⬢ GM Security — 2026-07-01: $98.4M across 30 incidents

Daily crypto security briefing

2026-07-01 08:00 UTC · last 72h · 30 items · $98.4M reported losses · 49 sources

📊 Trend tracker

• 24 new today · 6 developing
• 7-day: 139 incidents, $210.3M stolen (-79% vs prior week)
• 30-day: 274 incidents, $1.20B stolen
• 7-day vectors: smart-contract bug (11), private-key compromise (6), bridge exploit (6)
• Repeat targets (30d): certik (9), bitcoin (7), polymarket (6), coinbase (6), tornadocash (5)

Last 24 hours

• [EXPLOIT · NEW] @CertiKAlert: #CertiKInsight 🚨 — ~$204K (@CertiKAlert)
• [EXPLOIT · NEW] @PeckShieldAlert: #PeckShieldAlert In June 2026, the crypto space experienced 40 major hacks, resulting in total losses of $75.87M — a 7.… (@PeckShieldAlert)
• [ENFORCEMENT · NEW] Goliath Ventures CEO pleads guilty for role in $400M crypto Ponzi (crypto.news)
• [SCAM · NEW] Why Ask Credentials If There Are Secret Codes?, (Wed, Jul 1st) (SANS ISC)
• [ENFORCEMENT · NEW] Million-dollar homes, luxury bags and Lamborghinis: Florida man pleads guilty in crypto fraud scheme (The Block)
• [EXPLOIT · NEW] @chainalysis: Crypto stolen in the alleged $13.7 million hack of Grinex are moving. We’re tracking stolen funds as they flow through… — ~$13.7M (@Chainalysis)
• [OTHER · NEW] Trump pocketed more than $1 billion from crypto ties as industry headed toward slump (CoinDesk)
• [OTHER · NEW] Trump Discloses Over $1.2 Billion in Crypto Earnings, $50M in Bitcoin Holdings (Decrypt)
• [OTHER · NEW] President Trump’s financial disclosures show hundreds of millions in crypto-related income (The Block)
• [ADVISORY · NEW] How Michael Saylor replaced ‘bitcoin’ with ‘credit’ (Protos)
• [SCAM · NEW] @CertiKAlert: #CertiKStatsAlert 🚨 — ~$81.7M (@CertiKAlert)
• [EXPLOIT · NEW] @_SEAL_Org: 🌷 @flyingtulip_ is now part of SEAL Safe Harbor, so authorized whitehats can help rescue funds during active exploits… (@_SEAL_Org)
• [ENFORCEMENT · NEW] Dutch Prosecutors Seek to Bankrupt Crypto Platform Knaken After Funds Frozen (Decrypt)
• [OTHER · NEW] Inspirational story: From homelessness to millionaire, the path to success (crypto.news)
• [OTHER · NEW] New Zcash nonprofit Sovright unveils ZEC wallet recovery tool (The Block)
• [OTHER · NEW] @GoPlusSecurity: ⚽ Every attack has its own playbook. (@GoPlusSecurity)
• [ENFORCEMENT · NEW] What is a community takeover (CTO)? When a memecoin’s holders seize the wheel (crypto.news)
• [EXPLOIT · NEW] SpaceX is now a Bitcoin Trojan horse: what its 18,712 BTC means for crypto (crypto.news)
• [EXPLOIT · NEW] SecondFi - Rekt — $2.4M (rekt.news Leaderboard)
• [OTHER · NEW] Solana price eyes breakout after tokenized stock boom fuels 18% rally (crypto.news)
• [OTHER · DEVELOPING · day 6] @spreekaway: https://t.co/ui5n7OSFYU (@spreekaway)
• [OTHER · NEW] @spreekaway: do we think openusd will be more or less open than openai? (@spreekaway)
• [OTHER · NEW] @CertiK: AI agents will soon execute transactions, manage assets, and interact with on-chain applications on behalf of users. (CertiK)

Earlier · 24–72h

• [ADVISORY · DEVELOPING · day 2] @CertiK: Amazing write-up by our team member @xy9301 which examines vulnerability drift and reverse evolution in AI auditing sys… (CertiK)
• [ENFORCEMENT · DEVELOPING · day 2] Self-exiled Chinese billionaire sentenced to 30 years for fraud involving crypto (The Block)
• [EXPLOIT · NEW] Edel — exploit — $403K (DeFiLlama Hacks DB)
• [ADVISORY · DEVELOPING · day 2] @Quantstamp: The Zcash Orchard bug was patched, but nobody can prove it was never exploited. (@Quantstamp)
• [ADVISORY · DEVELOPING · day 2] @HalbornSecurity: Smart contract audits don't protect you from supply chain attacks. ⚠️ — ~$3.0M (@HalbornSecurity)

🧠 Deep reads

• The Notorious Bug Digest #9: Rule Downgrade, ZK Misconstraint, and the Aftermath Exploit (OpenZeppelin)
• DeFi drama: ENS governance battle, EF cuts and Gnosis reboot (Protos)

💡 Security thought-spark

Red-team your own UX: ask an LLM to "write the wallet-drainer that would exploit a careless user of this approve() flow," then design the flow that defeats it.

Full data: https://gmsecurity.net/briefing.json. Feedback or a source to add? [email protected]. George Donnelly offers Web3 development & security consulting.