Connect with us

Crypto World

iPhone Crypto Wallets Under Attack from State-Grade Malware

Published

on

👉🏻

The era of assumed iPhone invincibility is over for mobile crypto traders. A sophisticated new threat, the ‘Coruna exploit kit’, is actively leveraging 23 disparate iOS vulnerabilities to bypass Apple’s top-notch security and drain crypto wallets.

According to a new Google TAG report, the kit does not just crash apps or serve ads. It silently scans for BIP39 seed phrase theft, extracts QR codes, and siphons private keys from unpatched devices. The funds are gone before the user realizes the browser has been compromised.

That matters. For years, advanced exploit chains were the exclusive domain of nation-state intelligence agencies. Coruna marks a terrifying regime change: state-grade surveillance tools have been repackaged for mass-market retail theft.

Advertisement

This iPhone crypto wallet warning comes as Chainalysis reported in 2025 that the crypto theft market is valued at over $75Bn, with wallet drainers accounting for a large amount of that figure.

(SOURCE: CoinGecko)

How Coruna Exploits 23 iOS Vulnerabilities to Drain Crypto Wallets

The Coruna exploit kit is a highly efficient “1-click” attack that activates when a user visits a compromised site, often posing as a gambling or news platform.

It targets vulnerabilities in WebKit to breach the device, then uses local privilege escalation exploits to escape the browser’s sandbox.

Analyzing iOS versions 13.0 to 17.2.1, Coruna employs multiple entry points to deliver a crypto wallets drainer designed to steal blockchain assets.

Advertisement

It scans the file system for cryptocurrency-related strings, checks the photo library for QR codes, and extracts mnemonic phrases from the Notes app.

This automated exploitation can result in immediate and irreversible theft of assets, and any iPhone user who uses their device for crypto trading and asset storing needs to stay vigilant.

DISCOVER: Next Crypto to Explode in 2026

State-Grade Malware Goes Mass Market

Advertisement

Previously, exploit chains of this complexity were hoarded by entities like NSO Group for targeted surveillance of high-value targets—dissidents, journalists, or diplomats.

Coruna flips the script. It takes vulnerabilities weaponized in campaigns like Operation Triangulation, a suspected state-sponsored attack, and hands them to financially motivated criminal groups.

The barrier to entry for executing a sophisticated MetaMask hack or draining a Trust Wallet has collapsed, and even the most inexperienced tech heads can now carry it out.

This follows a disturbing pattern whereby tools developed for espionage inevitably leak into the broader cybercriminal ecosystem. The attackers behind Coruna are not looking for state secrets. They are looking for liquidity.

Advertisement

This is industrial-scale theft. The iVerify security firm documented the exploit affecting at least 42,000 devices, with total losses not yet announced.

Who Is Being Targeted and Why Mobile Crypto Traders Are Especially Exposed

If you trade on mobile and hold self-custody wallets, you are the target profile. The attack vectors are often embedded in sites that crypto users frequent: unregulated gambling interfaces, dubious token claim pages, and third-party app stores.

Advertisement

The malware explicitly targets data directories associated with major non-custodial wallets. It looks for the encrypted vaults of MetaMask, BitKeep (now Bitget Wallet), and Trust Wallet. If the encryption is weak, or if the user has stored the password in a compromised keychain or note, the wallet is drained.

The risk is compounded by user behavior. Mobile traders frequently interact with DApps and sign transactions on the go, often prioritizing speed over security hygiene.

Coruna exploits this complacency. It doesn’t need to trick you into signing a bad transaction; it simply steals the keys to the castle while you browse.

For now, proceed with caution and consider moving your crypto funds to cold wallet storage, such as a Ledger or Trezor.

Advertisement

EXPLORE: Best Crypto Presales to Buy in 2026

The post iPhone Crypto Wallets Under Attack from State-Grade Malware appeared first on Cryptonews.

Source link

Advertisement
Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Crypto World

XRP Funding Rates on Binance Turn Deeply Negative, Buy Signal?

Published

on

What This Means for Traders


Analysts say past periods of deeply negative funding rates on Binance have often been followed by corrective rallies.

XRP funding rates on Binance turned negative this week, hitting levels that have historically preceded short-term price rebounds.

