To build a large-scale distributed Internet of Things (IoT), a feasible prototype for Internet of Everything, blockchain can provide strong support with its excellent characteristics such as traceability and openness. Despite that the blockchain technology ideally enhances the reliability and security of IoT systems, emerging new security challenges remain to be resolved. This article details the security vulnerabilities in the convergence of blockchain and IoT as well as corresponding feasible solutions.