Mobile wallet users on iPhone face a system-level risk, Binance flagged in a security alert on November 10. The vulnerability, dubbed worse_query, affects iOS 26.7.1, 27.0.1 and 27.2.

The flaw lets a malicious app read local files belonging to other apps on the same device. That puts seed phrases, private keys and login credentials at risk across the whole ecosystem, not only for Binance users.

Binance advises deleting apps from untrusted sources (sideloaded or manually signed IPAs) and updating iOS and all apps to the latest official versions.

Users who suspect a breach are told to move funds to a new wallet created on a clean device and reset all active login sessions.