例如在MCP（Multi-Component Prompt）架构下，第三方工具作为系统信任组件被接入，攻击者可通过篡改工具描述实现“Rug Pull”——用恶意工具替换原组件，但保留可信标签，使得攻击隐蔽且高效。 同时，还有一个更隐蔽的风险：第四方提示注入。攻击路径并非直接 ...

early investors or advisors—receive their allocated tokens for free or at a lower price after a predetermined amount of time and are allowed to sell them. Token unlocks are a way for project founders ...