Skip to content

SlowMist Chief Information Security Officer: iOS sandbox escape vulnerability may threaten wallet data.

Nov 10, 11:04

November 10: SlowMist Chief Information Security Officer 23pds issued a reminder that the iOS vulnerability worse_query is a container sandbox escape, not a jailbreak, and may break data isolation between applications.

He stated that the vulnerability itself will not automatically steal assets, but after users install and run IPAs from unknown sources, malicious applications may read the containers of other applications; if wallets store mnemonic phrases, keystores, or WebView caches locally in plaintext, the relevant data is at risk of being read. He recommends that users upgrade their systems to the latest version and avoid installing applications from unknown sources.

Source