A critical security vulnerability affecting Apple’s iOS is prompting urgent action from cryptocurrency holders, with Binance and advocates within the digital asset community warning that funds may be at risk if users delay updates.
The vulnerability and affected devices
The recently discovered flaw, known as “worse_query,” is present in iOS versions 26.7.1, 27.0.1, and 27.2. Security analysts have confirmed that this issue allows malicious applications to bypass iOS’s app sandbox, granting them the ability to access private files belonging to other apps stored on the same device. Data at risk includes seed phrases, private keys, and login credentials for cryptocurrency wallets.
Major cryptocurrency exchange Binance, one of the world’s largest digital asset platforms, reported that this flaw is a system-level vulnerability within iOS, not isolated to any particular crypto app.
Malicious apps using this exploit can access plenty of sensitive data from apps on an affected iPhone, including crypto wallets. The risk exists regardless of which wallet provider is used, and no device jailbreak is necessary.
The attack vector primarily involves apps that are sideloaded or manually signed from sources outside Apple’s official App Store. Security experts recommend extra caution for users who have installed applications from unofficial channels.
Mini dictionary: Sandbox escape – A type of exploit that allows an application to break out of its restricted environment, or sandbox, within an operating system, and gain access to other applications’ data or system resources.
Immediate steps for XRP holders
Digital Asset Investor, a notable commentator followed by cryptocurrency communities, encouraged XRP users to take instant action after Binance publicized the threat. He called on XRP holders to update their iOS devices as soon as possible to protect their digital assets.
Unpatched devices running affected iOS versions are extremely vulnerable, and any crypto held in mobile wallets on these devices faces exposure. Immediate software updates are crucial to minimize the risk.
Apple has released iOS 27.2.1 and iOS 26.7.3 as of November 9, 2026, which are believed by security researchers to resolve this vulnerability. Users operating earlier versions are strongly advised to update their devices without delay.
Although the warning targeted the XRP community, security specialists caution that the issue affects all mobile crypto wallet users, regardless of which token is stored.
Industry context and Binance’s recent challenges
The security warning comes while Binance is still addressing the fallout from a previous major incident. In October, $6.3 billion in digital assets was reportedly stolen from Binance by the hacking group TraderTraitor, which is believed to have ties to North Korea.
For comparison, Bybit, another leading global exchange, sustained a loss of approximately $1.5 billion in February 2025. Binance allocated $6 billion to cover affected funds and assured users that their assets remained fully protected. The announcement regarding the iOS security flaw comes just two weeks after the record-setting breach, adding to ongoing concerns within the community.
| Exchange | Incident Date | Amount Stolen | Group Involved |
|---|---|---|---|
| Binance | October 2026 | $6.3 billion | TraderTraitor |
| Bybit | February 2025 | $1.5 billion | Undisclosed |
Recommended security actions
Binance outlined three urgent security steps for users. First, delete any apps sideloaded or manually installed from unverified sources. Second, upgrade iOS and all wallet applications to their latest versions. Third, if users suspect their device may have been compromised, they should transfer funds to a new wallet generated on a clean, secure device and reset all existing login sessions.
