On August 22nd,the Chief Information Security Officer of SlowMist, stated on X platform that WinRAR has a remote code execution vulnerability (CVE-2023-40477). Attackers can exploit this vulnerability by enticing targets to visit malicious pages or simply open malicious files, which may allow hackers to take control of the computer. Cryptocurrency users should be aware of the need to upgrade. At the same time, be aware that the so-called "WinRAR vulnerability detection tool" is also a malicious phishing program, and be aware of the financial risks.