⬢ GM Security — 2026-06-22: $791.6M across 26 incidents

Daily crypto security briefing

2026-06-22 11:53 UTC · last 72h · 26 items · $791.6M reported losses · 49 sources

📊 Trend tracker

• 14 new today · 12 developing
• 7-day: 125 incidents, $987.8M stolen
• 30-day: 125 incidents, $987.8M stolen
• 7-day vectors: smart-contract bug (26), phishing / wallet drainer (10), private-key compromise (9)
• Repeat targets (30d): bitcoin (5), thetanuts (5), uxlink (4), xrp (3), steam (3)

Last 24 hours

• [EXPLOIT · NEW] @Phalcon_xyz: .@taikoxyz was reportedly attacked, with losses exceeding $1.7M. Our initial investigation suggests the likely root cau… — ~$1.7M (@Phalcon_xyz)
  also: CoinDesk · @MistTrack_io
• [EXPLOIT · DEVELOPING · day 2] Q2 2026 emerges as most-hacked quarter on record with 83 incidents — ~$755.0M (Cointelegraph (Security))
• [ENFORCEMENT · NEW] Japan arrests senior Prince Group figure Hu Xiaowei tied to U.S. sanctioned network (crypto.news)
• [OTHER · NEW] XRP price defends $1.12 as analysts eye breakout setup (crypto.news)
• [SCAM · NEW] Fentanyl-linked Chinese network tied to crypto fraud from Japan involving fake ‘Zksync.jp’ token: Nikkei — ~$1.0M (The Block)
  also: crypto.news
• [EXPLOIT · NEW] @GoPlusSecurity: 🧵1/5 — ~$15.0M (@GoPlusSecurity)
• [ADVISORY · NEW] @tayvano_: Subhead: Skids still inside, still trying to find the twitter logins so they can drop a wallet drainer https://t.co/GxT… (@tayvano_)
• [OTHER · NEW] Why XRP cannot hold $1.15 (crypto.news)
• [OTHER · NEW] Ethereum price analysis: ETH holds $1.7K as analysts watch $4.6K path (crypto.news)
• [EXPLOIT · NEW] Gitcoin — exploit (SlowMist Hacked DB)
• [OTHER · NEW] @spreekaway: possibly funded by rival US Based Prediction Market Platform but also, yeah doesn't look great for polymarket lol https… (@spreekaway)
• [ADVISORY · NEW] @tayvano_: lmaoooooooooo (@tayvano_)
• [ADVISORY · DEVELOPING · day 3] @MistTrack_io: ✨MistTrack Quarterly Update: Risk Decay Model, Connection Path Analysis, and Developer Plan (@MistTrack_io)

Earlier · 24–72h

• [OTHER · DEVELOPING · day 3] Bitcoin price holds $64K as LAB and AERO lead altcoin gains: Weekend crypto watch (crypto.news)
• [EXPLOIT · DEVELOPING · day 3] @PeckShieldAlert: #PeckShieldAlert Specter has reported that #MEV bot #JaredFromSubway appears to have been drained of ~$7.5M in crypto,… — ~$7.5M (@PeckShieldAlert)
  also: @Beosin_com · CoinDesk
• [ENFORCEMENT · DEVELOPING · day 3] Brothers face 20 years after $8m crypto kidnapping plea — ~$8.0M (crypto.news)
• [EXPLOIT · DEVELOPING · day 3] @PeckShieldAlert: #PeckShieldAlert An OLPC/LABUBU pool on PancakeSwap on #BNBChain has been exploited, resulting in a loss of ~$1.1M. — ~$1.1M (@PeckShieldAlert)
  also: @GoPlusSecurity · DeFiLlama Hacks DB
• [EXPLOIT · NEW] Secret Network’s Axelar bridge drained for $4.67 million in infinite-mint exploit that went unnoticed for seven days — ~$4.7M (The Block)
• [ADVISORY · DEVELOPING · day 3] @PeckShieldAlert: #PeckShieldAlert ethereum:0x890a5122aa1da30fec4286de7904ff808f0bd74a has plummeted 70%. — ~$18.0M (@PeckShieldAlert)
  also: @PeckShieldAlert
• [EXPLOIT · DEVELOPING · day 3] @GoPlusSecurity: 🚨GoPlus Security Alert: — ~$4.7M (@GoPlusSecurity)
  also: @GoPlusSecurity · @GoPlusSecurity
• [EXPLOIT · NEW] JB — exploit — $50K (SlowMist Hacked DB)
• [EXPLOIT · DEVELOPING · day 3] Namada Shielded Pools — exploit — $600K (SlowMist Hacked DB)
• [EXPLOIT · NEW] mySwap CL — exploit — $300K (SlowMist Hacked DB)
• [NEAR-MISS] Aztec Network deprecated payments rollup exploit (web search (coverage))
  ~$2.1M (1.158K ETH + 150K DAI) drained via a circuit public-input validation flaw in an old immutable rollup; well-known privacy protocol, not in the list
• [OTHER · DEVELOPING · day 3] @spreekaway: indeed, no one else does it like Main Street https://t.co/kMWamDladg (@spreekaway)
• [OTHER · DEVELOPING · day 3] @pcaversaccio: dude, so many people obsessing over fucking tx speed & scale are the same people who deposit into a cex, wait 30 mi… (pcaversaccio)

🧠 Deep reads

• Anime Girls Could Steal Your Crypto as Wallpaper Malware Targets Steam Gamers (Decrypt)

💡 Security thought-spark

Today’s record $755M bridge exploit and the $15M smart contract bug underscore that recent high-profile P2P and cross-chain failures are shifting attackers toward reusing proven contract vulnerabilities and bridge designs—audit and patch all bridge and cross-chain contract upgrades immediately.

Full data: https://gmsecurity.net/briefing.json. Feedback or a source to add? [email protected]. George Donnelly offers Web3 development & security consulting.