iOS flaw: Binance urges iPhone users with crypto to update
Binance warned about worse_query, an iOS flaw that can let a malicious app read other apps' files, including seed phrases and keys. No thefts have been confirmed yet.
Evento: 10 de noviembre de 2026
Fuente primaria: 10 de noviembre de 2026
Publicado aquí: 10 de noviembre de 2026 a las 12:56 UTC
Leer: 2 min
Qué pasó
On November 10 Binance said a flaw called worse_query in iOS 26.7.1, 27.0.1 and 27.2 lets malicious apps read local files of other apps. Seed phrases, private keys and logins are at risk. The exchange stressed it is an iOS issue, not unique to Binance. A researcher posted the code on GitHub on November 8.
Por qué te importa
If you keep a crypto wallet on your iPhone, its secrets live on the phone. iOS normally keeps each app out of the others' files. worse_query gets around that wall. There are no confirmed cases of crypto stolen this way yet.
Qué revisar y vigilar
Update iOS and every app from the App Store. Delete apps installed outside the App Store. Apple shipped iOS 27.2.1 on November 9, but its fix list does not name worse_query. This is an overview, not advice.
Dónde está pasando
LIVEArrastra para girar. Puntos verdes: la bolsa está operando ahora mismo (horario normal, sin contar festivos). Sombra: donde ahora es de noche. Fronteras: Natural Earth, terremotos: USGS. Idea de las capas: God’s Eye View (MIT).
What happened. Binance posted the warning on X on November 10. It says worse_query affects iOS 26.7.1, 27.0.1 and 27.2. A malicious app can read local files of other apps, which can hold seed phrases, private keys and login data.
Where it came from. A researcher who goes by forcequitOS published worse_query on GitHub on November 8. It is described as a sandbox escape for iOS 26.0 through 26.7.2 and 27.2. The sandbox is the wall that keeps each app in its own folder. The author calls it a proof of concept for developers that isn't useful by itself. But the code is public, so others can build on it.
What Apple did. iOS 27.2.1 came out on November 9 for iPhone 11 and later. Its security notes list nine fixes. One is in App Intents: an authorization issue through which an app may be able to access sensitive user data. The notes do not mention worse_query. Apple has not publicly said whether the update closes this exact hole.
What Binance advises. Delete apps from untrusted sources, meaning anything installed outside the App Store. Update iOS and all apps to the latest official versions. If you suspect a breach, move funds to a new wallet created on a clean device and reset all active login sessions.
What to keep in mind. To use the flaw, a malicious app has to be on the phone already. The biggest risk is for people who install apps outside the App Store. According to Decrypt, there are no confirmed thefts through worse_query so far.
Hechos confirmados
- On November 10 Binance warned that worse_query, a flaw in iOS 26.7.1, 27.0.1 and 27.2, lets malicious apps read other apps' local files, including seed phrases, private keys and logins.[2]
- Binance called it an iOS-level issue that is not unique to Binance.[2]
- worse_query was published on GitHub on November 8 as a sandbox escape for iOS 26.0-26.7.2 and 27.2; the author calls it a proof of concept for developers.[3]
- Apple released iOS 27.2.1 on November 9 with nine security fixes, one in App Intents where an app may be able to access sensitive user data.[1]
- Apple's iOS 27.2.1 notes do not mention worse_query.[1][2]
- Binance advises deleting apps from untrusted sources, updating iOS and apps, and moving funds to a new wallet on a clean device if a breach is suspected.[2]
- There are no confirmed reports of crypto stolen using this flaw so far.[2]
Implicaciones
- ConfirmadoPeople with crypto wallets on an iPhone should update iOS and review their apps.
- Nuestra lecturaThe highest risk is for people who install apps outside the App Store. This is our inference.
- Nuestra lecturaPublic exploit code raises the chance someone tries to use it. This is our inference.
Todavía no se sabe
- Whether iOS 27.2.1 closes worse_query itself
- Whether any real thefts have used the flaw
- Whether Apple will ship a dedicated fix
A quién afecta
Global. Anyone who keeps crypto or keys in iPhone apps
Fuentes
- Apple: About the security content of iOS 27.2.1 and iPadOS 27.2.1 9 de noviembre de 2026 · oficial
- Decrypt: Binance Warns of Apple iOS Flaw That Could Expose iPhone Users' Private Keys 10 de noviembre de 2026 · medios
- GitHub (forcequitOS): worse_query: a sandbox escape for iOS 26 and 27 8 de noviembre de 2026 · oficial
Portada: Gráfico de Freekonomist, una imagen simbólica, no una foto del evento. Esta es una explicación de noticias, no asesoramiento financiero.
Más historias
BBAS3: Banco do Brasil stock drops over 10% as Q3 profit falls 66.5%
BBAS3, the Banco do Brasil share, fell more than 10% in early trade on 12 November after third-quarter profit dropped 66.5% to R$1.27 billion, farm-loan defaults rose and the bank cut its guidance and payout.
India inflation hits 6.09%, a two-year high above the RBI band
India's retail inflation rose to 6.09% in October from 5.54% in September, breaking above the central bank's 2-6% tolerance band. Food is the main driver, up 8.94%.
Serbia surprises with a rate hike to 6%, its first in over three years
The National Bank of Serbia raised its key rate by 0.25 points to 6% to stop costly energy from spreading to other prices. Economists polled by Bloomberg had expected a hold.
Morning brief by email
The night's key moves and what matters today, in 2 minutes. One-click unsubscribe.
BloFin
3M
7M
40M
60M
80M
250M