SlowMist CISO: iOS Sandbox Escape Vulnerability May Threaten Wallet Data

According to 深潮 TechFlow, on November 10, SlowMist Chief Information Security Officer 23pds warned in a post that the iOS vulnerability worse_query is a container sandbox escape, not a jailbreak, and may break data isolation between apps.

He said the vulnerability itself will not automatically steal assets, but after users install and run an IPA file from an unknown source, a malicious app may read other apps' containers; if a wallet stores mnemonic phrases, keystores, or WebView cache in plaintext locally, the related data may be at risk of being read. He recommended that users upgrade their system to the latest version and avoid installing apps from unknown sources.

Source: 深潮 TechFlow