FomoPeek, an iPhone app marketed for tracking whale wallets across Solana, Ethereum and TRON, contained hidden malicious modules that could escape Apple's application sandbox and extract cryptocurrency credentials, blockchain security firm SlowMist said in a September 19 alert. One module included an iOS kernel exploitation framework with eight attack methods covering iOS 12.0 through 18.7 and iOS 26.0 through 26.1. SlowMist and OKX's security team linked versions 1.1 and 1.2 to reported crypto thefts. The code could decrypt Keychain information, access data from other apps and transmit sensitive material including private keys, recovery phrases, login credentials and chat records. Binance Wallet advised users to remove the app, update iOS and create new wallet credentials on a clean device before moving remaining funds. SlowMist has not disclosed the total stolen or the number of affected devices.