CZ Warns iPhone Users Over DarkSword Exploit Staling Crypto
Key Summary
Binance co-founder Changpeng Zhao directed iPhone users via social media channels on November 6 to update their operating systems immediately. The directive followed threat intelligence reports indicating that the DarkSword exploit kit had already drained $5.57M from digital asset holders through compromised web domains. Security researchers noted that the attack vector targets vulnerabilities without requiring transaction signatures or wallet connection approvals, putting self-custody assets at direct risk.
Key Bullets
- Binance co-founder Changpeng Zhao urged iPhone users via a November 6 post on X to install the latest iOS updates immediately.
- Threat intelligence tracking by researcher Officer's Notes revealed that $5.57M in digital assets had already been drained through the exploit vector.
- Investigators discovered that the DarkSword exploit kit was being offered online for $30,000 across eighteen malicious web domains.
- Security alerts noted that compromised websites can harvest wallet files and recovery phrases without requiring explicit transaction approvals.
DarkSword Exploit Drains $5.57M From Holders
Binance co-founder Changpeng Zhao urged iPhone users Wednesday to install the latest operating system patches after threat researchers uncovered a malicious campaign dubbed DarkSword. According to public intelligence shared by researcher Officer's Notes, the exploit chain has already drained $5.57M from digital asset holders across more than 18 compromised web domains. The malicious code targets iOS vulnerabilities through standard Safari browser visits without requiring the victim to connect a wallet or sign a transaction.
Zhao emphasized the limits of application-layer protections in a public statement posted to X. No wallet software can update your device operating system. Self-custody demands personal operational security. Researchers noted that the DarkSword exploit kit was being marketed online for $30,000, with developers maintaining infrastructure compatibility placeholders for upcoming firmware iterations.
Apple Firmware Patches Counter Active Threats
Apple has patched the six distinct vulnerabilities utilized within the known DarkSword exploit chain. Security investigators confirmed that parts of the legacy exploit code remain active and adaptable against unpatched devices, with specialized routines targeting specific applications like the imToken wallet. Previous mobile compromises, including a CoreGraphics rendering engine flaw patched in iOS 26.7. 1 and malicious code found inside the FomoPeek application by SlowMist and OKX security, underscore ongoing risks for mobile crypto storage.
Traders taking self-custody seriously must audit their device firmware immediately. The vulnerability requires zero user interaction beyond loading a hostile web address. Security audits confirmed that recovery phrases stored locally on vulnerable hardware remain prime targets for automated web scrapers deployed by attackers.
About CryptoNewsFree Market Intelligence Wire
The CryptoNewsFree Market Intelligence Wire provides rapid, objective coverage of breaking crypto developments, regulatory actions, and market liquidity trends. Our reporting strictly follows our Editorial & Verification Standards.