Public iOS Escape Proof Revives iPhone Wallet Security Concerns

CoinEdition reports that a public GitHub project named worse_query has renewed questions about the safety of keeping cryptocurrency credentials on iPhones. The project's page describes a sandbox escape affecting iOS versions 26.0 through 26.7.2 and 27.2, according to the outlet's summary of the repository.

The important qualification is that the developer identifies the release as a proof of concept and says the code is not useful by itself. CoinEdition likewise emphasizes that the project is not evidence of an active campaign draining crypto wallets, so the disclosure concerns a potential security mechanism rather than a demonstrated widespread theft operation.

The second cited report does not independently support those technical claims. The Daily Hodl instead covers a separate $750,000 class-action settlement for patients affected by a 2022 cyberattack at Massachusetts-based DotHouse Health. Eligible patients may claim up to $2,000 for documented losses or an estimated $40 payment, alongside two years of medical identity monitoring; the outlets share a cybersecurity theme but not the same incident.

The iPhone issue remains relevant because mobile wallets and crypto applications operate within an operating-system security boundary. The version details and proof-of-concept label come only from CoinEdition's account of the public repository, which did not establish that attackers are exploiting the project against wallet holders or that any particular wallet has been compromised.

Live market conditions were broadly negative as the report emerged. Total cryptocurrency market capitalization stood at $2.39 trillion, Bitcoin was down 4.11% over 24 hours, and the Fear & Greed index registered 20, labeled Extreme Fear. No specific coin tied to the sandbox-escape project was identified, so the market figures provide broader context rather than a direct reaction to it.

What to watch is whether repository maintainers document more complete exploit code, provide technical verification for the listed iOS versions, or identify evidence of exploitation. Until such confirmation appears, the defensible conclusion is that the project highlights questions about mobile credential protection, not that a live wallet-draining campaign is underway.