Connect with us

Crypto World

iPhone Crypto Wallets Under Attack from State-Grade Malware

Published

on

👉🏻

The era of assumed iPhone invincibility is over for mobile crypto traders. A sophisticated new threat, the ‘Coruna exploit kit’, is actively leveraging 23 disparate iOS vulnerabilities to bypass Apple’s top-notch security and drain crypto wallets.

According to a new Google TAG report, the kit does not just crash apps or serve ads. It silently scans for BIP39 seed phrase theft, extracts QR codes, and siphons private keys from unpatched devices. The funds are gone before the user realizes the browser has been compromised.

That matters. For years, advanced exploit chains were the exclusive domain of nation-state intelligence agencies. Coruna marks a terrifying regime change: state-grade surveillance tools have been repackaged for mass-market retail theft.

Advertisement

This iPhone crypto wallet warning comes as Chainalysis reported in 2025 that the crypto theft market is valued at over $75Bn, with wallet drainers accounting for a large amount of that figure.

(SOURCE: CoinGecko)

How Coruna Exploits 23 iOS Vulnerabilities to Drain Crypto Wallets

The Coruna exploit kit is a highly efficient “1-click” attack that activates when a user visits a compromised site, often posing as a gambling or news platform.

It targets vulnerabilities in WebKit to breach the device, then uses local privilege escalation exploits to escape the browser’s sandbox.

Analyzing iOS versions 13.0 to 17.2.1, Coruna employs multiple entry points to deliver a crypto wallets drainer designed to steal blockchain assets.

Advertisement

It scans the file system for cryptocurrency-related strings, checks the photo library for QR codes, and extracts mnemonic phrases from the Notes app.

This automated exploitation can result in immediate and irreversible theft of assets, and any iPhone user who uses their device for crypto trading and asset storing needs to stay vigilant.

DISCOVER: Next Crypto to Explode in 2026

State-Grade Malware Goes Mass Market

Advertisement

Previously, exploit chains of this complexity were hoarded by entities like NSO Group for targeted surveillance of high-value targets—dissidents, journalists, or diplomats.

Coruna flips the script. It takes vulnerabilities weaponized in campaigns like Operation Triangulation, a suspected state-sponsored attack, and hands them to financially motivated criminal groups.

The barrier to entry for executing a sophisticated MetaMask hack or draining a Trust Wallet has collapsed, and even the most inexperienced tech heads can now carry it out.

This follows a disturbing pattern whereby tools developed for espionage inevitably leak into the broader cybercriminal ecosystem. The attackers behind Coruna are not looking for state secrets. They are looking for liquidity.

Advertisement

This is industrial-scale theft. The iVerify security firm documented the exploit affecting at least 42,000 devices, with total losses not yet announced.

Who Is Being Targeted and Why Mobile Crypto Traders Are Especially Exposed

If you trade on mobile and hold self-custody wallets, you are the target profile. The attack vectors are often embedded in sites that crypto users frequent: unregulated gambling interfaces, dubious token claim pages, and third-party app stores.

Advertisement

The malware explicitly targets data directories associated with major non-custodial wallets. It looks for the encrypted vaults of MetaMask, BitKeep (now Bitget Wallet), and Trust Wallet. If the encryption is weak, or if the user has stored the password in a compromised keychain or note, the wallet is drained.

The risk is compounded by user behavior. Mobile traders frequently interact with DApps and sign transactions on the go, often prioritizing speed over security hygiene.

Coruna exploits this complacency. It doesn’t need to trick you into signing a bad transaction; it simply steals the keys to the castle while you browse.

For now, proceed with caution and consider moving your crypto funds to cold wallet storage, such as a Ledger or Trezor.

Advertisement

EXPLORE: Best Crypto Presales to Buy in 2026

The post iPhone Crypto Wallets Under Attack from State-Grade Malware appeared first on Cryptonews.

Source link

Advertisement
Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Crypto World

Short seller Culper Research says ether tokenomics is ‘impaired’

Published

on

Short seller Culper Research says ether tokenomics is 'impaired'

Short seller Culper Research is betting against ether (ETH) and ETH-linked stocks such as BitMine (BMNR), arguing that the network’s economics deteriorated following Ethereum’s latest network upgrade.

