FomoPeek iOS App Exposed Users' Crypto Keys in Malware Heist

The iOS app FomoPeek has been found to contain malicious code that can extract cryptocurrency wallet credentials from affected devices. The app, marketed for tracking whale wallets across Solana, Ethereum, and TRON, was used by users who installed versions 1.1 or 1.2 before their assets were taken.

SlowMist issued an asset-theft warning on September 19 after investigating multiple cases of stolen crypto with OKX's security team. The affected users had installed or used FomoPeek versions 1.1 or 1.2 before their assets were taken.

The malicious code contained an iOS kernel exploitation framework with eight attack methods capable of adapting to different device models and operating-system versions, ranging from iOS 12.0 through 18.7 and iOS 26.0 through 26.1.