Binance iPhone Warning and the Simple Safety Steps

4 min read

Last updated November 15, 2026

Binance warned on November 10, 2026 that an iPhone flaw could let shady apps read wallet keys. Most people who only use the App Store face little risk.

Key Points

The crypto exchange Binance says a flaw called worse_query affects some iPhone software versions.
A bad app could read files saved by other apps, including wallet keys and logins.
The attack needs an app installed from outside the App Store. No losses have been confirmed.

What Is the worse_query iPhone Flaw?

It is a weakness that lets one app peek into another app’s private storage. Normally, every iPhone app stays locked in its own space.

A researcher who goes by forcequitOS shared the code on GitHub. The posted code is a test version, not a ready-made attack, Decrypt reported.

Binance posted its warning on November 10. It said the flaw could expose seed phrases, private keys and login details, BleepingComputer reported.

Good to know. The App Store version of an app is not the problem. The risk comes from apps installed from websites, files or unofficial stores.

Which iPhones Are Affected

Binance named three versions of Apple’s iPhone software. They are iOS 26.7.1, iOS 27.0.1 and iOS 27.2.

Fact	Detail	Source
Warning issued	November 10, 2026	Decrypt
Versions named by Binance	iOS 26.7.1, 27.0.1 and 27.2	BleepingComputer
Latest Apple update	iOS 27.2.1, November 9	Apple
Flaws fixed in that update	9	Apple
Confirmed crypto losses	None so far	BleepingComputer

Apple released iOS 27.2.1 on November 9, according to its security releases page. That update fixed nine flaws.

One fix stops an app from reaching “sensitive user data,” Apple’s iOS 27.2.1 notes say. Apple has not said if it is the same flaw. Experts disagree on whether the update blocks worse_query.

0Confirmed crypto losses linked to the flaw so far, according to BleepingComputer.

Are You at Risk? A Quick Check

We matched each common situation to what the reports say. Find the row that fits you.

Your situation	Risk level
You only install apps from the App Store	Low
You updated to iOS 27.2.1 or later	Lower, but not confirmed safe
You installed apps from a website or file	Higher
You use an alternative app store in Europe	Higher
You keep wallet seed phrases on your phone	Higher if any risky app is installed

The flaw needs a bad app on your phone first. The App Store reviews apps before they go live, so the main danger is apps from other sources, Macworld noted.

Have you ever installed an iPhone app from outside the App Store?

Never
Once or twice
Yes, often
Not sure

Free updates

Join the Digieh list

Be the first to know when our weekly brief launches.

No spam. Unsubscribe anytime. Read our Privacy Policy.

Why It Matters

Crypto users are prime targets right now. The Federal Bureau of Investigation (FBI) blamed North Korea for a record $6.3 billion theft from Binance, Forbes reported.

A seed phrase is the master key to a crypto wallet. Anyone who reads it can move the money, and there is no bank to call.

Even if you do not own crypto, the same flaw could expose saved logins. Our guide to phone privacy settings shows other ways to lock down your phone.

How to Stay Safe on Your iPhone

Update to the latest iPhone software
Delete any app you did not get from the App Store
Update all your apps
Never store a seed phrase in notes or photos
Turn on two-step login for exchange accounts
If worried, move funds to a new wallet on a clean device

To update, open Settings, tap General, then Software Update. Apple’s update guide also suggests a backup first.

Watch out for scam calls and texts that try to rush you. Our guide on spotting artificial intelligence (AI) voice scam calls explains the warning signs. Holiday shoppers should also read our tips to shop online safely.

Try this today. Open Settings, tap General, then Software Update. Install anything waiting there.

What does the worse_query flaw need before it can work?