The firm said in a Thursday report that the December 2025 upgrade dubbed Fusaka flooded the network with excess blockspace and has “impaired ETH tokenomics.” That drove transaction fees sharply lower. Because validators earn part of their income from those fees, the drop has reduced staking yields.

That dynamic could create a negative feedback loop, the report said, where declining validator yields reduce staking demand and network security.

The report also highlighted that Ethereum co-founder Vitalik Buterin sold nearly 20,000 ETH, worth around $40 million at current prices, this year, citing data from blockchain sleuth Lookonchain.

Advertisement

“Vitalik is selling, while bulls like Tom Lee are clueless as to ETH’s new reality,” the report said. “We’re with Vitalik.”

The report pushes back on bullish claims from Lee, chairman of Ethereum-centric treasury firm BitMine, who has pointed to rising transaction counts and active addresses as evidence of stronger network fundamentals.

Culper said those metrics are misleading. Its analysis claimed a significant share of the activity surge stems from address poisoning attacks, a scam tactic where attackers send small transactions to trick users into copying malicious wallet addresses. Culper estimated Ethereum fees have dropped roughly 90% since the upgrade.

“By Lee’s own logic, if utility is NOT going up, then ETH is in a death spiral,” the report said. “This is exactly what we believe is happening.”

Advertisement

The short thesis also targeted BitMine (BMNR), one of the largest corporate buyers of ether.

Since July, the company has accumulated roughly 4.4 million ETH as part of its treasury strategy. With ether prices down significantly from recent highs, those holdings are estimated to be 45% underwater, with BitMine sitting on roughly $7.4 billion in unrealized losses, DropsTab data shows.

BitMine did not return a request for comment by press time.

Read more: Vitalik Buterin reveals his bold new plan to fix Ethereum’s scaling problem

Advertisement

Source link

Continue Reading

Crypto World

Three Reasons Why Pi Network (PI) Could Crash Again After Hitting a 3-Week High

Published

on

PI Token Unlocks


Meanwhile, some market observers believe PI could eventually explode above $1.

The cryptocurrency market continues its impressive recovery, with Pi Network’s PI stealing the show with an impressive 15% daily surge.

However, certain factors suggest that its price could soon turn downward again.

Advertisement

Time to Cool Off?

PI is the best-performing top-100 cryptocurrency today (March 5), with its valuation soaring to a three-week high of $0.20 (per CoinGecko data). Its market capitalization exceeded $1.9 billion, thus making it the 43rd-largest digital asset.

Perhaps the most likely catalyst fueling the rally is the broader revival of the cryptocurrency sector. Bitcoin (BTC) briefly rose to almost $74,000, Ethereum (ETH) neared $2,200, while well-known altcoins like Monero (XMR), Aster (ASTER), and Toncoin (TON) have jumped by 6-7% on a 24-hour scale.

PI’s pump also coincides with the latest updates announced by the Core Team. As CryptoPotato reported, the protocol v19.9 migration was successfully completed. The next version is v20.2, and it is expected to be released before Pi Day 2026 (March 14).

The upcoming token unlocks, though, indicate that PI may not be out of the woods yet. Data shows that a substantial amount of coins will be freed up in the coming days: a development that doesn’t guarantee a price decline but increases immediate selling pressure. March 7 is scheduled as the record day, when almost 21 million PI will be released.

Advertisement
PI Token UnlocksPI Token Unlocks
PI Token Unlocks, Source: piscan.io

The second bearish factor is the rising supply stored on exchanges, now sitting at roughly 365.5 million coins. Such a shift from self-custody toward centralized platforms is often interpreted as a pre-sale step.

You may also like:

PI Supply on Exchanges
PI Supply on Exchanges, Source: piscan.io

Last but not least, we will touch upon PI’s Relative Strength Index (RSI). The technical analysis tool measures the speed and magnitude of the latest price changes and is used by traders to identify trend reversals. It runs from 0 to 100, and ratios above 70 signal that the asset has entered overbought territory and could be on the verge of a pullback. As of press time, PI’s RSI stands at around 72.

