According to TechFlow, the ScaleBit security team under BitsLab discovered an 'unauthorized access to mnemonic phrase' vulnerability in the Uniswap Wallet (iOS version). Attackers can bypass authentication to access the mnemonic phrase stored on the device.
This vulnerability allows individuals with physical access to the device to obtain the wallet's mnemonic phrase within 3 minutes, especially at greater risk when borrowing phones briefly among couples and friends.
Even in the latest version of the App Store (Version 1.42), this vulnerability still exists. BitsLab reminds users to cautiously protect device unlock permissions and facial recognition information, and to pay attention to official updates to avoid asset loss.