A post by @CertiKAlert on X.

CertiK has flagged a new version of the DarkSword iOS exploit kit that targets crypto wallets on unpatched iPhones, warning that simply opening a malicious site in Safari can be enough to compromise a wallet—no wallet connection or signature required. The attack vector matters because it removes the usual consent step users rely on to stay safe, leaving exposure tied to device patch status rather than user behavior. Details on affected iOS versions, the number of wallets impacted, and any losses have not yet been disclosed. Watch for Apple patch guidance and follow-up advisories clarifying which iOS builds and wallet apps are most at risk.