Binance Just Warned iPhone Users: A Hidden iOS Bug Could Expose Your Private Keys
A security flaw quietly discovered by a researcher could have exposed the private keys of millions of iPhone users holding crypto, and Apple never said a word about it publicly.
Binance has issued a warning to iOS users about a vulnerability dubbed "worse_query", a bug that security researchers flagged just days before Apple pushed out its latest iOS security update. The timing is not a coincidence. The fact that Apple has not publicly acknowledged the bug is exactly what should concern every crypto holder still on an older iOS version.
What the Bug Actually Does
The "worse_query" flaw sits at the kind of system level that could allow a bad actor to extract sensitive data from an iPhone, including the private keys stored in wallet apps. Private keys are the master password to your crypto. Whoever holds them holds your funds. No recovery phrase. No second chance.
The researcher who discovered the bug published findings publicly before Apple's patch dropped, meaning there was a window, however brief, where the exploit was both known and unpatched in the wild. That window is the problem.
Why Apple's Silence Is Making This Worse
Apple has not confirmed the vulnerability exists, has not named it in its security release notes, and has not issued any public advisory. That is a pattern that security researchers call "silent patching," and it leaves users with no way to assess their own risk or understand the urgency of updating.
For the average iPhone user, this is an inconvenience. For someone with $50,000 in a mobile crypto wallet, this is a five-alarm fire.
Binance stepping in to surface this warning fills a gap that Apple chose to leave open. That Binance, an exchange, is doing the security communication work of a trillion-dollar hardware company tells you everything about where the priorities are.
Who Is Actually at Risk
If you use a mobile crypto wallet on iPhone, store seed phrases in Apple Notes or iCloud, or access exchange apps on an unpatched iOS version, you are in the blast radius of this vulnerability. Hot wallets connected to iOS are the primary concern. Cold storage hardware wallets are not affected.
What to Do Right Now
Update your iPhone to the latest iOS version immediately. Do not wait. If you are using a mobile hot wallet as your primary storage for meaningful crypto holdings, this is the reminder you needed to move those assets to a hardware wallet.
Watch for any further disclosure from Apple or the original researcher in the coming days. If the full scope of "worse_query" becomes public, the conversation around mobile wallet security is going to get loud fast.