The proliferation of AI tools has lowered the technical barriers for attacks in the encryption sector, shortening the time window for exploiting vulnerabilities and making weaknesses across various links more susceptible to discovery by attackers. Recently, there have been frequent security incidents in multiple encryption projects, with third-party dependencies and operational permission management issues standing out as particularly prominent. Coinbase previously experienced an internal data breach, where attackers obtained sensitive data of approximately 69,000 users by bribing an outsourced customer service representative and demanded a $20 million ransom. Although user passwords, private keys, and funds were not directly stolen, the leaked data was used in subsequent attacks, costing the platform hundreds of millions of dollars in response efforts. The platform is currently cooperating with law enforcement to assign responsibility. Solana's trading automation platform, Bloom, suffered from a remote code execution vulnerability in a third-party module, resulting in the theft of approximately 9,408 SOL. The platform confirmed that user private keys were not compromised and has completed full compensation. The Indian trading platform, CoinDCX, lost approximately $15.99 million due to a malfunction in an old wallet's automatic sweep service. The losses were borne by the platform itself. Previously, the platform had dismissed related reports as false alarms, while phishing activities targeting users were also observed during the same period. BNB Chain's prediction market, MYRIAD, experienced a leak of its operational wallet's private key due to a vulnerability in a third-party library. Attackers manipulated market settlement results, but the team swiftly revoked permissions, preventing the attackers from transferring funds. The relevant markets have been voided and refunds completed. Additionally, DotSwap V1 lost approximately 8.5 BTC due to a vulnerability in an old server-side signature path. The third-party push notification service for NGRAVE's companion app was hijacked, with attackers fabricating alerts to induce users to input their mnemonic phrases, resulting in losses exceeding $2.56 million. The hardware wallet itself was not compromised. Keystone confirmed that its website was hacked, leading to the leak (leaked) of customer records and device verification keys. It plans to destroy nearly 19,000 units of inventory devices.