Crypto wallet users on iOS 18 devices have lost $5.57 million through attackers’ reported exploitation of the DarkSword vulnerability, according to a representative of the law firm Legalblock cited alongside a Nov. 4, 2026, X post. The representative said attackers are using infected adult websites to access smartphone data, putting passwords, messages, photos and crypto wallet files, including private keys, at risk.

How the reported attack works

According to the representative, a user only needs to open a malicious page in Safari for malicious code to run on the device. The attack does not require the user to connect a wallet or confirm a transaction.

The Legalblock representative urged users to update iOS to the latest version as soon as possible. He also recommended that users not store photos of seed phrases in their smartphone galleries or write seed phrases in the Notes app.

An X user with the handle Mayowa also said DarkSword allows attackers to compromise devices through a regular Safari link without requiring users to connect a crypto wallet, sign transactions or complete additional confirmations.

Mayowa further stated that more than 20 crypto wallets are at risk, although the post did not identify the wallets.

CZ urges operating-system updates

The warning drew a response from Binance co-founder Changpeng Zhao, known as CZ. He advised users to update their operating systems, particularly if they had not done so for a long time.

“No wallet software updates your operating system. Self-custody means personal responsibility,” wrote Zhao.

Losses from hacker attacks in October reached $6.48 billion.

Source: Incrypted