⬢ GM Security — 2026-06-22: $792.5M across 22 incidents

Daily crypto security briefing

2026-06-22 15:50 UTC · last 72h · 22 items · $792.5M reported losses · 49 sources

📊 Trend tracker

• 3 new today · 19 developing
• 7-day: 128 incidents, $995.3M stolen
• 30-day: 128 incidents, $995.3M stolen
• 7-day vectors: smart-contract bug (27), phishing / wallet drainer (11), social engineering (10)
• Repeat targets (30d): bitcoin (5), thetanuts (5), certik (4), uxlink (4), xrp (3)

Last 24 hours

• [EXPLOIT · NEW] @Beosin_com: 🔍#BeosinInsight — ~$7.5M (@Beosin_com)
• [EXPLOIT · DEVELOPING · day 2] @Phalcon_xyz: .@taikoxyz was reportedly attacked, with losses exceeding $1.7M. Our initial investigation suggests the likely root cau… — ~$1.7M (@Phalcon_xyz)
  also: CoinDesk · @MistTrack_io
• [EXPLOIT · DEVELOPING · day 3] Q2 2026 emerges as most-hacked quarter on record with 83 incidents — ~$755.0M (Cointelegraph (Security))
• [ENFORCEMENT · DEVELOPING · day 2] Japan arrests senior Prince Group figure Hu Xiaowei tied to U.S. sanctioned network (crypto.news)
• [OTHER · DEVELOPING · day 2] XRP price defends $1.12 as analysts eye breakout setup (crypto.news)
• [SCAM · NEW] Fentanyl-linked crypto fraud tied to fake Zksync.jp token: Nikkei (crypto.news)
• [ADVISORY · NEW] @CertiK: "It’s getting harder to trust digital identities." (CertiK)

Earlier · 24–72h

• [EXPLOIT · DEVELOPING · day 2] @GoPlusSecurity: 🧵1/5 — ~$15.0M (@GoPlusSecurity)
• [ADVISORY · DEVELOPING · day 2] @tayvano_: Subhead: Skids still inside, still trying to find the twitter logins so they can drop a wallet drainer https://t.co/GxT… (@tayvano_)
• [OTHER · DEVELOPING · day 2] Why XRP cannot hold $1.15 (crypto.news)
• [OTHER · DEVELOPING · day 2] Ethereum price analysis: ETH holds $1.7K as analysts watch $4.6K path (crypto.news)
• [EXPLOIT · DEVELOPING · day 2] Gitcoin — exploit (SlowMist Hacked DB)
• [OTHER · DEVELOPING · day 4] Bitcoin price holds $64K as LAB and AERO lead altcoin gains: Weekend crypto watch (crypto.news)
• [EXPLOIT · DEVELOPING · day 4] @PeckShieldAlert: #PeckShieldAlert Specter has reported that #MEV bot #JaredFromSubway appears to have been drained of ~$7.5M in crypto,… — ~$7.5M (@PeckShieldAlert)
  also: The Defiant · CoinDesk
• [EXPLOIT · DEVELOPING · day 4] @PeckShieldAlert: #PeckShieldAlert An OLPC/LABUBU pool on PancakeSwap on #BNBChain has been exploited, resulting in a loss of ~$1.1M. — ~$1.1M (@PeckShieldAlert)
  also: @GoPlusSecurity · DeFiLlama Hacks DB
• [ADVISORY · DEVELOPING · day 4] @PeckShieldAlert: #PeckShieldAlert ethereum:0x890a5122aa1da30fec4286de7904ff808f0bd74a has plummeted 70%. — ~$18.0M (@PeckShieldAlert)
  also: @PeckShieldAlert
• [EXPLOIT · DEVELOPING · day 4] @GoPlusSecurity: 🚨GoPlus Security Alert: — ~$4.7M (@GoPlusSecurity)
  also: @GoPlusSecurity · @GoPlusSecurity
• [OTHER · DEVELOPING · day 2] @spreekaway: possibly funded by rival US Based Prediction Market Platform but also, yeah doesn't look great for polymarket lol https… (@spreekaway)
• [ADVISORY · DEVELOPING · day 2] @tayvano_: lmaoooooooooo (@tayvano_)
• [ADVISORY · DEVELOPING · day 4] @MistTrack_io: ✨MistTrack Quarterly Update: Risk Decay Model, Connection Path Analysis, and Developer Plan (@MistTrack_io)
• [OTHER · DEVELOPING · day 4] @spreekaway: indeed, no one else does it like Main Street https://t.co/kMWamDladg (@spreekaway)
• [OTHER · DEVELOPING · day 4] @pcaversaccio: dude, so many people obsessing over fucking tx speed & scale are the same people who deposit into a cex, wait 30 mi… (pcaversaccio)

💡 Security thought-spark

Q2 2026's record bridge losses and today's $7.5M+ in smart contract bugs underscore that unvalidated third-party integrations and upgradeable proxy patterns remain the critical failure points—prioritize real-time invariant monitoring on bridge deposits and enforce mandatory timelocks for all contract upgrades.

Full data: https://gmsecurity.net/briefing.json. Feedback or a source to add? [email protected]. George Donnelly offers Web3 development & security consulting.