Binance Warns iOS Flaw Could Expose Wallet Seed Phrases
Binance warned on November 10 that an iPhone flaw could expose iOS wallet seed phrases. Decrypt, Bitcoin Magazine and Cointelegraph all report it. No thefts are confirmed, and Apple has not said whether its newest update fixes it. Here is what is known.
What Binance says about iOS wallet seed phrases
The flaw is called “worse_query”. It is a sandbox escape: a malicious app could read other apps’ local files, including seed phrases, private keys and logins. A researcher known as forcequitOS posted a proof of concept on GitHub around November 8. In a post on X, Binance wrote: “This is an iOS-level issue, not unique to Binance.” It lists iOS 26.7.1, 27.0.1 and 27.2 as affected.
What is confirmed, and what is not
First, all three outlets say no thefts have been confirmed. Second, SlowMist’s security chief, who goes by 23pds, says the bug will not steal assets on its own. So the risk needs an untrusted app, installed outside the App Store, plus a wallet that stores phrases or keystores unencrypted. The researcher’s own README calls the proof of concept not useful by itself.
However, the sources disagree on the patch. Apple released iOS 27.2.1 on November 9. Decrypt quotes SlowMist saying it blocks the bug. Bitcoin Magazine and Cointelegraph say it is unclear, and Apple’s security notes do not mention worse_query. Cointelegraph says Apple did not reply to its request for comment. The affected range also differs: Binance lists three versions, while the README, per Decrypt and Bitcoin Magazine, covers iOS 26.0 through 26.7.2 plus 27.2.
How to protect iOS wallet seed phrases today
Binance’s advice is plain. Delete apps from untrusted sources, such as sideloaded or manually signed IPA files. Next, update iOS and every app to the latest official version. If you think you were hit, move funds to a new wallet on a clean device and reset all active sessions. Also, we would add one more step: do not keep a seed phrase in a phone note or photo at all. Write it down, offline.
What the iOS flaw does to your mining margin
Honestly, nothing directly. The bug is a theft risk for wallet holders, not a hashrate or price event. Therefore, the only path to your margin is a fear-driven sell-off, and nothing in the reports points to one. Instead, the real cost for a miner is the coins in your payout wallet. If that wallet lives on a phone, move it. Meanwhile, check the live numbers.
Miner math: bitcoin hashprice today
Here is the live maths on November 10. Bitcoin is $73,217 and the network is 961 EH/s, so hashprice is about $34.52 per petahash per day. That is what one PH/s of hashing earns before power.
| Machine | 5c/kWh | 8c/kWh | 12c/kWh | Break-even |
|---|---|---|---|---|
| Antminer S19 (95 TH/s, 3250 W) | -$0.62 | -$2.96 | -$6.08 | 4.2c |
| Antminer S19k Pro (115 TH/s, 2645 W) | $0.80 | -$1.11 | -$3.65 | 6.3c |
| Antminer S19 XP (141 TH/s, 3010 W) | $1.26 | -$0.91 | -$3.80 | 6.7c |
| Antminer S21 Pro (234 TH/s, 3510 W) | $3.87 | $1.34 | -$2.03 | 9.6c |
Numbers are profit per day after electricity, at the three power prices shown. Break-even is the most you can pay per kilowatt-hour before the machine loses money. Specs are the manufacturer ratings; network data comes from mempool.space. Try your own power price in our free bitcoin mining profit calculator. See what these machines really sold for in our used ASIC miner price index. Want to run the same numbers on a machine you can buy today? See our used ASIC miners, or buy several at once through bulk lots.
If the scare knocks bitcoin down 5%: the break-even power price on an S19k Pro falls from 6.3 to 5.9 cents per kilowatt-hour. At 8 cents, daily profit goes from -$1.11 to -$1.31.
That is a “what if”, not a forecast. See our mining economics guides for how we work these numbers, and our Bitcoin price prediction for the ranges we expect.
If a machine no longer pays at your power price, you can sell us your used miners. To buy efficient units, see all miners.
-Nick
ING Mining
This is general information, not financial advice. Crypto is volatile, and exchanges can fail. Please do your own research.
How this story was made: drafted with the help of AI tools from public sources, then edited by Nick Squires. See our editorial policy. Spot an error? Email ns@ingmining.com.