SlowMist: iOS worse_query Vulnerability Is a Sandbox Escape; Beware of Wallets Storing Mnemonic Phrases in Plaintext

November 10: SlowMist Chief Information Security Officer 23pds posted on X to warn iOS wallet users that the worse_query vulnerability is a container sandbox escape, not a jailbreak, but it can break the assumption that "apps cannot see each other." The vulnerability itself does not automatically steal assets; the real trigger of risk is a user installing an IPA file of unknown origin. Once running, that app can read other apps' containers. If a wallet stores mnemonic phrases, keystores, or WebView caches locally in plaintext, there is a risk of them being read. 23pds advises users to upgrade their systems to the latest version and avoid installing apps of unknown origin.