Black and gray market actors have developed a complete attack chain targeting iOS users that enables the theft of private keys and mnemonic phrases through malicious links. SlowMist Chief Information Security Officer 23pds disclosed that the exploit uses WebKit memory corruption to bypass security protections, escape sandboxes, and achieve kernel-level root access for exfiltrating Keychain and wallet data. The vulnerability affects iOS versions 13 through 26.5, with attackers leveraging Safari browser exploits to gain native call capabilities after initial JavaScript layer compromise. Users are advised to upgrade their devices immediately to mitigate the risk of credential theft and unauthorized wallet access.