# iOS Vulnerability Risks Exposure of Crypto Wallet Keys, Binance Alerts

*Published November 11, 2026*
*Source: [https://thehackernews.com/2026/11/binance-warns-of-ios-sandbox-escape.html](https://thehackernews.com/2026/11/binance-warns-of-ios-sandbox-escape.html)*

## Executive Summary

A newly discovered iOS vulnerability, worse_query, allows apps to access data from other apps, posing a risk to sensitive information like crypto wallet keys. Binance has warned users to remove untrusted apps and update their systems, although no fix has been confirmed by Apple yet.

## Article

A recently disclosed iOS vulnerability, known as a sandbox escape, has raised concerns about potential security risks for iPhone users, particularly those using cryptocurrency wallets. The vulnerability, referred to as worse_query, allows an app to access files from other apps on iPhones running iOS versions 26 and 27. Binance has issued a warning about the risk this poses to sensitive data such as seed phrases, private keys, and login credentials, as malicious apps could potentially exploit this flaw to access such information.

The escape was released on GitHub by a researcher known as forcequit, in collaboration with 0xjohnny, just a day before Apple rolled out updates for iOS 26 and 27. However, these updates did not address the vulnerability. There have been no reports of attacks or thefts related to this vulnerability so far. Binance has advised users to remove apps installed from untrusted sources and to ensure their iOS and all apps are updated.

For those who suspect their data may be compromised, Binance recommends transferring funds to a new wallet on a clean device and resetting all active login sessions. The proof-of-concept code for worse_query can access any app's data container on an iPhone and some system folders on iOS 27. Although the code is meant for developers and is not inherently dangerous on its own, apps built on it could potentially exploit the vulnerability.

One such app, called WQ Files, developed by Christoph Kolbicz, can access and manipulate data from other apps without requiring a jailbreak. It installs using sideloading tools like AltStore and SideStore. It remains unclear whether an app from the official App Store could leverage worse_query.

Apple's latest updates, iOS 27.2.1 and 26.7.3, addressed other security issues but did not mention the sandbox escape. The vulnerability's discoverer noted delays in Apple's response, which led to the public release of the exploit. Neither Binance nor the researchers have identified specific wallet apps as being vulnerable.