Apple, Google Patch Vulnerabilities After $6M Trust Wallet Theft

• Apple and Google release urgent updates as exploit chains target crypto wallets and cause over $6 million in losses.
• Vulnerabilities enabled theft of recovery phrases from leading wallet apps, including Trust Wallet, Coinbase, MetaMask, OKEx, and Phantom.

On November 10, 2026, Cyber Security News reported that Apple and Google released emergency security updates for iOS and Chrome, responding to a surge in attacks targeting crypto wallet users. Attackers deployed sophisticated exploit chains, namely DarkSword and Coruna, to steal wallet recovery phrases and sensitive user data from major wallet apps, leading to millions of dollars in user losses, according to Cryptopolitan on November 10, 2026.

Google patched a critical Chrome vulnerability (CVE-2026-125350), enabling attackers to execute remote code, extract credentials, and access wallet secrets through malicious web pages and phishing sites. The Chrome update also included fixes for additional high-severity issues within core browser components. Simultaneously, Apple released iOS 27.2.1 and iPadOS 27.2.1 to resolve flaws that could allow unauthorized access to group chats and personal data, based on Apple’s official support documentation.

Attackers chained Chrome and iOS vulnerabilities to bypass device protections. Utilizing DarkSword exploit kits, they achieved elevated system privileges, injecting theft modules directly into mobile wallet applications. Coruna modules specifically targeted device storage to locate and validate recovery phrases saved in notes or images, then exfiltrated this data to remote servers. Both attack kits propagated via phishing websites, compromised order pages, and watering hole attacks, reportedly affecting users who merely visited booby-trapped sites, according to 9to5Mac.

The impact on user confidence has been significant. The Hacker News and Lookout Threat Intelligence documented that incidents involving the DarkSword and Coruna exploit chains have produced repeated, substantial financial losses. Trust Wallet alone suffered thefts totaling $6 million as a direct result of these vulnerabilities, with continuing incidents into late 2026. Following the breaches, Cryptopolitan reported mass user withdrawals from exposed platforms, increased demand for support, and a market shift toward hardware wallets. Regulatory scrutiny of both wallet developers and mobile OS vendors is also intensifying in wake of these attacks.

Apple and Google’s rapid response aims to limit further losses, but these events highlight how sophisticated threat actors can circumvent device-level protections and compromise critical wallet data. Market trends now reflect a growing demand for enhanced wallet security technologies, digital asset insurance products, and stricter cybersecurity standards across the crypto sector.

As of November 10, 2026, 15:10 UTC, Trust Wallet Token (TWT) trades at $0.40, reflecting a 2.01% change in 24-hour volume, according to the latest market data.