An update on this iOS vulnerability.
Our engineering assessment indicates Bread wallets created with biometrics are protected against this attack.
Wallets created with a passcode may be at risk if a malicious app was sideloaded onto your iPhone, even if you added biometric lock later.
If you're unsure, feel free to DM us.
The most uncomfortable question I asked at @EFDevcon, would you post your bank statement on X?
Almost everyone said no, with a wallet in their pocket that already shows it to the world.
@0xMiden, lets you keep it to yourself👇
An update on this iOS vulnerability.
Our engineering assessment indicates Bread wallets created with biometrics are protected against this attack.
Wallets created with a passcode may be at risk if a malicious app was sideloaded onto your iPhone, even if you added biometric lock later.
If you're unsure, feel free to DM us.
A vulnerability (worse_query) affecting iOS 26.7.1, 27.0.1, and 27.2 allows malicious apps to read local files from other apps, putting seed phrases, private keys, and login credentials at risk across the entire ecosystem. This is an iOS-level issue, not unique to Binance.
Immediate Action Required:
- Delete any apps installed from untrusted sources (such as sideloaded or manually signed IPAs).
- Update iOS and all apps to the latest official versions.
- If you suspect a breach, transfer funds to a new wallet created on a clean device and reset all active login sessions.
Never install unauthorized packages, and keep your software up to date.
A little maintenance in the kitchen 🍞🔧
Mainnet maintenance is starting now, so you may experience interruptions while using Bread over the next ~2 hours.
Thanks for bearing with us while we get things fresh out of the oven.
@VitalikButerin@katiabanina a billion+ people who pay each other on their phones all day. the case for private-by-default payments basically writes itself 🍞