The setup suggests crowded short positioning may have created conditions for a corrective rally, though analysts caution this does not guarantee a lasting trend reversal without a broader market catalyst.

Advertisement

Derivatives Data Flashes Contrarian Signal

Data from Binance shows XRP funding rates entered a phase of extreme negativity, while the asset ranged between $1.35 and $1.50, according to CryptoQuant analyst Darkfost. This comes after the Ripple token experienced a 60% correction from its July 2025 all-time high of $3.65, with most derivatives traders positioning on the short side despite the sustained drop.

Historical data suggests that short-term rebounds or corrective rallies in XRP often follow periods of extreme negative funding rates on Binance. The analyst emphasized that such configurations act as contrarian indicators, suggesting bearish positioning may have become overcrowded relative to actual price action.

“When market consensus becomes excessively aligned in one direction, history shows that markets tend to surprise the majority,” Darkfost wrote.

Even though the configuration does not ensure long-term trend reversals, the on-chain observer pointed out that it was a favorable indicator for investors trying to find appealing entry points or looking to progressively increase their exposure to XRP.

Exchange Outflows Suggest Supply Tightening

On the technical side, analyst EGRAG CRYPTO yesterday identified $1.55 as the first critical trigger level for XRP, with a weekly close above this point weakening the current downward trajectory.

Advertisement

A more decisive breakout above $2.20 would invalidate the bearish descending channel structure that has defined the asset’s price action for months and open the path toward $2.70 to $3.60. At present, XRP is trading around $1.44, up about 3% in 24 hours but down nearly 10% over the past month and more than 60% below its all-time high.

You may also like:

Adding to the dynamics, exchange outflow data shows a significant increase in XRP withdrawals during February, with total outflows reaching approximately 7.03 billion XRP, the highest level since November 2025.

Binance led the withdrawal volume with outflows of 3.38 billion XRP, indicating a shift in assets from trading environments to private wallets or long-term storage. When withdrawals increase in this manner, it often indicates that a portion of the available supply is being removed from the spot market, potentially reducing liquidity on trading platforms.

With that in mind, traders will likely be focused on whether the combination of negative funding rates and large exchange withdrawals will translate into buying pressure. As Darkfost put it,

Advertisement

“In such uncertain conditions, it becomes essential to carefully select positions, relying on market signals that are beginning to emerge.”

SPECIAL OFFER (Exclusive)

Binance Free $600 (CryptoPotato Exclusive): Use this link to register a new account and receive $600 exclusive welcome offer on Binance (full details).

LIMITED OFFER for CryptoPotato readers at Bybit: Use this link to register and open a $500 FREE position on any coin!

Source link

Advertisement
Continue Reading

Crypto World

KuCoin launches KCS PulseDrop to turn trading and payments into rewards

Published

on

KuCoin launches KCS PulseDrop, turning trading, staking, and payments into rewards to expand the utility of its native token.
KuCoin launches KCS PulseDrop, turning trading, staking, and payments into rewards to expand the utility of its native token.
  • KuCoin launches KCS PulseDrop to expand the utility of its native token.
  • Users earn points from trading, staking, and payments on the platform.
  • Initiative aims to embed KCS deeper into KuCoin’s ecosystem utility.

Global crypto exchange KuCoin has launched a new rewards initiative called KCS PulseDrop, marking a strategic step toward expanding the utility of its native token, KuCoin Token (KCS).

The program connects everyday user activity, from trading to payments with a transparent points and rewards system, effectively turning KCS into a more active, multi-dimensional part of the KuCoin ecosystem.

The exchange said PulseDrop is designed to shift KCS “from a passive holding asset” into an engagement-based tool that bridges trading, staking, and real-world cryptocurrency use.

Participating users earn points through actions like futures or spot trading, staking KCS, or making payments with KuCard, P2P, or KuCoin Pay.

Points accumulate over time and determine each user’s share of reward distributions.

Advertisement

In essence, PulseDrop transforms interaction into measurable participation.

KuCoin described the framework as a “participation economy,” one that rewards sustained activity rather than short-term speculation, an idea gaining traction among digital asset platforms seeking to retain users and build long-term loyalty.

By aligning engagement with tangible outcomes, the company hopes to position KCS as a functional utility token underpinning a wider user ecosystem, rather than merely a token conferring fee discounts or passive yield.

