BleepingComputer reported on November 10 that Binance is warning about an iOS flaw called "worse_query". Binance says it affects iOS 26.7.1, 27.0.1 and 27.2. A malicious app could read files from other apps, including wallet seed phrases, private keys and logins. Binance says the fault is in iOS itself, not only its own app. BleepingComputer said a proof-of-concept exploit, a tool named WQ Files, went public the day before. It works without a jailbreak, but must be installed on the phone, for example as a sideloaded app from outside the App Store.
Binance says no crypto losses have been confirmed so far. It advises users to install the latest iOS update and delete apps they do not need or trust. If a user suspects a break-in, Binance says to move funds to a new wallet on a clean device and reset all login sessions. Apple released updates on November 9: iOS 27.2.1, 26.7.3 and 18.7.12, which fix nine flaws. One, CVE-2026-113963, could let an app reach sensitive user data. BleepingComputer says it is unclear whether that is the same flaw. The outlet has asked Apple for comment.
Apps that store secrets on a phone rely on iOS to keep apps apart. This flaw, per Binance and the published exploit, breaks that wall on three named iOS versions. Teams that build or manage iPhone apps holding keys or credentials may want to check which iOS versions their users run.