PI RSIPI RSI
PI RSI, Source: RSI Hunter

How About Further Gains?

Some market observers expect PI’s rally to continue in the short term. X user ALTS GEMS Alert predicted that the price might soar above $0.30 should it hold the key level around $0.19.

“Momentum building… breakout could send it much higher,” they added.

Whale Hunter forecasted that PI will move “small by small,” starting at $0.20, then $0.40, and eventually exploding to $0.70 and beyond $1. “That’s how crypto works. Finally, you are X5 to X10 profit,” they suggested.

Meanwhile, there has been growing speculation that the leading crypto exchange Kraken might list Pi Network’s native cryptocurrency on Pi Day. Such a move would increase liquidity, improve availability, strengthen its reputation, and potentially support a positive price reaction.

SPECIAL OFFER (Exclusive)

Binance Free $600 (CryptoPotato Exclusive): Use this link to register a new account and receive $600 exclusive welcome offer on Binance (full details).

LIMITED OFFER for CryptoPotato readers at Bybit: Use this link to register and open a $500 FREE position on any coin!

Advertisement

Disclaimer: Information found on CryptoPotato is those of writers quoted. It does not represent the opinions of CryptoPotato on whether to buy, sell, or hold any investments. You are advised to conduct your own research before making any investment decisions. Use provided information at your own risk. See Disclaimer for more information.

Source link

Advertisement
Continue Reading

Crypto World

IRS Proposes Crypto Exchanges Shift to Mandatory Electronic Tax Documents

Published

on

IRS, Taxes

The US Internal Revenue Service (IRS) is seeking to require electronic delivery of tax forms to crypto exchange users.

Under the current rules, exchanges are required to provide paper copies of tax form 1099-DA, the IRS tax form used to document crypto transactions from a centralized exchange or broker, if users request paper forms.

The proposed new rules, slated to be published on Friday, remove this requirement and allow brokers to “terminate” their relationships with existing clients if they refuse electronic delivery of tax forms.

Additionally, the IRS proposal would also prohibit users from retroactively revoking consent for electronic forms.

Advertisement
IRS, Taxes
The IRS proposal would shift to mandated electronic tax forms. Source: Federal Register

The IRS requires all broker-dealers, platforms providing crypto services to users like exchanges, to report user proceeds from each transaction and to provide users with Form 1099-DA, detailing their transaction history for the tax season.

However, the exchanges are not required to track cost basis for the 2025 tax year; tracking cost basis, or the price paid for each investment purchase, is the investor’s responsibility. The IRS outlined the reporting requirements for brokers:

“Brokers required to make these returns must include identifying information of the customer, such as the customer’s name and tax identification number (TIN), and such other relevant information, including the gross proceeds from the transaction.” 

One in five Americans, or about 55 million individuals, hold digital assets in the US, according to the National Cryptocurrency Association (NCA), a crypto advocacy group. 

IRS, Taxes
Common barriers to entry cited by respondents. Source: NCA

Tax compliance was one of the biggest impediments to adopting crypto, with 10% of the 54,000 respondents in the NCA survey citing digital asset taxes as an issue.

More than one-third of the respondents indicated that they wanted more education on the tax implications of digital assets, according to the NCA.

IRS, Taxes
39% of respondents said they wanted to better understand the tax implications of crypto. Source: NCA

Related: Crypto lobby Blockchain Association pitches tax plan to Congress

Concerns resurface after Trump killed the controversial “DeFi broker rule,”

In December 2024, the IRS issued a rule classifying all front-end services, including decentralized exchanges (DEX) and decentralized finance (DeFi) platforms, as broker-dealers, subjecting them to tax reporting requirements.

Advertisement

This meant that DeFi platforms would have to collect know-your-customer (KYC) information and report proceeds from user sales to the IRS.

US President Donald Trump signed a resolution in April 2025 that killed the DeFi broker rule, which was well-received by the crypto industry. 

However, crypto industry executives have sounded the alarm about ambiguous language in the stalled CLARITY market structure bill that could force KYC reporting requirements onto DeFi platforms and limit activity in the nascent sector.

Magazine: Clarity Act risks repeat of Europe’s mistakes, crypto lawyer warns

Advertisement