Apple and Google released major security updates on November 9 and 10, 2026, addressing vulnerabilities that have put cryptocurrency wallet users at heightened risk. The patches landed during a year in which exploit kits and wallet drainers have repeatedly targeted devices used for storing and trading digital assets.
Google Chrome zero-day fix: Google shipped nine security fixes for Chrome on Windows, Mac and Linux. One of the flaws, CVE-2026-125350, was already being exploited in the wild. Google acknowledged the active exploit in a November 6 response to an anonymous report and urged Chrome users to restart their browsers as the update rolls out over the coming days and weeks.
Apple iOS and iPadOS update: Apple released iOS 27.2.1 for iPhone 11 and later, alongside iPadOS 27.2.1, on November 9. The update fixes flaws in Messages, Bluetooth and App Intents. One vulnerability, CVE-2026-113961, could allow an attacker to remotely join and read iMessage group chats, while another App Intents flaw, CVE-2026-113963, could expose sensitive user information. Apple said it does not disclose flaw details until a fix is shipped, and none of the Apple flaws were described as exploited in the wild.
Crypto wallet attacks: Security researchers have tracked the DarkSword exploit chain stealing information from cryptocurrency wallet apps and other personal data since at least November 2025. Google's Threat Intelligence Group disclosed the flaw in March, and it later spread to iPhones running iOS 18.4 through 18.7 using six vulnerabilities. A Censys report found servers pairing DarkSword and Coruna to steal data and recovery phrases from wallet apps including Coinbase, MetaMask, OKEx, Phantom and Trust Wallet. The iOS 26.3 update later plugged the hole used by DarkSword attackers.
Binance warning on "worse_query": Binance separately warned iPhone users about a security vulnerability called "worse_query" affecting iOS versions 26.7.1, 27.0.1 and 27.2. The flaw could allow malicious applications to access local files belonging to other applications, potentially exposing cryptocurrency wallet recovery phrases, private keys and login credentials stored without protection. Binance stressed that the issue was tied to iOS security mechanisms rather than its own platform, and said it had not verified any cases of wallets being accessed or funds stolen through this specific vulnerability. The exchange advised users to remove applications from untrusted sources, especially sideloaded or manually signed IPA files, update iOS and all applications to the latest official versions, and use clean devices when creating new wallets if a breach is suspected.
Other recent incidents underline the risk: the FomoPeek iOS app was implicated in roughly $580,000 in crypto theft, and a Trust Wallet supply chain incident in December 2025 led to losses exceeding $6 million. Trust Wallet has advised iPhone owners to install the latest iOS, enable Lockdown Mode if updating is not possible, and avoid storing recovery phrases as photos or in notes apps.
