Security researchers discovered that FomoPeek versions 1.1–1.2, distributed through Apple's App Store, contained an iOS kernel-exploit framework capable of escaping the sandbox, decrypting Keychain data, and stealing cryptocurrency private keys and seed phrases. Nearly $580,000 in USDT was traced to a primary attack address, highlighting the vulnerability of storing complete cryptographic authority on a single compromised device.
A major iOS security incident involving the FomoPeek app exposed cryptocurrency wallet private keys through malicious code identified by SlowMist and OKX researchers. The app versions 1.1 and 1.2 contained an iOS kernel exploitation framework capable of escaping sandbox protections and accessing Keychain data, leading to multiple reported crypto thefts. Binance Wallet advised affected users to immediately delete the app, update iOS, and transfer assets to new wallets.
SlowMist and OKX security teams discovered that FomoPeek App versions 1.1–1.2 contain malicious code including an iOS kernel exploitation framework capable of escaping sandboxes and accessing private keys and sensitive data. The affected iOS versions range from 12.0–18.7 and 26.0–26.1, with users advised to check accounts, create new wallets, and stop using the app immediately.