iOS 26 partial · 27.2 sandbox PoC… concerns over plaintext wallet exposure
Original headlineiOS 26 일부·27.2 샌드박스 PoC…지갑 평문 노출 우려
Not investment advice. Muhabbit scores how much a story may matter, not which way to trade.
SlowMist's chief information security officer 23pds disclosed on X a proof-of-concept iOS flaw dubbed "worse_query" that allows apps to escape the app container sandbox, breaking the assumption that apps cannot see each other's data. The public PoC repository targets iOS 26.0 through 26.7.2 and 27.2, and requires the running app to use an app group container. The warning centers on the risk that wallet data stored in plaintext could be read when an IPA of unclear origin is executed. It matters because the data boundary between apps can be bypassed, potentially exposing sensitive wallet information. What to watch next is whether Apple confirms the issue and patches it, and whether wallet developers move to encrypt stored data or otherwise harden their containers.
Muhabbit's AI wrote this summary in its own words from TokenPost's report and translated it from Korean. It can get details wrong, so check the source.
Named in this story
iOS, SlowMist, worse_query, 23pds