Security researcher forcequitOS disclosed a zero-day container sandbox escape vulnerability, worse_query, in iOS 26 and 27, which can break the isolation between applications. Chinese community KOL Shan Ge (im23pds) cited and warned that while the vulnerability itself does not automatically steal assets, installing an IPA from an unknown source could allow it to read other application containers. If the wallet stores mnemonic phrases, keystores, or WebView caches in plaintext, there is a risk of theft. He recommends upgrading the system and being cautious when installing applications. https://www.(wublock123.com)/news/ios-26-27-sandbox-escape-vulnerability-malicious-apps-read-crypto-wallet-data-71647