Binance warned of a security vulnerability in some versions of Apple’s iOS and asked users to delete suspicious apps and update software.
CoinPost, a blockchain outlet, reported on Tuesday that Binance posted on its official X account that a “worse_query” vulnerability had been confirmed in iOS 26.7.1, 27.0.1 and 27.2.
Binance said the vulnerability stems from a security defect in iOS itself, not in its app. It warned that devices running those iOS versions could expose seed phrases, private keys and login information.
Seed phrases and private keys are core information directly used to recover cryptocurrency wallets and move assets. Caution is required because exposure to third parties can lead to theft of assets.
Binance pointed to sideloaded apps installed without going through the official App Store and manually signed IPA files as areas of concern. It urged users to delete apps obtained from untrusted sources and not to install unauthorized app package files. It also advised keeping all apps, including iOS, on the latest versions.
It also outlined steps to take if damage is suspected. Binance recommended creating a new wallet on a device without malicious apps, transferring funds and resetting all currently valid login sessions.
Binance said the guidance focuses on deleting suspicious apps and preventing follow-on damage from data leaks. If a compromise is suspected, it said, users should move funds to a new wallet on a safe device and end existing login sessions to block further access.
The warning showed that an operating system vulnerability, rather than a specific exchange app issue, can spread across digital asset security. App installation paths and update management were highlighted again as key variables in protecting wallet information and accounts.
A vulnerability (worse_query) affecting iOS 26.7.1, 27.0.1, and 27.2 allows malicious apps to read local files from other apps, putting seed phrases, private keys, and login credentials at risk across the entire ecosystem. This is an iOS-level issue, not unique to Binance. Immediate Action Required: - Delete any apps installed from untrusted sources (such as sideloaded or manually signed IPAs). - Update iOS and all apps to the latest official versions. - If you suspect a breach, transfer funds to a new wallet created on a clean device and reset all active login sessions. Never install unauthorized packages, and keep your software up to date.