iOS security is at the center of Binance founder Changpeng Zhao’s urgent warning to crypto holders: update your iPhones now. A wallet can secure crypto, but it cannot secure the operating system. Self-custody, he said, is a duty, and that duty includes keeping the device safe.
The warning came as DarkSword returned to haunt researchers and steal from crypto wallets. It is not a problem with a wallet, or a bug in any wallet in particular. It is a bug in what lies underneath it. When an OS is compromised, the protections afforded by wallet software can be circumvented.
Table of Contents
What Happened and Why CZ Urged Everyone to Update
DarkSword was released in March by Google Threat Intelligence Group, Lookout, and iVerify. The researchers detailed six iOS security vulnerabilities capable of evading the Safari sandbox and breaking out to gain greater privileges. The attack would start when a victim opened a malicious web page in Safari, while no wallet connection or transaction signature was required.
Source: Reuters
Once break out, the attack would reveal passwords, files and, in some cases, private keys or recovery phrases, as the report shows the stakes for iOS security. The report linked to the exploit indicated that $5.57 million was lost from more than 20 wallets and at least 18 malicious websites were identified.
CZ called for iOS users, mainly those not on patched versions, to update their systems to restore iOS security. No wallet application can update your OS for you, he said. In self custody there is no help desk to walk you back the transaction or un-lose your seed phrase.
Also Read: CZ Backs BNB Chain’s New L1 Plan With Single BNB Token
Why iOS Security Matters for Crypto
Crypto security is conventionally discussed in smart contracts, exchanges, bridges, and private keys. Not so much device security, even though most retail users connect to crypto via a mobile device. A mobile wallet is only as secure as its underlying OS, browser and hardware. For years, iOS security has been considered hardened because Apple controls the hardware, software, and app store. That reputation can breed complacency.
Source: REPART
Users may forgo updates, or hang onto their device for browsing, messaging, and banking as well as crypto. DarkSword turns that assumption on its head. One infected webpage is enough of an ingress point if the known vulnerabilities are present.
The liability isn’t just on one wallet provider. Researchers identified the exploit on devices using iOS versions 18.4 to 18.7, while news reports pointed out potential targets like Trust Wallet, MetaMask, Phantom, Coinbase, and Exodus. Users who change wallets don’t fix the unpatched operating system, because the real failure is in iOS security. The exploit is beneath the app layer.
Source: NFT Insider
Also Read: Dogecoin Price Holds $0.08 as CZ Binance Highlights DOGE’s Success
Update, Secure, and Protect
Apple has since patched the DarkSword exploits. Updates were released via iOS 18.6, 18.7.2, and 18.7.3, with iOS 26.1 and 26.3, which includes all six corrected flaws as of 26.3. Simple enough: Update by navigating to Settings General Software Update, and shun links from unfamiliar accounts.
Source: Malwarebytes
What users should also do is reconsider where they store their recovery phrases. Seed phrases should not be in Notes Photos screenshots, cloud backups, or messaging apps: an attacker with access to the device could get everything stored there in plain text. If the user has large holdings, a hardware wallet or Apple’s Lockdown Mode (Off) can close some of that attack surface.
If users believe the device is compromised, they can create a fresh wallet on a clean device, transfer the funds, and discard the old seed phrase. Generating new addresses from the same old compromised seed phrase will not suffice, since the master key is already compromised. In self-custody, updating iOS is not just about good device maintenance, but about good crypto hygiene.
Also Read: CZ-Hyperliquid Finally Welcomes HYPE After 664-Day Debut
Ananthyka J is a market reporter at Tronweekly, reporting on cryptocurrency news. She covers cryptocurrency markets, blockchain technology, and digital asset regulation, focusing on Bitcoin, Ethereum, DeFi, altcoins, and crypto policy. Her reporting emphasizes clear and accurate market coverage, including crypto market movements, regulatory developments, and blockchain adoption. She holds a BA in Journalism and Mass Communication and an MA in Communication and Media Studies. She has also completed multiple media internships, follows strict editorial and fact-checking standards, and discloses potential conflicts of interest when reporting.
