Your wallet runs on your phone, so keeping your iPhone’s operating system secure is an important part of keeping your wallet secure. This article explains what the Coruna and DarkSword exploit kits are, how to protect your device, and why you should never store your recovery phrase on your phone.
This guide applies to Trust Wallet users on iPhone.
What Are Coruna and DarkSword?
Coruna and DarkSword are two exploit kits (tools that take advantage of security flaws in software) that security researchers recently identified. They target iPhones running older versions of iOS.
Apple has already fixed the flaws these kits use through software updates. iPhones running the latest iOS version are not affected by them. Devices that haven’t installed those updates remain exposed to the known flaws.
Coruna and DarkSword also look for recovery phrases saved on a device, including in photos and notes.
Although Coruna and DarkSword are known to target iOS 13.0 through 17.2.1 and iOS 18.4 through 18.7, respectively, we recommend always updating to the latest iOS version to stay protected with Apple’s most recent security patches.
Step 1: Update to the Latest iOS Version
Updating takes only a few minutes and ensures your device has Apple’s latest security fixes.
Open the Settings app on your iPhone.
Tap General > Software Update.
If an update is available, tap Update Now (or Install Now) and follow the on-screen instructions.
If you see Automatic Updates, consider turning it on so future security fixes are installed for you.
Step 2: Turn On Lockdown Mode If You Can’t Update Right Now
If you can’t update your iPhone right now, turn on Lockdown Mode for an added layer of security. Lockdown Mode is an optional Apple security feature that limits certain features on your device.
Open the Settings app.
Tap Privacy & Security.
Scroll down and tap Lockdown Mode.
Tap Turn On Lockdown Mode, then confirm and restart your iPhone when prompted.
⚠️ Important: Lockdown Mode is a temporary safeguard, not a replacement for updating. Update to the latest iOS version as soon as you can.
Step 3: Avoid Unfamiliar or Untrusted Websites
Don’t open links from unknown senders in messages, emails or social media posts.
Only visit websites you recognize and trust.
Double-check URLs for small changes, for example
trustwalet.cominstead oftrustwallet.com.
Step 4: Keep Your Recovery Phrase Off Your Phone
Your recovery phrase is the key to your wallet. Anyone who has it can access your funds. Because Coruna and DarkSword look for recovery phrases saved on a device, the safest place for yours is offline.
How to stay safe:
Write your recovery phrase down on paper and store it somewhere secure and offline.
Don’t save it as a photo or screenshot.
Don’t save it in a notes app.
Never share it with anyone. Trust Wallet will never ask for your recovery phrase or private keys, and will never message you first.
For more guidance, see Best Practices for Recovery Phrase Storage and How to Backup Your Recovery Phrase in Trust Wallet.
I Already Saved My Recovery Phrase in Photos, Screenshots or Notes. What Should I Do?
If your recovery phrase has ever been saved as a photo, screenshot or note on your iPhone, treat that phrase as compromised. This applies even if you haven’t noticed anything unusual. Anyone who gets hold of your recovery phrase has full access to the wallet and all of its funds. The safest approach is to stop using that wallet immediately and move your assets to a new wallet with a new recovery phrase.
⚠️ Important: Deleting the photo or note does not make the old recovery phrase safe again. Once a phrase has been stored on your device, the only way to be sure it’s secure is to stop using that wallet and move to a new one.
Follow these steps in order:
Stop using the old wallet right away. Don’t receive new funds, buy crypto, or deposit anything into it. Don’t connect it to new apps or websites.
Update your iPhone to the latest iOS version. Go to Settings > General > Software Update. Do this before creating your new wallet, so your new recovery phrase isn’t created on a device with known security flaws.
Create a new wallet in Trust Wallet. The new wallet will have its own, different recovery phrase. Do not import or reuse the old recovery phrase.
Write the new recovery phrase down on paper. Store it offline in a secure place. Don’t take a photo or screenshot of it, and don’t save it in a notes app or anywhere else on your device. See Best Practices for Recovery Phrase Storage.
Move all your assets from the old wallet to the new one. Copy the receiving address from the new wallet, and check it carefully before you confirm each transfer. Make sure you keep enough of each network’s native coin in the old wallet to cover transaction fees.
Stop using the old wallet permanently. Once you’ve confirmed everything has been moved, don’t send funds to it again. Update any services, exchanges or contacts that still have the old wallet’s address, so no funds are sent there by mistake.
Frequently Asked Questions
Is my Trust Wallet affected if my iPhone is fully up to date?
Apple has already fixed the flaws that Coruna and DarkSword use. Devices on the latest iOS version aren’t affected by these exploit kits.
Does Trust Wallet need an update to protect me from Coruna and DarkSword?
These kits target flaws in iOS, not in Trust Wallet. The key step is updating iOS. You should also always use the latest version of Trust Wallet from the App Store or trustwallet.com/download.
Will Trust Wallet ever ask for my recovery phrase?
No. Trust Wallet will never ask for your recovery phrase or private keys, and will never DM you first. Anyone who asks is a scammer. See How to Spot and Avoid Crypto Wallet Scams.
Something looks unusual in my wallet. Who can help?
Contact Trust Wallet Support and include your wallet address and transaction hash. The team will help you review your transaction activity.
⚠️ Remember: Keep iOS updated, keep your recovery phrase offline, and never share it with anyone.