Blockchains are implemented as software running on each blockchain node
Improperly configuring blockchain software can leave a user's account open to attack
Some Ethereum software can open up port 8445 for RPC. Exposing this port to the public internet enabled attackers to steal private keys and cryptocurrency