Vulnerability · high
Binance warns of iOS sandbox escape exposing wallet keys, no fix confirmed
Tier B · Patch this week – Put it in the sprint
Who’s exposed: iPhones on iOS 26 and 27 holding wallet keys or credentials
Tier B because: Exploited in the wild OR public exploit
Reach
Attack
Damage
Fix
Popular tool · Public exploit · No fix yet
The Brief
- An iOS sandbox escape published on GitHub lets an app read other apps' files on iPhones running iOS 26 and 27.
- The flaw puts seed phrases, private keys, and login credentials at risk of exposure to malicious apps, according to Binance's warning.
- No fix has been confirmed as of the report.
Why it matters
Developers and users who store wallet keys or login credentials on iPhones may have that data exposed to other apps until Apple ships a confirmed fix.
The checklist behind the tier
Checklist · 4 of 10 yes
| Yes | Hits tech teams | Judgment: iOS is an operating system developers build for and test on, so it counts. |
| No | Core infrastructure | Judgment: iOS is a platform, not foundational software like OpenSSH, glibc or the Linux kernel. |
| Yes | Popular tool | Judgment: iOS is a widely used mainstream OS on hundreds of millions of iPhones. |
| No | Exploited in the wild | The Hacker News: Binance warns of risk; no source reports observed attacks using the flaw. |
| Yes | Public exploit | The Hacker News: the iOS sandbox escape was published on GitHub. |
| No | Remote, no login | The Hacker News: the escape lets an app read other apps' files, so a malicious app must already be installed. |
| No | Full takeover | The Hacker News: the flaw lets an app read other apps' files; no code execution or root is reported. |
| No | Secrets exposed | The Hacker News: seed phrases and keys are only 'at risk of exposure'; no theft is reported. |
| No | Supply chain | The Hacker News: a sandbox escape in iOS; no compromised package, update or build pipeline is reported. |
| Yes | No fix yet | The Hacker News headline: 'No Fix Confirmed'. |
Timeline
Binance warns of iOS sandbox escape exposing wallet keys; no fix confirmed
The Hacker News
Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed
Source
Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix Confirmed ↗ The Hacker News · 2h ago
First seen · 1 source · Full story page · How tiers are decided