VESPR and Begin React to iPhone Security Wahala

VESPR talk how dem dey protect recovery phrases, while Begin advise iPhone users make dem update iOS and install apps through App Store.

By SongMarketCap

Updated:

Cardano News - VESPR and Begin React to iPhone Security Wahala

Binance warn on November 10 say one bad iPhone app fit read some files wey belong to other apps for the same device. For Cardano users, the risk depend on wetin their wallet dey store for the phone and how e dey protect that data. VESPR explain how e dey store recovery phrases, while Begin drop precaution advice.

Wetín the iOS flaw fit expose

The flaw wey dem don make public, wey dem call worse_query, dey allow one app to jump some restrictions wey iOS dey use separate apps from each other. Recovery phrase or private key fit leak if wallet store am without encryption inside file wey bad app fit read.

Binance mention iOS 26.7.1, 27.0.1, and 27.2 for im warning. The researcher wey reveal the flaw report say the versions wey fit dey affected fit even wide pass that. Binance spokesperson talk say the exchange never see any case wey dem use the flaw take enter crypto wallets or thief funds by the time dem report am.

How VESPR and Begin take respond

VESPR talk say e dey encrypt recovery phrases and e dey keep the decryption key inside Apple iOS Keychain. According to the wallet team, the flaw no fit reach that key. Based on that, even if person read the app files, the recovery phrase go still remain encrypted.

Begin advise users make dem update iOS and install apps through the App Store. The public statement focus on precautions and e no talk whether the flaw fit expose recovery phrases wey Begin store.

[NEWSBREAK]

Wetín Apple updates make clear

Apple release iOS 27.2.1 and 26.7.3 on November 9. None of the security notes talk say dem fix worse_query. The researcher wey disclose the flaw report say e still dey affect iOS 27.2.1. The wallet teams still recommend update as precaution.

Wallet encryption dey cover the copy wey the wallet store. Any photograph or note wey get the same recovery phrase na separate copy, and the risk go depend on how dem store am. When hardware wallet dey do signing, the private keys go remain for the signing device while the iPhone fit prepare and show the transaction.