Expanding KCS beyond exchange use

The PulseDrop system introduces tiered point mechanics and multipliers that let users accelerate accrual through specific behaviors, such as trading particular project tokens or KCS itself.

Advertisement

Transactions made through fiat and payments channels also contribute to a “Payment Task” score, rewarding real-world crypto usage, a move that ties KuCoin’s growing payments infrastructure more tightly to its core token.

The exchange said the design is meant to balance simplicity and transparency while giving users early exposure to promising projects listed on its platform.

KuCoin positions PulseDrop as both a community engagement tool and a means of democratizing access to project rewards by basing allocations on participation rather than holding size alone.

Analysts view the initiative as part of a wider industry shift, where exchanges seek to extend the relevance of their native tokens beyond transactional perks.

Advertisement

As competition among global exchanges intensifies, platforms like KuCoin, Binance, and OKX are experimenting with loyalty or activity frameworks that embed token value deeper into users’ daily interactions.

KuCoin, which serves over 40 million users across 200 countries, has been steadily expanding its regulated footprint under CEO BC Wong, with recent licensing milestones in Austria (under MiCA) and Australia.

The exchange, recognized by Forbes and Hurun for its innovation and security standards, maintains SOC 2 Type II and ISO 27001:2022 certifications.

By knitting together engagement, rewards, and payments, KCS PulseDrop reflects KuCoin’s broader ambition to create an integrated and participatory digital-asset ecosystem, where token holders play an active, sustained role in shaping its growth trajectory.

Advertisement

The PulseDrop platform is now live on KuCoin’s official website: www.kucoin.com/pulsedrop.

Source link

Advertisement
Continue Reading

Crypto World

FBI Arrests Custody Company CEO‘s Son over Alleged $46M Crypto Theft

Published

on

FBI, Cryptocurrencies, United States, Crimes

The US Federal Bureau of Investigation (FBI) announced that it had made an arrest related to the theft of more than $46 million in cryptocurrency from the US Marshals Service.

In a Thursday X post, FBI Director Kash Patel said that the bureau had arrested John Daghita, the son of Command Services & Support (CMDSS) president Dean Daghita, after he allegedly gained unauthorized access to wallets managed under the federal asset protection program. Patel said the arrest was carried out by the “French Gendarmerie’s premier elite tactical unit” with the FBI on the island of Saint Martin in the Caribbean.

FBI, Cryptocurrencies, United States, Crimes
Source: Kash Patel

Patel’s social media post with a photo of a handcuffed Daghita, also included a photo of a suitcase containing cash, several thumb drives, a phone and three devices resembling Trezor hardware wallets. The FBI director did not disclose whether any of the stolen funds had been recovered.

The alleged crypto theft was reported in January by online sleuth ZachXBT, who said that he had traced a wallet linked to Daghita holding about $23 million in digital assets connected to $90 million reportedly seized by the US government in 2024 and 2025. Daghita’s father heads CMDSS, which was awarded a contract by the US Marshals Service in 2024 related to the custody of the seized crypto.

Related: Wallet linked to alleged US seizure theft launches memecoin, crashes 97%

Advertisement

The US Marshals Service confirmed that it was investigating the matter at the time. Patrick Witt, the director of the White House Crypto Council, said in a Jan. 26 X post that he was “on it,” referencing ZachXBT’s claims. Witt had not publicly commented on the arrest as of Thursday.

According to data from BitcoinTreasuries.NET, US authorities, including the Marshals Service, may hold as much as 328,372 Bitcoin (BTC) through various seizures.

South Korean authorities make two arrests related to seized crypto

Daghita’s arrest is the latest example of global law enforcement efforts to recover previously seized assets.

In February, police in South Korea arrested two people allegedly connected to a case in which authorities lost access to 22 BTC, worth about $1.6 million at the time of publication.

Advertisement

The crypto was reportedly stolen after police seized the assets from a hack on a South Korean exchange in 2021, storing them on a cold wallet owned by a third party.

Earlier this week, Deputy Prime Minister and Minister of Strategy and Finance Koo Yun-cheol said the government and relevant agencies will “conduct an inspection of the current status and management practices of digital assets held and managed by the government and public institutions,” according to local media reports.

Magazine: Bitcoin may face hard fork over any attempt to freeze Satoshi’s coins

Advertisement