⬢ GM Security — 2026-06-29: $35.2M across 22 incidents

Daily crypto security briefing

2026-06-29 08:00 UTC · last 72h · 22 items · $35.2M reported losses · 49 sources

📊 Trend tracker

• 5 new today · 17 developing
• 7-day: 137 incidents, $913.6M stolen (+380% vs prior week)
• 30-day: 232 incidents, $1.10B stolen
• 7-day vectors: smart-contract bug (19), social engineering (12), bridge exploit (6)
• Repeat targets (30d): polymarket (6), coinbase (6), certik (6), bitcoin (6), tornadocash (5)

Last 24 hours

• [EXPLOIT · DEVELOPING · day 6] @SlowMist_Team: 🚨SlowMist TI Alert🚨 — ~$121K (@SlowMist_Team)
• [EXPLOIT · NEW] European Banking Authority seeks feedback on a tougher MiCA penalty framework (crypto.news)
• [OTHER · NEW] Loopring shuts down Ethereum’s first zk rollup DEX after years of decline (crypto.news)
• [EXPLOIT · NEW] Polymarket hack losses rise to $3.1M as refund pledge faces scrutiny — ~$3.1M (crypto.news)
• [EXPLOIT · NEW] Taiko sets four-step restart plan after June 21 bridge attack (crypto.news)
• [EXPLOIT · NEW] SecondFi keeps two-week recovery plan after $2.4M Cardano wallet exploit — ~$2.4M (crypto.news)

Earlier · 24–72h

• [EXPLOIT · DEVELOPING · day 2] SecondFi maps recovery path after $2.4 million Cardano wallet exploit, aims to return funds within two weeks — ~$2.4M (The Block)
• [ADVISORY · DEVELOPING · day 3] @ConsensysAudits: New on @MetaMask: Chonky, our AI-powered audit framework, and its core method - vulnerability mining. (ConsenSys Diligence)
• [OTHER · DEVELOPING · day 3] Cathie Wood snaps up $25.5M in Coinbase, SpaceX and Circle shares (crypto.news)
• [EXPLOIT · DEVELOPING · day 4] @Beosin_com: 🔍A 32-byte omission. A multi-million-dollar lesson. (@Beosin_com)
• [SCAM · DEVELOPING · day 3] @chainalysis: Ethereum’s most notorious sandwich attacker just lost $7.5 million to a honeypot. Read our latest research explaining t… — ~$7.5M (@Chainalysis)
• [EXPLOIT · DEVELOPING · day 2] @CertiKAlert: #CertiKInsight 🚨 — ~$7.5M (@CertiKAlert)
• [OTHER · DEVELOPING · day 4] Base Resumes Block Production After Roughly Two-Hour Mainnet Halt (The Defiant)
• [ADVISORY · DEVELOPING · day 4] Uniswap Flashtestations Audit (OpenZeppelin)
• [ADVISORY · DEVELOPING · day 4] Mystery deepens over Cardano wallet’s $18.5M white hat hacker (Protos)
• [EXPLOIT · DEVELOPING · day 4] Secret Network - Rekt — $4.7M (rekt.news Leaderboard)
• [OTHER · DEVELOPING · day 2] @_SEAL_Org: We’re proud to welcome @HyperFND as our newest Platinum Donor. (@_SEAL_Org)
• [OTHER · DEVELOPING · day 4] @tayvano_: Sam: “Okay team. We all agree the Mythos name alone was begging to be drone stiked by the USG. We need names for these… (@tayvano_)
• [OTHER · DEVELOPING · day 4] @tayvano_: dear god why (@tayvano_)
• [OTHER · DEVELOPING · day 4] @spreekaway: nontechnical vibecoder chain https://t.co/3ZuduAszU0 (@spreekaway)

🧠 Deep reads

• AMLBot Puts Polymarket Phishing Toll at $3.1M Across 11 Wallets, Funds Traced to Ethereum (The Defiant)
• Inside a Sandwich Attack: Lessons From the $7.5 Million Heist Against JaredfromSubway.eth (Chainalysis)

💡 Security thought-spark

Least privilege for keys: deployer ≠ owner ≠ pauser ≠ upgrader. One key, one job, separate hardware. Map yours today and look for overlaps.

Full data: https://gmsecurity.net/briefing.json. Feedback or a source to add? [email protected]. George Donnelly offers Web3 development & security consulting.