Updating to the latest iOS is important to enhance your wallet's security
Your wallet runs on your phone’s operating system, so its security depends on that system being protected. When security flaws are found in iOS, Apple fixes them through software updates. However, devices that haven’t installed those updates stay exposed to the known flaws.
Recently, security researchers have identified two exploit kits, Coruna and DarkSword, which target devices on older iOS versions. These kits exploit flaws in iOS itself. They don’t rely on a flaw in any wallet app, but once a device is compromised they can access wallet data stored on it.
Affected versions:
- Coruna (iOS 13.0–17.2.1): Uses malicious websites to take advantage of iOS vulnerabilities and access sensitive information, including wallet data.
- DarkSword (iOS 18.4–18.7): Uses malicious websites to get around built-in iOS security protections and access sensitive information.
Steps to reduce your risk:
1️⃣ Update to the most recent iOS version available for your device.
2️⃣ If updating isn’t possible right now, turn on Lockdown Mode for an added layer of security.
3️⃣ Stay away from unfamiliar or untrusted websites.
4️⃣ Keep your recovery phrase and private keys out of screenshots and notes apps.
A secure wallet starts with securing your device. Here’s a quick security action checklist:
- Update to the latest iOS and Trust Wallet version
- High-value holdings? Consider Lockdown Mode
- Revoke unfamiliar token approvals
- No seed phrase in screenshots, notes or cloud
- Check full addresses and legitimate domains before sending
Small security habits can make a big difference.
Check out the full checklist below:
Leave a dApp. Do your thing. Jump right back in.
Now you can swipe a dApp down into a pill, send, check balances, do what you need, then tap to pick up right where you left off.
Live now on Trust Wallet.
Staying secure starts with knowing what you've approved. Strengthen your wallet security by managing your token approvals.
Token approvals give dApps permission to access tokens in your wallet. Old or unlimited approvals can be exploited by malicious contracts to drain your tokens, so it’s important to revoke the ones you no longer use.
How to revoke an approval:
1. Go to Settings > Security
2. Tap Approvals
3. Select an approval
4. Tap Revoke Approval
A quick check now can help keep your assets safe.