News
Public · Published
Rogue iPhone app escapes iOS sandbox to hijack $580,000 in USDT
A malicious iPhone app called Fomopeek was distributed through Apple's App Store and has been linked to nearly $580,000 in stolen USDT, a stablecoin tied to the US dollar. SlowMist, a blockchain security firm, began investigating after reports of stolen assets linked to exposed private keys.
Published:
Updated:
What happened
A malicious iPhone app called Fomopeek was distributed through Apple's App Store and has been linked to nearly $580,000 in stolen USDT, a stablecoin tied to the US dollar. SlowMist, a blockchain security firm, began investigating after reports of stolen assets linked to exposed private keys.
Confirmed
Global impact / market context
This matters because an app inside Apple's official store reportedly escaped the iOS sandbox, which means it broke out of the restricted area meant to keep apps separate. That could let attackers read private keys, the secret codes controlling crypto wallets, and drain USDT without further user action.
Analyst inference
The incident links a mainstream app store to crypto theft, which may push investors to move USDT into hardware wallets or exchanges with stronger safeguards. It could also increase pressure on Apple and regulators to tighten app review, raising compliance costs for app developers and crypto firms.
Analyst inference
What to watch
- Watch for SlowMist's investigation findings on how Fomopeek exposed private keys and whether the app remains available or is removed from Apple's App Store. Confirmed
- Apple should strengthen app review and sandbox testing, and consider notifying users who installed Fomopeek so they can move funds to new wallets. Proposed
- If confirmed sandbox escapes spread, investors may reduce USDT balances on phones, demand better wallet security, and push for clearer app store liability rules. Analyst inference
Affected assets
- USDT — Tether