iPhone Security Warning After Reported $4.06 Million Crypto Theft Linked to Safari Attack

An iPhone user reportedly lost $4.06 million in cryptocurrency after opening an advertisement in Safari, raising concerns about browser-based exploits that can compromise devices without requiring a wallet transaction or signature.
The victim suspects an iOS exploit kit such as DarkSword, although the specific attack method has not been independently confirmed. DarkSword is associated with chains of iOS vulnerabilities that can allow attackers to extract sensitive information from affected devices, potentially including passwords, photos, notes and wallet-related data.
The incident highlights a broader security risk for cryptocurrency holders: protecting private keys is not enough if the device storing or accessing them becomes compromised. Other reported mobile threats include malicious advertisements, spyware, modified applications and software designed to search photos for recovery phrases.
Users should install the latest iOS and application updates, enable automatic security updates, avoid untrusted downloads and configuration profiles, and restrict unnecessary application permissions. Recovery phrases should never be stored in screenshots or unprotected notes. Apple's Lockdown Mode offers additional protection for users facing elevated spyware risks.
The reported loss remains an individual allegation, and the available information does not establish that all iPhones or cryptocurrency wallets are vulnerable to the same attack.