The BlockBeats mobile web app was previously infected with malicious scripts, which have now been fixed.

On October 22nd, the H5 page of the BlockBeats mobile web application was copied and injected with malicious scripts from a third-party domain by an attack team. This has now been removed and fixed. The DarkSword security vulnerability exploit is concentrated on iOS versions 18.6–18.7.2 and iOS 26.0–26.1. iOS users are advised to upgrade to iOS 27. BlockBeats has never supported wallet login or wallet connection functions; any such functions are from fake third-party apps. This investigation was assisted by SlowMist and GCSA. (Source: BlockBeats)