TREE NEWS update: SlowMist Chief Information Security Officer 23pds said black and gray-market actors have built a full attack chain against iOS users that extracts private keys and seed phrases. The chain uses WebKit/JSC memory corruption for JavaScript-level read-write access, bypasses PAC for native calls, escapes the WebContent sandbox and escalates kernel privileges to root, then exfiltrates Keychain and wallet data. Affected versions are iOS 13 through 26.5, and iOS users are urged to upgrade promptly.
SlowMist Warns iOS 13–26.5 Users of Attack Chain Targeting Crypto Wallets
AI take
The notable point is not a single bug but a documented end-to-end chain: JavaScript-level access escalating through PAC bypass, sandbox escape and kernel root to reach Keychain, which is where wallet secrets actually live on iOS. That shifts the threat model from malicious apps to web content, meaning wallet security now depends on the browser and OS patch level as much as on the wallet itself. The breadth of affected versions is what makes this operationally awkward, since many devices sit on older builds. Whether such chains stay targeted or spread to opportunistic campaigns is the open question.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.
Related News
45m ago
Chinese Chip Firms Including MetaX, CXMT Take LP Roles in VC Funds
4h ago
Binance to Resume Withdrawals for More Assets From 04:00 UTC Nov 5
5h ago
Hang Seng Tech Index Rises Over 5%, Iluvatar CoreX Jumps 10%, NetEase and Meituan Up 8%
5h ago
India Warns AI-Assisted Hackers Targeting Crypto Exchanges
6h ago
Pendle Volume Hits $221.5 Million, a 30-Day High
7h ago
Two Prime CEO Calls Babylon, Stacks Bitcoin Yields ‘VC-Funded Subsidies’