Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed

A sandbox escape vulnerability in iOS 26 and 27, dubbed 'worse_query', has been publicly released on GitHub by researcher forcequit in collaboration with 0xjohnny. This exploit allows malicious apps to read and modify data from other apps' containers without requiring jailbreak or kernel exploits, potentially exposing cryptocurrency wallet seed phrases and private keys. A file manager app called WQ Files, developed by Christoph Kolbicz and built on this exploit, demonstrates the risk through sideloaded installation via tools like AltStore and SideStore. Apple's recent iOS updates (26.7.3 and 27.2.1) do not appear to address the issue, and no official fix has been confirmed.

AI-extracted · verify before operational use