Binance has issued a warning regarding a critical iOS vulnerability that could put crypto wallet recovery phrases and private keys at risk if affected users launch malicious apps on their iPhones.
Critical vulnerability identified
The exchange identified several iOS versions—specifically iOS 26.7.1, 27.0.1, and 27.2—as containing a flaw that may allow unauthorized apps to access sensitive files stored by other applications. Binance emphasized that this vulnerability raises security concerns for crypto wallets that keep seed phrases, private keys, or login credentials on the device, describing it as “an iOS-level issue, not unique to Binance.”
Binance urged users to take immediate action by removing applications sourced from untrusted parties, ensuring all software is updated to the latest official releases, and transferring digital assets to new wallets generated on a secured device if any compromise is suspected.
Industry response and potential risks
Earlier in the day, blockchain security firm SlowMist had drawn attention to the vulnerability. The company stated that if a crypto wallet app saves recovery phrases in an unencrypted format on an affected iPhone, a malicious application could potentially extract that information.
The flaw was first publicly disclosed on Sunday by iOS security researcher forcequitOS, who credited researcher 0xjohnny for their involvement in identifying the issue.
Apple subsequently rolled out iOS updates 27.2.1 and 26.7.3 on Monday. However, it remains uncertain if these updates resolve the vulnerability in question. As of publication, Apple has not provided a statement on whether the patches fully address the risk.
A Binance spokesperson informed Cointelegraph, “The underlying file-access risk may apply across the iOS ecosystem.” The spokesperson added that the company had not identified any verified incidents of attackers exploiting this flaw to compromise cryptocurrency wallets or misappropriate funds.
Binance described this threat as an ‘iOS-level issue’ applicable throughout the ecosystem and confirmed it has not discovered any confirmed cases in which malicious actors exploited the bug to access crypto wallets or steal digital assets.
How users can monitor wallet exposure risks
With sensitive wallet credentials potentially accessible to malicious apps, real-time information becomes crucial for users holding digital assets on susceptible devices. The coin-specific news feeds and real-time alerts available through CryptoAppsy allow users to monitor developments related to iOS vulnerabilities and security incidents as they emerge, supporting quick decision-making and safeguarding funds in response to new disclosure or updates from Apple.
