The recently disclosed FomoPeek security incident and DarkSword exploit toolkit are important reminders to keep iOS devices secure:
โพ๏ธ FomoPeek: According to SlowMist, versions 1.1โ1.2 were found to contain malicious code that could exploit iOS vulnerabilities, escape the system sandbox, and access data from other apps.
โพ๏ธ DarkSword: A recently disclosed iOS exploit toolkit that could use malicious links or compromised websites to exploit unpatched vulnerabilities, gain access to a device, and extract sensitive data.
Although their attack vectors differ, both pose risks at the device and operating system level. Even if a wallet itself has no vulnerabilities, sensitive data may still be at risk on an infected or outdated device.
๐ก๏ธ To help protect your assets, we strongly recommend:
๐น Update iOS to the latest version for your device
๐น Remove FomoPeek and any other suspicious apps
๐น Avoid unfamiliar links and untrusted websites
๐น Download apps only from official sources
If you installed or used FomoPeek 1.1โ1.2, create a new wallet on a clean, fully updated device and transfer your assets ASAP. For additional protection against device-level risks, consider using a @KeyPalWallet hardware wallet for larger holdings.
๐จ SlowMist TI Alert: FomoPeek App v1.1โ1.2 Asset Theft ๐จ
We have recently received multiple reports of users having assets stolen. Our investigation found that the affected cases involved private key exposure, and some of the users had previously installed and used @FomoPeek App versions 1.1โ1.2.
A joint investigation by the @SlowMist_Team and @okx security teams confirmed that the app contains malicious code.โ ๏ธ
Besides its normal features, FomoPeek includes two modules that are unrelated to its stated business functions. One of them contains an #iOS kernel exploitation framework with eight different exploit methods. The framework can automatically choose an attack method based on the device model and iOS version.
โผ๏ธAffected iOS versions: iOS 12.0โ18.7 and iOS 26.0โ26.1.โผ๏ธ
If the exploit succeeds, the app may escape the iOS sandbox, access and decrypt Keychain data, and read files belonging to other apps on the device.
๐ This means sensitive data stored on the device, including private keys, seed phrases, login credentials, chat history, and files, may be exposed.
The app also connects to hidden servers that are unrelated to its public-facing services and can receive remote commands.
Based on plaintext traffic captured during our analysis, the attack functionality is currently enabled and runs automatically at regular intervals. In general, devices running older iOS versions are at higher risk.
If you have installed or used FomoPeek versions 1.1โ1.2, we recommend that you take action immediately:
1๏ธโฃ Check your accounts and assets for any unusual activity.
2๏ธโฃ On a trusted device where FomoPeek has never been installed, create a new account and generate a new private key and seed phrase.
3๏ธโฃ Move your assets to the new account as soon as possible.
4๏ธโฃ Update your device to the latest available iOS version.
5๏ธโฃ Do not continue using or reinstalling FomoPeek.
6๏ธโฃ If you notice any suspicious asset activity, contact the official support team of the relevant platform and keep the affected device and related evidence for further investigation.
Exploring Arc? Start with TokenPocket.
From launches and trading to bridging, DeFi, and NFTs, explore the growing Arc ecosystem โ all from one wallet.
Your gateway to Arc, all in TokenPocket.
๐โ๏ธ Arc Mainnet is now live on TokenPocket! @arc
Built by โ @circle , Arc is an open Layer-1 purpose-built for stablecoin finance โ with $USDC as native gas, fast settlement, and infrastructure designed for payments, FX, and capital markets.
Explore the new era of stablecoin finance with TokenPocket.
Onchain transfers are irreversible, and phishing scams keep evolving.
TokenPocket offers advanced, multi-layered protection to help you avoid common scams and make safer transfers.
Learn how these scams work and how to stay safe. ๐
https://t.co/V3JzYqustF
๐ฅ GAS-FREE MAXI SZN โ Final Stop: Across Chains.
TokenPocket is bringing gas-free transfers to more users across more of the stablecoin ecosystem.
More people are choosing a simpler way to send stablecoins โ without worrying about gas.
Building the wallet for the stablecoin era.
A smoother way to swap and bridge across chains.
TokenPocket ร @RelayProtocol brings a seamless cross-chain experience across more networks โ making it easier to swap, bridge, and move assets wherever you need.
More chains, less friction.
๐โ๏ธ Arc Mainnet is now live on TokenPocket! @arc
Built by โ @circle , Arc is an open Layer-1 purpose-built for stablecoin finance โ with $USDC as native gas, fast settlement, and infrastructure designed for payments, FX, and capital markets.
Explore the new era of stablecoin finance with TokenPocket.
๐โ๏ธ Arc Mainnet is now live on TokenPocket! @arc
Built by โ @circle , Arc is an open Layer-1 purpose-built for stablecoin finance โ with $USDC as native gas, fast settlement, and infrastructure designed for payments, FX, and capital markets.
Explore the new era of stablecoin finance with TokenPocket.
๐ฅ Gas-Free Maxi SZN keeps rolling.
Next stop: @solana.
Send $USDT & $USDC with TokenPocket โ with gas fees fully covered.
Zero gas. Full send.
Peach is now accessible on @TokenPocket_TP. ๐
Users can find and access Peach directly through TokenPocket โ making it easier to enter the Peach market layer, discover and trade assets, and launch new assets through Peach Launchpad.
One more gateway into #Peach. ๐ณ๏ธ