A wallet-tracking app for iPhone carried malicious code designed to break out of Apple’s security sandbox and extract cryptocurrency credentials from infected devices, according to a warning from blockchain security firm SlowMist.

FomoPeek, marketed as a tool for monitoring whale wallets across Solana, Ethereum and TRON, contained two hidden modules unrelated to its advertised functions, SlowMist said in an asset-theft alert issued September 19. The firm linked versions 1.1 and 1.2 to reported crypto thefts after a joint investigation with OKX’s security team.

The disclosure capped a turbulent stretch for crypto security, arriving alongside several unrelated incidents over the weekend. Blink temporarily suspended services after an…