⬢ GM Security — 2026-06-24: $17.8M across 29 incidents

Daily crypto security briefing

2026-06-24 13:21 UTC · last 72h · 29 items · $17.8M reported losses · 49 sources

📊 Trend tracker

17 new today · 12 developing
7-day: 167 incidents, $1.02B stolen
30-day: 167 incidents, $1.02B stolen
7-day vectors: smart-contract bug (33), social engineering (14), phishing / wallet drainer (11)
Repeat targets (30d): bitcoin (6), certik (5), thetanuts (5), sanctions (4), uxlink (4)

Last 24 hours

[EXPLOIT · DEVELOPING · day 3] @CertiKAlert: #CertiKInsight 🚨 (@CertiKAlert)
[EXPLOIT · NEW] THORChain Resumes Trading After Month-Long Halt From $10.7M Exploit — ~$10.7M (The Defiant)
[EXPLOIT · NEW] Yield Yak — exploit (SlowMist Hacked DB)
[ENFORCEMENT · NEW] DOJ Seizes Huione Infrastructure Linked to Billions in Crypto Laundering (Decrypt)
[OTHER · NEW] 21Shares says bitcoin’s post-halving price action ‘still looks familiar,’ but sees recovery toward $100,000 by year-end (The Block)
[ADVISORY · NEW] Best Tools for Monitoring Cryptocurrency Transactions for Fraud and Suspicious Activity | TRM Labs (TRM Labs)
[OTHER · NEW] Crypto’s Clarity Act Has a New Enemy: Catholic Leaders (Decrypt)
[EXPLOIT · NEW] BlockThreat - Week 25, 2026 (BlockThreat)
[OTHER · NEW] ENS DAO Delegates Call Foundation Proposal a Governance Attack as Johnson Self-Delegates (The Defiant)
[ADVISORY · NEW] @Quantstamp: A double-spend bug sat in Zcash's Orchard pool since 2022, through multiple audits and expert reviews. (@Quantstamp)
[EXPLOIT · NEW] Cardano wallets drained of $2.4M after self-custody exploit — ~$2.4M (Protos)
[SCAM · NEW] New York man sentenced for $1.4 million crypto fraud scheme using bogus influencer accounts (The Block)
[ENFORCEMENT · DEVELOPING · day 2] Thailand Expands Crypto Mining Probe Into $300M Chinese Laundering Network (Decrypt)
[OTHER · NEW] @pcaversaccio: probably only 5 people in the world care but on 2 may the tornado cash proposal 66 was accepted (i.e. on-chain executed… (pcaversaccio)
[ADVISORY · NEW] @HalbornSecurity: We are proud to share that we have completed our XRP Ledger Lending Protocol Re-Audit for @Ripple! 🔐 (@HalbornSecurity)
also: crypto.news
[OTHER · NEW] @_SEAL_Org: Better-informed policy is good for everyone building in this space. OPSeC gives our industry a way to make that happen… (@_SEAL_Org)

Earlier · 24–72h

[ADVISORY · DEVELOPING · day 2] @SlowMist_Team: 🔥Glad to support @HTX_DAO’s HTX Genesis Hackathon as a security partner! (@SlowMist_Team)
[ADVISORY · NEW] Siemens SIPROTEC 5 Using DIGSI5 Protocol (CISA Cybersecurity Advisories)
[ENFORCEMENT · DEVELOPING · day 2] Treasury Sanctions Three Individuals and Six Entities for Routing Crypto to ISIS (The Defiant)
[OTHER · DEVELOPING · day 2] Synthetix Governance Votes to Retire sUSD, Pay Holders in Vested SNX (The Defiant)
[ENFORCEMENT · DEVELOPING · day 2] OFAC Sanctions ISIS Operators for Financing Terror Group with Crypto (Chainalysis)
[OTHER · DEVELOPING · day 2] a16z-Backed Goldfinch Finance Winds Down After Originating $100M in Loans (The Defiant)
[ENFORCEMENT · NEW] @chainalysis: Yesterday, OFAC issued sanctions against ISIS-supporting financiers that moved crypto across borders for the terror gro… (@Chainalysis)
[OTHER · DEVELOPING · day 2] @CertiK: Excited to see our CTO @kang_li join #MYBW2026 as a Star Speaker. (CertiK)
[OTHER · DEVELOPING · day 2] @tayvano_: guys 😭 https://t.co/LGBXxmyoFF https://t.co/Z6O7asZ6OP (@tayvano_)
[OTHER · DEVELOPING · day 2] @tayvano_: Oh shit Brazil’s govt also got pwn’d by Mythos. https://t.co/V0rSWLvkqt (@tayvano_)
[ADVISORY · DEVELOPING · day 2] @HalbornSecurity: What separates a high-caliber security audit from a surface-level one? 🤔 (@HalbornSecurity)
also: @HalbornSecurity

🧠 Deep reads

Privacy Contracts Audit (OpenZeppelin)
Secret Network's Axelar Bridge Drained $4.67M via Infinite-Mint Flaw (The Defiant)

💡 Security thought-spark

THORChain's $10.7M bridge exploit combined with Yield Yak's frontend DNS hijack underscores that cross-chain bridges and frontend infrastructure remain the top vectors; prioritize emergency circuit breakers for bridges and enforce DNSSEC with multi-sig deployment approval.

Full data: https://gmsecurity.net/briefing.json. Feedback or a source to add? [email protected]. George Donnelly offers Web3 development & security consulting.