Crypto & DeFi & #StablecoinWallet on BTC, ETH, BSC, TRON, Solana, Polygon, Base, etc. Hardware Wallet: @KeyPalWallet 👉 https://xitter.twitterapi.xyz/t.co/jXRk2Qsf6o
crypto
Joined April 2018
- Tweets7.3K
- Following876
- Followers652K
- Likes4.9K
Pinned Tweet
Self-custody gives you full control—and protecting that control is just as important.
A single compromised key can put everything at risk. Strong, layered security is essential.
Here are three ways to level up your protection with TokenPocket 🧵
No need to panic. TokenPocket is safe.
worse_query is a sandbox escape, not a jailbreak. Exploitation requires installing an untrusted or sideloaded app on an affected iOS version.
Good habits can help prevent attacks like this:
• Keep iOS updated
• Avoid suspicious links and untrusted apps
• Never save recovery phrases in screenshots or note-taking apps
• Use a trusted hardware wallet like @KeyPalWallet for large holdings
🚨 SlowMist TI Alert: iOS sandbox escape 0day PoC “worse_query” disclosed 🚨
A public PoC for a sandbox escape 0day, worse_query, targets iOS 26.0–26.7.2 and iOS 27.2. It is the successor to bad_query. 📱
⚠️ This is a container sandbox escape, not a jailbreak. It breaks the assumption that apps can’t see each other: a malicious app that successfully exploits it can reach system paths and read or modify other apps’ data.
💸 The bug does not steal assets by itself. The real risk starts when a user installs an app from an untrusted source, such as a sideloaded IPA. If a wallet stores its seed phrase, keystore or WebView cache in plaintext locally, a malicious app could read it.
🛡️ Recommendations:
🔸 Don’t install IPAs or apps from unknown sources
🔸 Keep iOS up to date and install Apple’s fix as soon as one is released
🔸 Wallet developers: don’t store sensitive data in plaintext locally
🔸 If you installed an untrusted app on a device holding wallets, treat it as risky and consider moving assets to a new wallet created on a clean device
🔗 github.com/forcequitOS/worse…
Stablecoins Should Move Without Barriers.
Send $USDC, $USDT, and $DAI on @0xPolygon with TokenPocket — zero gas fees.
Your stablecoins, your way.
See how it works 👇
Wanna explore new chains like @Enter_Elysium?
Add them to TokenPocket with Custom Network support and dive in right away.
Why pay gas fees when you don’t have to?
💸 Gas-Free Transfers — Send stablecoins across multiple networks at zero cost.
🔄 Gas-Free Swaps — Swap tokens with zero gas fees.
More Chains. Zero Gas Fees. More Freedom.
Social logins and embedded wallets make Web3 easier—but at the cost of added third-party risk.
TokenPocket stays true to self-custody, keeping your keys fully under your control.
🟦 TokenPocket Weekly
🚀 Product
• Android 2.31.0 is live — multi-language mnemonics, optimized Meme Mode & improved UX.
• Gas-free stablecoin transfers continue across multiple networks.
🔐 Security
• iOS Security Alert: Coruna & DarkSword target older iOS versions. Update iOS, avoid suspicious links & protect your recovery phrases.
• EIP-7702: Recent CEX incident stemmed from internal signing abuse, not the standard itself. Use TokenPocket’s Approval Detector to stay safe.
🌐 Community
• October Monthly Report released — covering product upgrades, payments & security.
• Halloween Treats winners announced — KeyPal 2 & USDT rewards distributed!
Trade. Pay. Secure. All in TokenPocket.
Got USDT on TRON but no TRX?
🎁 Pay gas in $USDT or ethereum:0x4f8e5de400de08b164e7421b3ee387f461becd1a with @TokenPocket_TP.
Grab one of 10 redemption codes at the end of the video for a gas-free TRON transfer. @trondao
Reply below for a chance to get one. We’ll pick winners at random.
#TRON #USDT #TokenPocket #USDD
🆕 New version on Android 2.31.0
What’s new?
🔹 Support multi-language mnemonic
🔹 Optimize Meme Mode trading
🔹 Optimize user experience
Get the latest version and explore a smoother experience.
┻┳|
┳┻|
┻┳|
┳┻| _
┻┳| •.•) Gas-free transfers still live on TokenPocket
┳┻|⊂ﾉ
┳┻| ╱|、
┻┳| (˚ˎ 。7
┳┻| |、˜〵
┻┳| じしˍ,)ノ
🔐 Security Advisory for iOS Users
Security researchers have identified two exploit kits targeting older iOS versions: Coruna and DarkSword. Please keep your iOS updated to stay safe.
⚠️ These attacks target iOS system vulnerabilities and are unrelated to wallet apps themselves.
▪️ Coruna (iOS 13.0–17.2.1): Can exploit iOS vulnerabilities through malicious websites to steal sensitive data, including wallet information.
▪️ DarkSword (iOS 18.4–18.7): Can exploit iOS vulnerabilities through malicious websites to bypass system protections and steal sensitive data.
🛡️ How to stay safe:
1️⃣ Update to the latest available version.
2️⃣ If you can't update yet, enable Lockdown Mode for extra protection.
3️⃣ Avoid suspicious or untrusted websites.
4️⃣ Never store recovery phrases or private keys in screenshots or notes apps.
5️⃣ For large holdings, consider a @KeyPalWallet hardware wallet.
Stay updated. Stay SAFU.
After a recent CEX security incident, some users have been asking: Is EIP-7702 itself unsafe?
Short answer: no.
Attackers first gained unauthorized access to an internal signing service, then used it to create malicious EIP-7702 delegations. The authorization mechanism was abused; no vulnerability in the standard itself has been identified.
EIP-7702 is an Ethereum standard that gives existing wallets smart account capabilities without changing their addresses. It enables batch transactions, gas payments in stablecoins, and flexible authorization—key reasons it has been widely adopted.
What matters is how the upgrade was performed and whether the delegated contract is trusted:
• Upgraded through TokenPocket’s built-in flow? There’s no need to worry because of this incident. You can also reset your wallet to a standard EOA anytime.
• Upgraded through another wallet or a third-party DApp? Use TokenPocket’s EIP-7702 Detector to check if it's safe.
Learn more: help.tokenpocket.pro/en/secu…
