Golden Finance reported that 23pds, the Chief Information Security Officer (CISO) of SlowMist, posted on X platform that dark web intelligence indicates Android and iOS RCE 0-day vulnerabilities are being sold. Attack types: 0click/1Click; attack methods: image/text message, to gain control over devices. RCE (Remote Code Execution) zero-day vulnerability refers to hackers exploiting newly discovered software vulnerabilities to access user information or computers before developers patch them. Currently pending verification, cryptocurrency users should pay attention to mobile manufacturers' update reminders.