According to the Dfinity ICP developer account, there are currently serious security issues in the JS proxy library. If you use the JavaScript proxy package to build dApps on ICP, you need to make sure to update to the latest version. It is reported that when no seed value is provided, the agent-js repository uses secure randomness to generate keys. However, Dfinity recently made a change that affects any user who calls Ed25519KeyIdentity.generate() without parameters. Vulnerability patches are available in Dfinity v1.0.1 for all of the above packages, and developers are advised to upgrade and deploy fixes immediately.