According to the latest threat intelligence published by multiple security organizations, certain older versions of Apple’s iOS contain high-risk vulnerabilities that enable privilege escalation and sandbox escapes. These vulnerabilities affect the underlying iOS operating system and are not vulnerabilities in the Bitpie app itself.

These system vulnerabilities may allow attackers to bypass iOS sandbox restrictions and access sensitive files stored on the device. As a result, all wallet apps, notes, and the system Keychain on devices running affected iOS versions are potentially exposed to the same risks.

To help protect your assets, the Bitpie team has compiled the following information on affected versions and recommended actions.

1. Affected iOS Versions

According to security intelligence from SlowMist, exploit chains targeting these underlying vulnerabilities, such as DarkSword, primarily affect the following versions:

* Primary affected versions: iOS 18.6 through iOS 18.7.2

* Other affected versions: iOS 13.0 through iOS 17.2.1, and iOS 26.0 through iOS 26.1

Note: Other older versions may also contain vulnerabilities that could be exploited in the future.

2. Recommended Actions and Update Guidance

Apple has addressed the relevant kernel vulnerabilities in subsequent system updates.

Update iOS immediately: Go to Settings → General → Software Update and update your device to the latest official stable release of iOS. Before updating, verify that your wallet recovery phrase is correct.

Take temporary precautions: Until you have completed the update, avoid opening untrusted web links or downloading apps from unofficial sources.

Keep your system up to date: Regularly check Apple’s official security announcements and software update notifications, and promptly install the latest security updates to help protect against potential system-level vulnerabilities.

If you visited suspicious websites or installed high-risk apps while your device was running an affected iOS version, we recommend creating a new wallet on a device you have confirmed is secure and transferring your assets to it. Discontinue use of the old recovery phrase immediately.

Bitpie Team

2026-11-06