Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed Swati KhandelwalNov 10, 2026Vulnerability / Mobile Security An iOS sandbox escape published on GitHub lets an app read other apps' files on iPhones running iOS 26 and 27. That puts seed phrases, private keys, and login credentials at risk of exposure to malicious apps, Binance warned today. Apple's updates for iOS 26 and 27, released yesterday, do not list a fix. A researcher who goes by forcequit, in collaboration with 0xjohnny, released the escape, called worse_query, on Sunday, a day before those updates came out. Neither the exchange nor the researcher reported any attacks or thefts involving it. The exchange told users to delete apps installed from untrusted sources, such as sideloaded or manually signed apps, and to update iOS and all their apps. No fix for the escape has been confirmed. For anyone who suspects a breach, the exchange's security warning advises moving funds to a new wallet created on a clean device and resetting all active login sessions. The researcher's proof-of-concept code can reach every app's data container on an iPhone, and some system folders on iOS 27. To use it, an app has to set up an App Group container. He says the code is for developers and "isn't useful by itself." Other developers have built apps on it that people can install. One of them is WQ Files, a file manager that developer Christoph Kolbicz built on worse_query. It reaches other apps' data without a jailbreak or a kernel exploit, and it can edit, delete and clear that data. WQ Files installs via sideloading tools such as AltStore and SideStore, which automatically create the App Group it needs when used with an Apple ID. No one involved has said whether an app from the App Store could use worse_query. The three versions in the exchange's warning are the ones listed as tested in the WQ Files release notes. The researcher gives a wider range. Of these sources, only Erosion's developers list iOS 27.2.1, which came out yesterday, and none lists iOS 26.7.3. They added 27.2.1 this week in a README change with the note "pretty sure 27.2.1 is supported". Yesterday's updates, iOS 27.2.1 and iOS 26.7.3, fixed two iMessage flaws and several Bluetooth bugs. The security notes for iOS 27.2.1 do not mention worse_query or any sandbox issues, nor do the iOS 26.7.3 notes. Apple does not disclose, discuss, or confirm security issues until it has investigated and a patch or release is available, the notes say. In a reply on X, the researcher wrote that he had not planned to release worse_query early. He added that "Apple was stalling on responding to me and people started larping with it on here." The exchange did not name any wallet app as exposed, and neither did the researcher nor the developers of the apps built on worse_query. Found this article interesting? Follow us on Google News, Twitter and LinkedIn to read more exclusive content we post. Apple, cryptocurrency, data security, mobile security, Vulnerability New Wave of Refrigeration Cyberattacks Hits Supermarkets Across Europe, Forcing Stores to Pull Food Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges The Collapsed Patch Window: Why Runtime Protection is Now Your First Line of Defense Against AI-Driven Attacks OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run Is Your Exposure Management Platform Leaving You Exposed? Five Tests to Find Out Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs 5 Active Cyber Threats That Put US Enterprises at Risk in October 2026 Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access Apple to Start Scanning Publicly Shared iCloud Photos and Files for Harmful Content The Flood is Coming And The Pipes Were Already Full Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft Detect Lateral Movement and Evasive Attacks With Corelight's Open NDR Platform Beyond CVE Scanning: Book a Demo of Continuous AI-Powered Web Pentesting See How Bitdefender GravityZone Identifies Shadow AI and Prioritizes Endpoint Risks Assess Your Organization's AI Code Sprawl Exposure With This Practical Guide Your SOC Has an Identity Blind Spot. Here's How to Fix It Learn how to close critical identity visibility gaps in your SOC, detect hidden threats, and accelerate incident response across human, machine, and AI identities. Join the Session Roadmap for AI-Ready Security Operations Evaluate Attack Surface Visibility With an AI Threat Readiness Framework Learn how to assess AI threat readiness, strengthen attack surface visibility, and prepare security operations for emerging threats in this practical webinar. 11 Real Stories: How Identity Exposure Unlocks Active Attack Paths Map cross-domain privilege escalation to sever breach routes at key choke points. BeyondTrust an 8X Gartner® Magic Quadrant™ Leader for PAM Gain clarity on the PAM market and understand why BeyondTrust is again a Leader. Governance Sets the Ceiling on Your AI Security Program See the five moves that raise a Stage 2 Govern score to a defensible Stage 3. Accelerate Incident Response: 95% Faster Containment Cut containment time from 48 hours to 3. Read the Orchid IR case study. The Collapsed Patch Window: Why Runtime Protection is Now Your First Line of Defense Against AI-Driven Attacks Your Attack Surface Is Growing Faster Than Your Team Can Respond The MSP Margin Math Nobody's Doing: Your Next Technician Might Already be on Payroll PEDM vs. Standing Elevated Privileges: Control Access Without Flooding the Helpdesk