[Cryptosecurity Crisis Amid AI Deployment: Multiple Projects Attacked This Week, Third-Party Dependence and Personnel Risks a Major Concern] BlockBeats reported on October 28th that with the widespread use of AI tools in code auditing, vulnerability discovery, and automated attack script generation, the barrier to entry for crypto attacks has significantly decreased. The window between vulnerability discovery and exploitation has shortened, exposing vulnerabilities in the supply chain, third-party components, and personnel more efficiently. This week, multiple project security incidents occurred, with third-party dependence and operational permission issues being particularly prominent. The impact of Coinbase's previously disclosed internal data breach continues to this day. Attackers bribed overseas outsourced customer service personnel to obtain sensitive data from approximately 69,000 users, including names, addresses, phone numbers, emails, images of some identification documents, account balances, and transaction history. The attackers subsequently demanded a $20 million ransom, which the company refused. The company has stated that user passwords, private keys, and funds were not directly stolen, but the leaked data was used for subsequent phishing and social engineering attacks. The company estimates the overall response cost to be in the hundreds of millions of dollars and is continuing to cooperate with law enforcement agencies in pursuing accountability. On October 26th, Solana's automated trading platform Bloom officially confirmed a security incident. Attackers exploited a sophisticated remote code execution vulnerability in a third-party module, stealing approximately 9,408 SOL (about $947,000) from 49 wallet addresses belonging to 9 users. The platform has stated that user private keys were not accessed or compromised, other wallets are secure, and the platform has promised and completed 100% full compensation. Indian trading platform CoinDCX confirmed a loss of approximately $15.99 million. The funds originated from an old wallet that was claimed to have been retired after a previous hack. The wallet was stolen due to a malfunction in the automated payment service, leading to an accumulation of deposits. The company stated that it will absorb the loss. The company had previously claimed the reports were false alarms before officially acknowledging the incident. Phishing campaigns targeting users also occurred around the same time. On October 26th, BNB Chain's prediction market MYRIAD experienced an incident where its internal operating wallet was compromised. Attackers manipulated settlement results in 10 marketplaces using private keys leaked weeks earlier due to a third-party library vulnerability. The team quickly revoked privileges, preventing the attackers from withdrawing funds. The affected marketplaces have been deactivated and refunds processed. Furthermore, DotSwap V1 stole approximately 8.5 BTC around October 25th through a vulnerability in the old server-side signature path. NGRAVE hardware wallet vendors have been issuing continuous security alerts recently, after their accompanying app's third-party push notification service was hijacked, forging alerts to trick users into entering mnemonic phrases, resulting in losses exceeding $2.56 million. The official statement emphasizes that the hardware wallet itself has not been compromised. Keystone confirmed its website was compromised, customer records and device verification keys were leaked, and plans to destroy nearly 19,000 inventory devices.