According to news from SlowMist, Nacos has a remote code execution vulnerability attack case. Nacos is a dynamic service discovery, configuration management, and service management platform open sourced by Alibaba that makes it easier to build cloud-native applications, helping users quickly realize dynamic service discovery, service configuration, service metadata, and traffic management. When Nacos processes certain Jraft-based requests, it uses Hessian for deserialization, but no restrictions are set, resulting in remote code execution (RCE) vulnerabilities in the application. Among them, 1.4.1 <= Nacos < 1.4.6, running in cluster cluster mode is affected; 1.4.0, 2.0.0 <= Nacos < 2.2.3, starting in any mode is affected. There are a large number of platforms in the cryptocurrency industry using this solution, please be aware of the risks and upgrade Nacos to the latest official version.