iOS 18 DarkSword vulnerability allows malicious websites to steal crypto wallet private keys and user data; $5.57M in losses reported so far.
Security & Exploits ·
A vulnerability designated DarkSword in iOS 18 has reportedly enabled theft of cryptocurrency and sensitive user data through malicious websites accessed via Safari. According to reports, victims across crypto wallet platforms have lost $5,570,000 to date, with exploitation occurring across 18 or more compromised sites.
The attack mechanism involves malicious code executing on a user's device upon visiting an infected website through Safari, creating exposure to passwords, messages, photos, and cryptocurrency wallet files—including private keys. The vulnerability allows threat actors to access these sensitive materials without requiring additional user interaction beyond opening a webpage.
The reported remediation is to update iOS to the latest version immediately. Security guidance also recommends against storing seed phrase photographs in device galleries or writing them in note-taking applications, practices that could expose recovery credentials if a device is compromised through this or similar vulnerabilities. The full scope of affected users, the timeline of the exploitation, and whether Apple has issued an official patch remain unclear from available reports.