Binance founder's warning follows a CertiK report linking the exploit to $5.57 million in losses across 20 wallets.
Changpeng Zhao, widely known in the industry as CZ, has called on iPhone users to update their iOS software without delay. His warning comes amid reports of an exploit dubbed DarkSword that security researchers say has targeted crypto holders through Apple's mobile operating system.
Blockchain security firm CertiK issued an alert describing DarkSword as a threat capable of putting crypto wallets at risk on affected iPhones. According to CertiK, the exploit has already been connected to losses totaling approximately $5.57 million. Researchers say those losses span 20 separate wallets.
Details on exactly how DarkSword compromises devices have not been fully disclosed. What is clear is that the exploit appears to target iOS specifically, raising concerns for the large population of crypto users who rely on iPhones to access wallets, exchanges, and decentralized applications.
CZ's intervention adds weight to the warning. As one of the most recognized figures in cryptocurrency, his public statements tend to reach a wide audience quickly. His call to update iOS reflects a straightforward but often overlooked security practice: keeping device software current to patch known vulnerabilities.
Mobile devices have become a frequent target for attackers seeking access to crypto holdings. Phones often store authentication credentials, private keys, or seed phrases through wallet apps and password managers. A single exploit that bypasses iOS protections could expose that stored information to malicious actors.
CertiK has built a reputation for auditing smart contracts and tracking exploits across the crypto industry. Its warning about DarkSword follows a pattern of similar alerts the firm has issued when it identifies threats capable of draining user funds. The firm's involvement lends technical credibility to concerns that iPhone users should take seriously.
The reported scale of losses, $5.57 million across 20 wallets, suggests the exploit has already caused real financial harm rather than remaining a theoretical risk. That figure, while limited compared to some larger industry hacks, still represents a meaningful threat to the individuals affected.
Apple regularly issues iOS updates that address security flaws, some of which are not publicly detailed until after patches are released. Users who delay updates can remain exposed to vulnerabilities that have already been fixed for those running current software. Security experts routinely recommend enabling automatic updates for this reason.
The crypto industry has faced a steady stream of exploits targeting wallets, exchanges, and now potentially device-level software. Each new case underscores how attackers continue to look for weaknesses outside of blockchain protocols themselves, focusing instead on the hardware and software users rely on daily.
Market Impact
News of the DarkSword exploit is unlikely to move broader crypto markets on its own, since the reported losses remain small relative to total industry trading volumes. However, warnings from figures like CZ and firms like CertiK can influence user behavior, prompting a wave of software updates and heightened scrutiny of wallet security practices.
Such incidents also reinforce ongoing industry conversations about custody and device-level risk. Exchanges, wallet providers, and security firms may face renewed pressure to educate users and strengthen integrations that reduce exposure to compromised devices.
The DarkSword warning serves as a reminder that crypto security extends beyond blockchain code to the devices people use every day. Updating iOS promptly remains a basic but important step for wallet holders.
Frequently Asked Questions
What is DarkSword?
DarkSword is an exploit identified by security firm CertiK that targets iPhones and has been linked to losses from crypto wallets.
Why did CZ urge iPhone users to update iOS?
CZ issued the warning after reports tied the DarkSword exploit to compromised crypto wallets, recommending software updates as a protective measure.
How much has been lost to the DarkSword exploit so far?
CertiK reported losses of approximately $5.57 million across 20 affected wallets.
Does updating iOS guarantee protection from this exploit?
Updates patch known vulnerabilities, but no update can guarantee complete protection against all threats. Users should also review wallet security practices more broadly.
