Binance warns an iOS bug can hand iPhone wallet keys to malicious apps

Binance flagged the problem on Tuesday, warning that a malicious app on an affected iPhone can read local files belonging to other apps. That access could hand attackers seed phrases, private keys and login credentials. The exchange said the exposure puts those secrets “at risk across the entire ecosystem.”

The affected versions Binance named are iOS 26.7.1, 27.0.1 and 27.2. According to the exchange, the problem sits inside Apple's operating system rather than in any single wallet, calling it “an iOS-level issue, not unique to Binance.” Apple shipped iOS 27.2.1 and 26.7.3 on Monday, but it is not yet clear whether those releases close the hole.

Binance's advice to iPhone users is blunt: delete any app installed from an untrusted source, update iOS and every app to the latest official versions, and if a breach is already suspected, move funds to new wallets generated on a clean device.

The warning lands as crypto holders keep a close eye on mobile wallet security. Cointelegraph previously reported that hackers tied to a Binance incident moved 81% of stolen Solana and routed the funds through THORChain.