Binance warns iOS flaw could expose crypto wallet seed phrases and keys

What Binance says the flaw does

According to Binance, the flaw could allow malicious apps to read local files from other apps, which puts seed phrases, private keys and login credentials at risk. That's the part self-custody users will care about. A seed phrase is the whole wallet, so a leak isn't a small problem.

Binance also said it's an iOS-level issue and not unique to Binance. In other words, the exchange isn't describing a bug in its own app; it's pointing at the operating system, and its warning frames the exposure as reaching well beyond one platform.

putting seed phrases, private keys and login credentials “at risk across the entire ecosystem.”

Does Apple's latest update fix it?

Nobody can say yet.

Apple released iOS 27.2.1 and 26.7.3 on Monday, but it's unclear whether either update fixes the flaw. Apple isn't quoted in Cointelegraph's report, and nothing in it shows Apple has confirmed the issue (the affected versions and the impact both come from Binance's warning). The report also doesn't describe any exploitation, thefts or losses tied to the flaw.

What Binance told users to do

Binance's guidance has three parts. First, the exchange urged users to delete any apps installed from untrusted sources. It also advised them to update iOS and all apps to the latest official versions, even though it's not clear the newest iOS builds close the hole.

The third step is the heaviest one. For anyone who suspects a breach already happened, Binance advised transferring funds to new wallets created on clean devices, rather than simply patching the phone that may have been compromised and carrying on.

For iPhone users holding crypto in mobile wallets, the takeaway from Binance is pretty simple: don't run apps you can't trust on a device that holds your keys.