NewMalicious App · iOS

FomoPeek app found stealing crypto wallet keys on iPhone

SlowMist Security TeamSep 22, 2026 · 4 min readSep 22, 2026 · 4 min read

At a glance

App: FomoPeek
Affected versions: v1.1-v1.2
Platform: iOS 12-18.7 / 26.0-26.1
Reported by: SlowMist + OKX

What happened

Multiple users reported stolen crypto assets after installing FomoPeek, an App Store app presented as a read-only whale-tracking tool. At least $580,000 in USDT was reported stolen.

Every affected user had installed the same app before the thefts were detected.

What was found

Versions 1.1 and 1.2 contained an iOS kernel-exploit framework with eight attack methods and a remote command module. Version 1.3 removed the malicious code.

Data at risk

Private keys
Seed phrases
Wallet funds
Keychain data
Login credentials
Device data

What you should do

Delete FomoPeek and do not reinstall it.
Check every wallet for transfers you do not recognize.
Create a new wallet on a clean device and move remaining assets.
Update iOS to the latest available version immediately.

View original postSlowMist · Crypto Briefing