27 crypto-security item(s) in the window with ~$1.37B in reported losses The largest is "H1 2026 Crypto Hacks Reach Record High as Losses Fall Below USD 1 Billion | TRM Labs" (~$1.00B). Dominant vectors: phishing / wallet drainer, private-key compromise, flash-loan attack, oracle manipulation.
-
Metaplanet adds 2,823 BTC while Bitcoin income revenue drops 41%
Metaplanet has added 2,823 Bitcoin to its treasury, raising its total holdings to 43,000 BTC while second-quarter revenue from its Bitcoin income business fell. According to Metaplanet’s July 2 disclosure, the Tokyo-listed company purchased 2,823 BTC at an average price…
-
XRP edges higher as whale activity rises while retail traders stay cautious
New wallet creation hit a three-month high and large-holder activity strengthened, but XRP still needs to reclaim $1.10 before the recovery looks convincing.
-
FBI Director Kash Patel caught sleeping on required disclosure of six-figure MSTR investment: Report
Patel loaded up on BTC-holder MSTR shares but failed to file a timely disclosure, according to a report by nonpartisan news outlet NOTUS.
-
France reports 77 crypto kidnapping and extortion cases in 2026
France reports 77 crypto-linked kidnapping and extortion cases this year as officials expand security plans and arrest about 200 suspects.
-
OFAC Updates ISIS-Khorasan Sanctions with Over 100 Cryptocurrency Wallets
Summary OFAC updated its ISIS Khorasan (ISIS-K) designation to include 134 cryptocurrency wallet addresses (131 on TRON and 3 on… The post OFAC Updates ISIS-Khorasan Sanctions with Over 100 Cryptocurrency Wallets appeared first on Chainalysis.
-
‘We desperately need legislation that includes an agreement on ethics:’ Trump financial filing adds urgency to crypto bill negotiations
Trump's financial disclosure, revealing millions in crypto-related income, is adding urgency to write ethics restrictions into a crypto bill.
-
Chinese Exile Miles Guo Sentenced to 30 Years for $1B Crypto Fraud Scheme
A federal judge ordered Guo to forfeit $889 million after a jury convicted him of running a scheme that raised over $1 billion partly through the fake Himalaya Coin cryptocurrency.
-
Drift Protocol Rebrands to Velocity DEX Ahead of Relaunch
~$295.0M · Solana perpetuals exchange Drift Protocol has rebranded to Velocity DEX, with a private beta planned in the coming days as the platform rebuilds after a $295M April exploit.
-
Bitcoin Pops Off 21-Month Low to $60K as Soft Data Eases Rate-Hike Fears
BTC recovered from local lows to $60,000 after softer U.S. jobs and factory data revived hopes the Fed's hawkish turn could be easing.
-
OFAC Sanctions 134 ISKP Cryptocurrency Addresses Tied to USD 2 Million in Terrorist Financing | TRM Labs
OFAC sanctioned 134 ISKP-linked crypto addresses responsible for over $2M in terrorist financing. Learn how ISKP uses USDT and Monero to fund global attacks.
-
Trump defends $1.4B crypto windfall as CLARITY Act odds slide
U.S. President Donald Trump has defended the financial gains disclosed in his latest filings after records showed he earned at least $1.4 billion from crypto-related ventures, while market expectations for the CLARITY Act’s passage this year have weakened. According to…
-
Goliath Ventures CEO pleads guilty in $400 million crypto Ponzi case
Christopher Delgado allegedly used investor funds for a lavish lifestyle, including luxury properties and vehicles, while running a fraudulent scheme from 2023 to 2026.
-
Tokenized Google stock inflated 7,700% in rare DeFi lending exploit
~$403K · An attacker inflated the value of a tokenized Google share used as collateral to about 78 times its real price, then borrowed against it, leaving roughly $403,000 in bad debt.
- Arcus Rootchain Contracts Audit
-
H1 2026 Crypto Hacks Reach Record High as Losses Fall Below USD 1 Billion | TRM Labs
~$1.00B · Crypto hack incidents hit a record 207 in H1 2026, but losses fell to USD 972M. TRM's analysis breaks down North Korea's role and the two threat models defining 2026.
-
Could the SpaceX, OpenAI, and Anthropic IPO wave drain crypto’s liquidity?
