Apple · iOS · OKX · Ethereum · CryptoSlate
Rogue iPhone app escapes iOS sandbox to hijack $580,000 in USDT
Compiled by KHAO Editorial — aggregated from 1 source. See llms.txt for citation guidance.
◌ Single Source
Fomopeek, a malicious iPhone app distributed through Apple’s App Store, has been linked to nearly $580,000 in stolen USDT.
Key facts
- A further 111,458 USDT was routed through an address Salus associated with an escrow platform, while another 10,000 USDT passed through the CCE mixing service before reaching addresses linked
- Fomopeek, a malicious iPhone app distributed through Apple’s App Store, has been linked to nearly $580,000 in stolen USDT
- Some victims had previously installed versions 1.1 or 1.2 of the Fomopeek app, which was marketed as a read-only tool for tracking large cryptocurrency transactions across Ethereum, Solana and Tron
- T he third-party app FomoPeek (versions 1.1–1.2) contains malicious code that can exploit iOS system vulnerabilities to gain the highest level of device privileges, potentially accessing sensitive
Summary
01 FomoPeek versions distributed through Apple’s App Store contained malware linked to nearly $580,000 in stolen USDT. 02 The exploit could break iOS sandbox protections and reach private keys, seed phrases and Keychain data stored by other apps. 03 Binance, OKX, Gate, Bitget Wallet and Rabby are warning users as investigators trace the stolen funds and assess the wider exposure. Blockchain security firm SlowMist began investigating the app over the weekend after receiving reports of stolen assets linked to exposed private keys.