An iOS bug called worse_query lets a malicious app read other apps' files. Binance and SlowMist warned that wallet seed phrases could be at risk.
The bug alone doesn't steal anything. What matters is where your wallet keeps its keys: in its own files (exposed), or in the iPhone's Keychain (not reachable by a file-reading bug).
What to do today:
1. Update to iOS 27.2.1 or later
2. Delete apps you don't trust, especially sideloaded ones
3. Ignore anyone offering to "migrate" your wallet
Why one key on a phone shouldn't be your only key, and how to check your own wallet:
https://trikey.app/blog/ios-worse-query-wallet-files
#bitcoin #iOS #selfcustody
icaruswings / Icarus Wings
npub19t…ujvq5
2026-11-11 01:05:56 UTC
Author Public Key
npub19tzp8lf3klmqj3dz9mz0qnuvjp7uyy9993gmljmyaxs8phztj7wsnujvq5Seen on
wss://relay.damus.ioPublished at
2026-11-11 01:05:56 UTCEvent JSON
{
"id": "4879f33616757a3b9b6470f58c463bdc3be5565afbceac688c8efcfbdd63c23f",
"pubkey": "2ac413fd31b7f60945a22ec4f04f8c907dc210a52c51bfcb64e9a070dc4b979d",
"created_at": 1794359156,
"kind": 1,
"tags": [
[
"t",
"bitcoin"
],
[
"t",
"iOS"
],
[
"t",
"selfcustody"
],
[
"client",
"Primal iOS"
]
],
"content": "An iOS bug called worse_query lets a malicious app read other apps' files. Binance and SlowMist warned that wallet seed phrases could be at risk.\n\nThe bug alone doesn't steal anything. What matters is where your wallet keeps its keys: in its own files (exposed), or in the iPhone's Keychain (not reachable by a file-reading bug).\n\nWhat to do today:\n1. Update to iOS 27.2.1 or later\n2. Delete apps you don't trust, especially sideloaded ones\n3. Ignore anyone offering to \"migrate\" your wallet\n\nWhy one key on a phone shouldn't be your only key, and how to check your own wallet:\nhttps://trikey.app/blog/ios-worse-query-wallet-files\n\n#bitcoin #iOS #selfcustody",
"sig": "9d0c26b2dc0e2b885dfaaab354270ec9c33590ac81843070b5f868c3974de58438575a7222476c46d2ee5e82718b23e62532df10c718ea0c63c642307dfd216f"
}