BlockBeats Repairs Mobile Page After Script-Injected Copy Appears in Search

BlockBeats repaired a mobile page after an attacker copied an Oct. 22 item and inserted a third-party script, creating a malicious version that appeared beside the original in search results.

The copied item was on BlockBeats’ mobile website. BlockBeats reproduced the issue, removed the script and repaired the page after confirming the problem.

The effective exploitation window for vulnerabilities related to DarkSword was concentrated in iOS 18.6–18.7.2 and iOS 26.0–26.1. BlockBeats urged iOS users to update to iOS 27.

BlockBeats has never supported wallet login or wallet connection features. Any BlockBeats app requiring wallet login or wallet connection is a fake third-party app.

BlockBeats plans tighter reviews and change controls for third-party scripts, monitoring of external resources loaded by its pages, and improvements to alerts and incident response.