Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed
Summary: A researcher using the handle forcequit, working with 0xjohnny, published an iOS sandbox escape called worse_query on GitHub on Sunday that lets an app read other apps' files on iPhones running iOS 26 and 27, putting seed phrases, private keys, and login credentials at risk. Apple's iOS 27.2.1 and iOS 26.7.3 updates, released the next day, fixed two iMessage flaws and several Bluetooth bugs but their security notes do not mention worse_query or any sandbox issue, and no fix has been confirmed.
Key Takeaway: Binance's guidance for a suspected breach is to move funds to a new wallet created on a clean device and reset all active login sessions - a recovery path that assumes the keys on the affected phone are already lost. The proof-of-concept reaches every app's data container, and developer Christoph Kolbicz's WQ Files builds on it to edit, delete, and clear that data without a jailbreak or kernel exploit.
Read the original at The Hacker News ↗