Binance warns iPhone flaw may expose crypto wallet keys

Binance warned Tuesday that a security flaw in Apple’s iOS could let malicious apps read crypto wallet recovery phrases, private keys and login credentials stored on affected iPhones. The exchange urged users to delete apps from untrusted sources and update iOS and all applications to the latest official versions.

Binance listed iOS versions 26.7.1, 27.0.1 and 27.2 among those potentially affected. The flaw could allow one app to access local files belonging to another app, putting wallet data stored on the device at risk.

The exchange described the problem as an “iOS-level issue, not unique to Binance.” It advised users who believe their devices may have been compromised to transfer their funds to new wallets created on clean devices.

Blockchain security firm SlowMist flagged the issue Tuesday, noting that a malicious app could read recovery phrases if a wallet stores them on an iPhone without encryption. Recovery phrases restore access to crypto wallets, while private keys authorize transactions.

An iOS security researcher using the name forcequitOS disclosed the flaw publicly Sunday and credited another researcher, 0xjohnny. Apple released iOS 27.2.1 and 26.7.3 on Monday, but it was unclear whether either update fixed the issue.

A Binance spokesperson described the “underlying file-access risk” as one that “may apply across the iOS ecosystem.” The spokesperson added that Binance had found no confirmed cases of attackers using the vulnerability to access crypto wallets or steal funds. Apple had not responded to questions about the issue by publication time.

Reviewed and fact-checked by Alex Panasenko on November 10.