Cryptocurrency exchange Binance warned Tuesday that an iOS flaw could expose crypto wallet recovery phrases and private keys if a user runs a malicious app on an affected iPhone.
Binance listed iOS 26.7.1, 27.0.1 and 27.2 among the affected versions that could allow malicious apps to read local files from other apps, putting seed phrases, private keys and login credentials “at risk across the entire ecosystem.” Binance added that this was “an iOS-level issue, not unique to Binance.”
Apple released iOS 27.2.1 and 26.7.3 on Monday, but it’s unclear whether either update fixes the flaw.
Binance urged users to delete any apps installed from untrusted sources, update iOS and all apps to the latest official versions, and transfer funds to new wallets created on clean devices if they suspect a breach already occurred.
This is a developing story…
Related: Binance hackers move 81% of stolen Solana, route funds via THORChain
cointelegraph.com