SlowMist Chief Information Security Officer: iOS Sandbox Escape Vulnerability May Threaten Wallet Data

on November 10, SlowMist Chief Information Security Officer 23pds warned that the iOS vulnerability worse_query is a container sandbox escape rather than a jailbreak, and could potentially compromise data isolation between applications.

He noted that the vulnerability itself cannot automatically steal assets, but once users install and run untrusted IPAs, malicious applications may access the containers of other applications. If wallets store mnemonic phrases, keystores, or WebView caches in plaintext locally, the relevant data risks being read. He advises users to upgrade their systems to the latest version and avoid installing applications from unknown sources.