Security Announcement Regarding Abnormal Script Injection on BlockBeats Web Pages

This week, multiple security firms reported DarkSword-related vulnerabilities to BlockBeats. Upon investigation, it was confirmed that on October 22, a content page titled "Global Market Risk Aversion..." on BlockBeats' mobile H5 web version was copied by an attack group, which embedded an abnormal script from a third-party domain. When users search for this news alert, the search results display both the original alert and the malicious version with the embedded script. We immediately reproduced the issue after confirmation and completed the cleanup and fix work. Additionally, the effective exploitation window for DarkSword-related vulnerabilities is limited to iOS versions 18.6–18.7.2 and iOS 26.0–26.1. We remind all iOS users to update to the latest iOS 27 system promptly. Following the global PHP vulnerability incident this week, BlockBeats has investigated over dozens of related vulnerabilities, with technical teams continuing their checks. It is important to emphasize that BlockBeats has never supported any "wallet login" or "wallet connection" functionality. Any BlockBeats App requiring wallet login or connection is a third-party fake application. BlockBeats will further strengthen the access review and change management of third-party scripts, continuously monitor external resources loaded on pages, and improve alert and response processes for anomalies. We also thank security firms including SlowMist and GCSA for their timely assistance, and express our gratitude to all frontline workers maintaining industry security.