Wallet security: iOS flaw and Ledger firmware concerns
Binance warned of an iOS vulnerability exposing seed phrases, and a developer claims Ledger's latest firmware reports signatures to Ledger servers.
What we know
Binance warned that 'worse_query' on iOS 26.7.1, 27.0.1 and 27.2 lets malicious apps read other apps' files, risking seed phrases and keys, and users urged updating iOS. Separately, a wallet developer alleges Ledger's latest signing kit sends every signature to Ledger by default; this is unconfirmed by Ledger in these posts.
How the story developed
Binance warned of an iOS vulnerability exposing seed phrases, and a developer claims Ledger's latest firmware reports signatures to Ledger servers.
Binance warned of an iOS flaw letting malicious apps read other apps' files, risking seed phrases. Separately, developers allege Ledger's latest firmware reports signatures to its servers.
What people are posting
Posts on X this story draws on. They are individual users' views and have not been verified by Global Eye 24.
“A vulnerability (worse_query) affecting iOS 26.7.1, 27.0.1, and 27.2”
View post →“Your devices with the latest ledger firmware are phoning home”
View post →By the Global Eye 24 desk, with AI assistance. Updated as the story develops. Spot an error? Write to corrections@globaleye24.com.