Key insights
- Binance warns iPhone users that an iOS flaw could expose seed phrases, private keys, and login details.
- Binance blocks transfers involving MEXC, MEXC Global, and their related entities following a FinCEN designation.
- Users face account reviews and possible temporary restrictions over direct or indirect MEXC transactions.
Binance announced restrictions on MEXC-linked cryptocurrency transfers on Nov. 10, 2026, following a U.S. financial-crime designation. The exchange separately warned iPhone users about a software flaw that could expose sensitive wallet files. The two notices concern different risks and require different responses from customers.
Binance’s notice to MEXC followed a Nov. 6 order from the Financial Crimes Enforcement Network (FinCEN). The agency alleged that MEXC Global facilitated at least $16 billion in illicit transactions over five years. Binance’s policy addresses transfers involving named businesses, while its iOS alert concerns device security.
Binance Warns iPhone Users About File Access Flaw
Binance has warned users about a vulnerability affecting iOS versions 26.7.1, 27.0.1 and 27.2. The exchange said the flaw, identified as "worse_query," could allow malicious apps to read local files belonging to other apps.
The files at risk include seed phrases, private keys, and login credentials. These details can give access to crypto wallets and online accounts. The warning therefore extends beyond Binance customers because the issue sits within Apple’s mobile operating system.
Binance stressed that the vulnerability is not unique to its platform. It described the problem as an iOS-level issue affecting the wider ecosystem. However, the exchange did not state how many devices were affected or confirm that attackers had used the flaw to steal funds.
The exchange urged users to remove apps installed from sources they do not trust. It specifically mentioned sideloaded apps and manually signed IPA files. Users should also update iOS and all apps to the latest official versions.
Anyone who suspects a breach should take further steps. Binance advised affected users to move funds to a new wallet created on a clean device. It also recommended resetting all active login sessions.
The warning matters to crypto holders because wallet recovery phrases and private keys control access to digital assets. A Crypto hack does not always begin with a weakness in an exchange. In this case, Binance pointed to a problem within the software used by millions of mobile app users.
Binance Restricts Transactions Involving MEXC
In a separate announcement, Binance introduced new compliance measures following the Financial Crimes Enforcement Network (FinCEN) ‘s designation of MEXC as a Primary Money Laundering Concern.
Binance said users must not send funds to, receive funds from, or engage in other transactions involving MEXC through the exchange. The restriction also covers MEXC Global, its affiliates and related entities.
The exchange confirmed that requests to send funds to MEXC addresses would be rejected. It added that direct or indirect transactions involving these entities would face further review.
Funds and accounts affected by such activity may be temporarily restricted while the review continues. Binance also warned that these transactions may breach its Terms of Use.
The notice did not provide a list of affected accounts or explain how long the reviews could take. It also did not announce when the restrictions might change.
Customers with questions were directed to Binance Support through official channels. The exchange did not say that all MEXC-related funds had been seized or that every account connected to MEXC would automatically face restrictions.
Users Face Two Different Security Concerns
The two announcements address different risks. The iOS warning asks users to check their devices, remove untrusted apps, and install official updates. The MEXC notice tells customers to avoid transfers involving the named businesses.
For crypto holders, the iOS warning is a reminder to protect wallet details outside exchange accounts. A Crypto hack could put digital assets at risk if malicious software gains access to sensitive files. However, Binance has not confirmed that the reported flaw caused any theft.
Customers who have used MEXC to move funds should pay attention to the new restrictions. Anyone unsure whether a planned transfer is covered should contact Binance Support before attempting it.
Users should also avoid relying on messages or links from unknown accounts when checking these notices. Official Binance channels remain the recommended source for further information.
Binance has not linked the two announcements or said they came from the same incident. One concerns a software weakness that may expose files stored on phones. The other follows a regulatory designation involving MEXC.
The exchange’s advice is to keep devices updated, avoid unofficial app packages, and stop transactions involving MEXC and related entities through Binance. Neither announcement confirms that Binance suffered a crypto exploit.
This article is for informational purposes only and does not constitute financial, legal, or cybersecurity advice. Readers should verify official security and regulatory notices before taking action.
