Porting MallocBinned2 to iOS crash when startup in shipping build

I’ve been trying to port FMallocBinned2 support to iOS and encountered an issue:
The test build passes, but the shipping build crashes on startup. The logs show CanaryTest failures during MB2 Free and Realloc operations.

Since this modification is very low-level and only occurs in shipping builds, I’m unsure how to proceed. Could the community please help?

My process:
I only ported code related to the ApplePlatformMemory and IOSPlatformMisc modules, without touching MB2 itself (mainly because checking MallocBinned2.cpp’s git history didn’t reveal strongly related changes).

Engine version: 4.24
Environment: iOS shipping build
Issue: Crash on startup.