iOS wallet users face a sandbox escape risk from the worse_query vulnerability that can expose mnemonic phrases and keystores stored in plaintext. The flaw breaks the assumption that apps cannot access each other's containers, though it does not automatically steal assets.
The real danger emerges when users install IPA files of unknown origin, which can then read data from other app sandboxes. If wallets store sensitive information like mnemonic phrases or WebView caches locally without encryption, those credentials become readable to malicious apps.
Security experts advise upgrading to the latest iOS version and avoiding installation of apps from untrusted sources to mitigate the threat.
SlowMist: iOS worse_query Vulnerability Enables Sandbox Escape, Puts Plaintext Wallet Data at Risk
Disclaimer: The content provided on Phemex News is for informational purposes only. We do not guarantee the quality, accuracy, or completeness of the information sourced from third-party articles. The content on this page does not constitute financial or investment advice. We strongly encourage you to conduct you own research and consult with a qualified financial advisor before making any investment decisions.
