov 10 11:59 ↗CryptoNews · Nov 10 12:02 ↗Decrypt · Nov 10 12:45 ↗

Original summary — not financial advice. This is an original Token Times brief that summarises a development reported elsewhere and adds live market data for context; it is not the original article and reproduces no part of it. Follow the source link above for full details. Crypto is volatile and high-risk — always do your own research.