PANews|11月 10, 2026 03:02
[SlowMist: iOS worse_query Vulnerability is a Sandbox Escape, Beware of Plaintext Storage Risk in Wallet Mnemonic Phrase Storage] 23pds, Chief Information Security Officer of SlowMist, posted on the X platform reminding iOS wallet users that the worse_query vulnerability is a container sandbox escape, not jailbreaking, but it breaks the assumption that "apps cannot see each other." The vulnerability itself does not automatically steal assets; the real risk is triggered when a user installs an IPA file from an unknown source. Once run, the application can read the containers of other apps. If the wallet stores the mnemonic phrase, keystore, and WebView cache locally in plaintext, there is a risk of it being read. 23pds recommends that users upgrade their system to the latest version and avoid installing applications from unknown sources.
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink