Latest Update
9/24/2026 3:44:00 AM

FomoPeek: iOS App Drains OKX Wallets

FomoPeek: iOS App Drains OKX Wallets

FomoPeek v1.1-1.2 drains OKX wallets via iOS kernel exploits on versions 12.0-18.7 and 26.0-26.1, exposing private keys without user connection per SlowMist.

Source

Analysis

FomoPeek versions 1.1-1.2 contain malicious iOS kernel exploitation code that bypasses sandboxing to decrypt Keychain data and extract private keys from OKX Wallet users, as confirmed by SlowMist and OKX security teams after multiple reports including the Sep 24 incident where one user's funds were drained eight hours post-download on Sep 15 with unstaking completed on Sep 23; affected iOS ranges span 12.0-18.7 and 26.0-26.1 while Phantom Wallet remained untouched on the same device, highlighting targeted iOS crypto wallet hack risks and prompting immediate asset migration recommendations for any FomoPeek malware attack victims alongside OKX wallet security breach probes.


Peter H

@peterhch

Co-founder @moongate | prev @hsbc @vectr_ventures @point72Careers | @arcthecommunity @memeland @forbesweb3