SpaceX, OpenAI, and Anthropic IPO could pull over $240B of equity supply into the market. Does the money come out of crypto?
-
Crypto hack theft falls 7% in June to $76 million as Humanity Protocol tops list: PeckShield
~$76.0M · Crypto hacks hit $75.9M across 40 incidents in June, down 7.1% from May, led by the $31M Humanity Protocol exploit, PeckShield said.
-
Ouinex says its trading platform addresses structural flaws in crypto markets
Modern day crypto trading has become a deeply fragmented battleground that favors the institutional algorithms and punishes the retail trader. On one hand, there are high-frequency funds exploiting total visibility over public order books; on the other hand, ordinary market…
-
South Korea FSC refers crypto whale case to prosecutors
South Korea’s FSC referred two crypto manipulation cases to prosecutors, including a whale accused of a pump-and-dump scheme.
-
Goliath Ventures CEO Pleads Guilty to $250M Crypto Ponzi Scheme
Christopher Delgado’s "liquidity pool" fraud took in at least $400 million, with the proceeds spent on mansions, Lamborghinis, and Rolexes.
-
Why Ask Credentials If There Are Secret Codes?, (Wed, Jul 1st)
This morning, an interesting phishing email hit my mailbox. It targets Metamask[1], a cryptocurrency wallet, available as a browser extension and a mobile app, that lets users store, send, and receive crypto money. It's pretty popular, so a juicy target for criminals. In February, I already mentioned a campaign against them[2].
-
Trump Discloses Over $1.2 Billion in Crypto Earnings, $50M in Bitcoin Holdings
The president’s annual financial disclosure report was released on Tuesday.
-
How Michael Saylor replaced ‘bitcoin’ with ‘credit’
A new audit of Michael Saylor’s posts charts the moment BTC's loudest evangelist switched his focus to credit. The post How Michael Saylor replaced ‘bitcoin’ with ‘credit’ appeared first on Protos.
-
The Notorious Bug Digest #9: Rule Downgrade, ZK Misconstraint, and the Aftermath Exploit
Introduction Welcome to The Notorious Bug Digest #9 - a curated compilation of insights into recent blockchain bugs and security incidents. When our security researchers aren’t diving into audits, they dedicate time to staying up-to-date with the latest in the security space, analyzing audit reports, and dissecting onchain incidents. We believe this knowledge is invaluable to the broader security community, offering a resource for researchers to sharpen their skills and helping newcomers navigate the world of blockchain security. Join us as we explore this batch of bugs together!
-
Dutch Prosecutors Seek to Bankrupt Crypto Platform Knaken After Funds Frozen
Prosecutors asked a Rotterdam court to wind up the unlicensed exchange, which has locked some 30,000 customers out of their crypto.
-
SecondFi - Rekt
$2.4M · A single missing secret in SecondFi's signing code made every on-chain transaction a private key disclosure. Attackers drained $2.4 million from 374 wallets on Cardano. One line of missing code, nothing more. Just reading what was already there.
-
Edel — exploit
$403K · Technique: Protocol Logic / Flashloan Price Oracle Attack. Chain: Ethereum. Target: DeFi Protocol. Reported loss ~$403,000.
Sources unavailable: CertiK (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); ConsenSys Diligence (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); Cantina / Spearbit (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); pcaversaccio (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); Chainabuse (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); Arkham Intelligence (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); @PeckShieldAlert (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); @CertiKAlert (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); @CyversAlerts (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); @BlockSecTeam (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); @AnciliaInc (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); @Phalcon_xyz (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); @zachxbt (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); @SlowMist_Team (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); @MistTrack_io (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); @realScamSniffer (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); @samczsun (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); @tayvano_ (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); @spreekaway (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); @_SEAL_Org (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); @hypernative (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); @HalbornSecurity (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); @Beosin_com (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); @GoPlusSecurity (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); @Quantstamp (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); @Chainalysis (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); @TrugardLabs (HTTP 402: {"account_id":1844050664084611077,"title":"CreditsDepleted","detail":"Your enrolled account [1844050664084611077] does not have any credits to fulfill this request.","type":"https://api.twitter.com/2…); Immunefi (Feed not recognized as RSS 1 or 2.)
Generated by GM Security · automated digest, verify before acting.