KuCoin warns some iOS versions may expose wallet data

Crypto exchange KuCoin (KCS) warned, citing a public security report related to worse_query, that malicious apps on iOS 26.7.1, 27.0.1 and 27.2 may be able to access files stored by other apps, potentially exposing wallet recovery phrases, private keys and account credentials. KuCoin said the issue is an iOS-level security problem and not a vulnerability specific to KuCoin. The exchange advised users to delete unverified apps installed through sideloading or manual signing, check for Apple’s official security updates, and update apps only through official channels. It also urged users to avoid installing IPA files distributed through messengers, social media or unverified websites, and to avoid sharing recovery phrases or private keys. If sensitive wallet information was stored on a potentially compromised device, KuCoin advised treating the related credentials as exposed, creating a new wallet on a separate trusted device, moving assets, changing account passwords and logging out of existing sessions.