According to TechFlow, the ScaleBit security team under BitsLab discovered an "unauthorized access to mnemonics" vulnerability in Uniswap Wallet (iOS version). Attackers can bypass authentication and obtain mnemonics stored in the device.
This vulnerability allows anyone with physical access to the device to obtain the wallet mnemonic within 3 minutes, which is particularly risky when couples and friends borrow phones for a short period of time.
Even in the latest version of the App Store (Version 1.42), the vulnerability still exists. BitsLab reminds users to carefully protect device unlocking permissions and face recognition information, and pay attention to official updates to avoid asset losses.