Cryptocurrency exchange Binance has issued a warning to iPhone users regarding a serious security flaw called worse_query, which could allow malicious applications to access private data, including messages, photos, documents and login credentials. It highlights that those who store cryptocurrencies on their mobile phones are particularly at risk.
The vulnerability could enable attackers to bypass Apple’s protection and access data from other applications on the same device. Apple’s operating system typically uses a protection system where each application runs in a separate, isolated environment, but worse_query is reportedly able to bypass part of this protection. In the event of a successful attack, malicious applications could view, copy and even modify files from other applications, potentially including private messages, photos, documents and stored login credentials.
Binance warns that attackers could access user accounts, private files and data associated with digital wallets. Digital wallets contain sensitive data, such as private keys and recovery phrases, which allow access to stored funds. If attackers were to obtain this data, they could take control of the wallet and steal cryptocurrencies.
The worse_query vulnerability itself is not malware, but it can open the door to hackers if an application containing malicious code is present on the device. Applications installed outside the official App Store are particularly risky as they do not undergo Apple’s usual security checks. Users are advised to immediately check which applications they have installed and remove any that were not downloaded from Apple’s official App Store.
According to Binance’s warning, the security flaw was detected on devices running operating systems iOS 26.7.1, iOS 27.0.1 and iOS 27.2. An independent software researcher who goes by the name Taj on the GitHub platform warns that the vulnerability could affect a significantly larger number of devices. According to their claims, the problem may exist in almost all versions of iOS 26, from version 26.0 to 26.7.2.
Users are recommended to check if they have available operating system updates and install the latest version supported by their device. Binance advises users who suspect their device has been compromised to exercise additional caution, and those using cryptocurrencies to open a new digital wallet.
Binance published the warning just days after a major cyberattack linked to North Korea, in which the company reportedly lost as much as $6.3 billion. The company emphasises that the newly discovered worse_query vulnerability is not connected to that attack and represents a separate security threat to Apple device users. Apple has not yet publicly commented on the mentioned security vulnerability.
