⬢ GM Security — 2026-06-17: $101.3M across 30 incidents

Daily crypto security briefing · Edited by George Donnelly

2026-06-17 20:42 UTC · last 72h · 30 items · $101.3M reported losses · 20 sources

Last 24 hours

• [SCAM] @CertiKAlert: #CertiKInsight 🚨 — $42.0M (X (security alerts))
• [NEWS] @PeckShieldAlert: #PeckShieldAlert The @UXLINKofficial exploiter-labeled address has swapped ~14.6M $DAI for 8,298.6 $ETH. (X (security alerts))
• [ENFORCEMENT] Florida Man 'Bitcoin Rodney' Pleads Guilty Over $1.8 Billion HyperFund Crypto Fraud (Decrypt)
• [NEWS] @immunefi: Everyone keeps telling you crypto is dead. No money left. No opportunity. (X (security alerts))
• [ADVISORY] Crypto’s security nightmare won’t be solved by ordinary audits (CoinDesk)
• [EXPLOIT] @Beosin_com: ⚡ A single integer truncation bug nearly cost Thetanuts Finance over $2M. — $2.0M (X (security alerts))
• [NEWS] Steam Workshop wallpapers found spreading crypto malware (Protos)
• [EXPLOIT] The Make TON Great Again roadmap: 3 steps left, explained (crypto.news)
• [EXPLOIT] @Phalcon_xyz: 🗓 Weekly Web3 Security Roundup | Jun 8 - Jun 14 — $6.0M (X (security alerts))
• [SCAM] @chainalysis: One case is never just one. (X (security alerts))
• [EXPLOIT] DIP — exploit — $111K (DeFiLlama Hacks DB)
• [NEWS] DeFi Lending and DEX Fees Slump as Leverage Drains Out After June Selloff (The Defiant)
• [NEWS] @tayvano_: The Fed, Iran Trade, and Why BTC Looks Cheap Right Now https://t.co/sAVrcjp96K (X (security alerts))
• [NEWS] @tayvano_: unc1069 / sapphire sleet / whatever you want to call them (X (security alerts))
• [NEWS] @immunefi: SR Summer is just getting started https://t.co/pTrDs8Z1QI (X (security alerts))
• [NEWS] @immunefi: Finding security signal in web3 has been too slow for the people who need it most. (X (security alerts))
• [NEWS] @BlockSecTeam: 🛡️ When AI agents start paying on their own, every payment needs to be screened and accountable — not just signed. (X (security alerts))
• [NEWS] @tayvano_: incredible things happening lmaooooooooooo https://t.co/KUEBBUi04L https://t.co/uxdtEYkOl3 (X (security alerts))
• [NEWS] @spreekaway: yeah, don't let this guy out https://t.co/zbITiltXR3 (X (security alerts))

Earlier · 24–72h

• [ENFORCEMENT] OFAC and Crypto Crime: Every OFAC Specially Designated National with Identified Cryptocurrency Addresses (Chainalysis)
• [EXPLOIT] Humanity Protocol Launches New H Token Airdrop After $36M Exploit — $36.0M (The Defiant)
  also: X (security alerts)
• [ENFORCEMENT] UK Designates HTX: What the Biggest Crypto Sanctions Action Yet Means for Compliance Teams | TRM Labs (TRM Labs)
• [ENFORCEMENT] South Korea Charges 23 Over Crypto Laundering Tied to $11M Cambodian Scam Ring (Decrypt)
• [EXPLOIT] @GoPlusSecurity: 🧵1/7 — $105K (X (security alerts))
• [ENFORCEMENT] @chainalysis: 🇬🇭 @EOCOghana and the 🇬🇧 @NCA_uk used Chainalysis Reactor to trace, freeze, and seize $15.1M linked to a major inve… — $15.1M (X (security alerts))
  also: X (security alerts) · Chainalysis
• [ADVISORY] @tayvano_: There is still something missing. (X (security alerts))
• [EXPLOIT] BlockThreat - Week 24, 2026 (BlockThreat)
• [ENFORCEMENT] EU Sanctions Russian Propagandists, Military Suppliers, and Officials in New Listings | TRM Labs (TRM Labs)

🧠 Deep reads

• OpenZeppelin Confidential Contracts v0.5 Diff Audit (OpenZeppelin)
• Seeing the Full Picture: Why Pre- and Post-Designation Exposure Changes Everything in Sanctions Screening (Chainalysis)

💡 Security thought-spark

Monitor your protocol like an attacker would: alert on large withdrawals, admin calls, and pause events (Tenderly / Hypernative / Forta). Detection time is loss size.

Full data: https://gmsecurity.net/briefing.json. Feedback or a source to add? [email protected]. George Donnelly offers Web3 development & security consulting.