[Security Announcement Regarding the Injection of an Anomalous Script into BlockBeats' Website] This week, several security companies reported a security vulnerability related to DarkSword to BlockBeats. After investigation, it was discovered that on October 22nd, an attack team copied a content page titled "Global Market Risk Aversion Sentiment..." on BlockBeats' mobile web H5 page and injected an anomalous script from a third-party domain. When users searched for this news item, the search results showed both the original news item and the malicious news item with the injected script. We reproduced and removed the script immediately after confirmation. Furthermore, since the effective exploitation window for the DarkSword security vulnerability is concentrated in the iOS 18.6–18.7.2 and iOS 26.0–26.1 versions, we also remind all iOS users to upgrade to the latest iOS 27 system. Following the global PHP vulnerability incidents this week, BlockBeats has investigated dozens of related vulnerabilities, and our technical staff is continuing their investigations. It must be emphasized that BlockBeats has never supported any "wallet login" or "wallet connection" functions. Any BlockBeats app requiring "wallet login" or "wallet connection" is a fake third-party app. BlockBeats will further strengthen the review and change management of third-party script access, continuously monitor external resources loaded on pages, and improve the alerting and handling processes for abnormal situations. Here, we would also like to thank security companies including SlowMist and GCSA for their timely assistance. We express our gratitude to all those on the front lines maintaining industry security.