I was attacked just today in some metaverse. There was an exploit that allowed the attackers to hack my client program and then tried to access my private network at home. Good that my OS firewalls are up and so it notified me of an attempted network access.
They also managed to get my OS information, including my browser, and my client program's version.
Reminds me to use VPN because I only use VPN during online financial transactions and during work on a separate machine.
Defaulted on the official client program of the metaverse because they frequently release which includes security fix than use the third party one that I was using.