A Decade-Old XRP Ledger Bug Could Have Minted XRP Out of Thin Air

Security researchers say the DarkSword exploit is still being used to deploy Coruna malware on vulnerable iPhones. The malware can target wallet apps such as Coinbase, MetaMask, Trust Wallet, Phantom, Exodus, Uniswap, Bitpie, imToken, and OKEx, and may also search photos and notes for BIP39 recovery phrases. Apple has patched the known vulnerabilities in iOS 26.3, and users are urged to update devices.
AI Analysis
The summary describes an active exploit and malware campaign that can steal wallet data and recovery phrases from several crypto apps, creating immediate downside risk for affected users. Apple has already patched the vulnerabilities, which limits broader market impact but does not remove the security threat.