Self-custody gives you full control—and protecting that control is just as important.
A single compromised key can put everything at risk. Strong, layered security is essential.
Here are three ways to level up your protection with TokenPocket 🧵
No need to panic. TokenPocket is safe.
worse_query is a sandbox escape, not a jailbreak. Exploitation requires installing an untrusted or sideloaded app on an affected iOS version.
Good habits can help prevent attacks like this:
• Keep iOS updated
• Avoid suspicious links and untrusted apps
• Never save recovery phrases in screenshots or note-taking apps
• Use a trusted hardware wallet like @KeyPalWallet for large holdings
🚨 SlowMist TI Alert: iOS sandbox escape 0day PoC “worse_query” disclosed 🚨
A public PoC for a sandbox escape 0day, worse_query, targets iOS 26.0–26.7.2 and iOS 27.2. It is the successor to bad_query. 📱
⚠️ This is a container sandbox escape, not a jailbreak. It breaks the assumption that apps can’t see each other: a malicious app that successfully exploits it can reach system paths and read or modify other apps’ data.
💸 The bug does not steal assets by itself. The real risk starts when a user installs an app from an untrusted source, such as a sideloaded IPA. If a wallet stores its seed phrase, keystore or WebView cache in plaintext locally, a malicious app could read it.
🛡️ Recommendations:
🔸 Don’t install IPAs or apps from unknown sources
🔸 Keep iOS up to date and install Apple’s fix as soon as one is released
🔸 Wallet developers: don’t store sensitive data in plaintext locally
🔸 If you installed an untrusted app on a device holding wallets, treat it as risky and consider moving assets to a new wallet created on a clean device
🔗 https://t.co/sIP4hX85TR
Stablecoins Should Move Without Barriers.
Send $USDC, $USDT, and $DAI on @0xPolygon with TokenPocket — zero gas fees.
Your stablecoins, your way.
See how it works 👇
Multilingual Seed Phrase Now Live 🌍
You can now create or import a wallet using a seed phrase in your native language.
Can you spot all 12 words in your language ? 👇
Got USDT on TRON but no TRX?
🎁 Pay gas in $USDT or ethereum:0x4f8e5de400de08b164e7421b3ee387f461becd1a with @TokenPocket_TP.
Grab one of 10 redemption codes at the end of the video for a gas-free TRON transfer. @trondao
Reply below for a chance to get one. We’ll pick winners at random.
#TRON #USDT #TokenPocket #USDD
Social logins and embedded wallets make Web3 easier—but at the cost of added third-party risk.
TokenPocket stays true to self-custody, keeping your keys fully under your control.
We’re aware of a security issue affecting Web3Auth’s services used by some third parties.
We have temporarily paused the embedded wallet service. After an initial investigation, we’ve found no evidence that MetaMask users are impacted.
Why pay gas fees when you don’t have to?
💸 Gas-Free Transfers — Send stablecoins across multiple networks at zero cost.
🔄 Gas-Free Swaps — Swap tokens with zero gas fees.
More Chains. Zero Gas Fees. More Freedom.
Self-custody gives you full control—and protecting that control is just as important.
A single compromised key can put everything at risk. Strong, layered security is essential.
Here are three ways to level up your protection with TokenPocket 🧵