⬢ GM Security — 2026-07-02: $1.37B across 27 incidents

Daily crypto security briefing

2026-07-02 08:00 UTC · last 72h · 27 items · $1.37B reported losses · 22 sources

📊 Trend tracker

• 18 new today · 9 developing
• 7-day: 134 incidents, $1.57B stolen (+73% vs prior week)
• 30-day: 292 incidents, $2.57B stolen
• 7-day vectors: smart-contract bug (7), bridge exploit (6), private-key compromise (5)
• Repeat targets (30d): bitcoin (9), certik (9), polymarket (6), coinbase (6), spacex (5)

Last 24 hours

• [OTHER · NEW] Metaplanet adds 2,823 BTC while Bitcoin income revenue drops 41% (crypto.news)
• [OTHER · NEW] XRP edges higher as whale activity rises while retail traders stay cautious (CoinDesk)
• [ENFORCEMENT · NEW] FBI Director Kash Patel caught sleeping on required disclosure of six-figure MSTR investment: Report (CoinDesk)
• [ENFORCEMENT · NEW] France reports 77 crypto kidnapping and extortion cases in 2026 (crypto.news)
• [OTHER · NEW] ‘We desperately need legislation that includes an agreement on ethics:’ Trump financial filing adds urgency to crypto bill negotiations (The Block)
• [ENFORCEMENT · NEW] Chinese Exile Miles Guo Sentenced to 30 Years for $1B Crypto Fraud Scheme (The Defiant)
• [EXPLOIT · NEW] Drift Protocol Rebrands to Velocity DEX Ahead of Relaunch — ~$295.0M (The Defiant)
• [OTHER · NEW] Bitcoin Pops Off 21-Month Low to $60K as Soft Data Eases Rate-Hike Fears (Decrypt)
• [ENFORCEMENT · DEVELOPING · day 3] OFAC Sanctions 134 ISKP Cryptocurrency Addresses Tied to USD 2 Million in Terrorist Financing | TRM Labs (TRM Labs)
• [OTHER · NEW] Trump defends $1.4B crypto windfall as CLARITY Act odds slide (crypto.news)
• [ENFORCEMENT · NEW] Goliath Ventures CEO pleads guilty in $400 million crypto Ponzi case (CoinDesk)
• [EXPLOIT · NEW] Tokenized Google stock inflated 7,700% in rare DeFi lending exploit — ~$403K (CoinDesk)
• [ADVISORY · NEW] Arcus Rootchain Contracts Audit (OpenZeppelin)
• [EXPLOIT · NEW] H1 2026 Crypto Hacks Reach Record High as Losses Fall Below USD 1 Billion  | TRM Labs — ~$1.00B (TRM Labs)
• [EXPLOIT · NEW] Could the SpaceX, OpenAI, and Anthropic IPO wave drain crypto’s liquidity? (crypto.news)
• [EXPLOIT · NEW] Crypto hack theft falls 7% in June to $76 million as Humanity Protocol tops list: PeckShield — ~$76.0M (The Block)
• [OTHER · NEW] Ouinex says its trading platform addresses structural flaws in crypto markets (crypto.news)
• [ENFORCEMENT · DEVELOPING · day 4] South Korea FSC refers crypto whale case to prosecutors (crypto.news)
  also: The Block
• [ENFORCEMENT · NEW] Goliath Ventures CEO Pleads Guilty to $250M Crypto Ponzi Scheme (Decrypt)

Earlier · 24–72h

• [SCAM · DEVELOPING · day 2] Why Ask Credentials If There Are Secret Codes?, (Wed, Jul 1st) (SANS ISC)
• [OTHER · DEVELOPING · day 2] Trump Discloses Over $1.2 Billion in Crypto Earnings, $50M in Bitcoin Holdings (Decrypt)
• [ADVISORY · DEVELOPING · day 2] How Michael Saylor replaced ‘bitcoin’ with ‘credit’ (Protos)
• [ENFORCEMENT · DEVELOPING · day 2] Dutch Prosecutors Seek to Bankrupt Crypto Platform Knaken After Funds Frozen (Decrypt)
• [EXPLOIT · DEVELOPING · day 2] SecondFi - Rekt — $2.4M (rekt.news Leaderboard)
• [EXPLOIT · DEVELOPING · day 2] Edel — exploit — $403K (DeFiLlama Hacks DB)

🧠 Deep reads

• The Notorious Bug Digest #9: Rule Downgrade, ZK Misconstraint, and the Aftermath Exploit (OpenZeppelin)
• OFAC Updates ISIS-Khorasan Sanctions with Over 100 Cryptocurrency Wallets (Chainalysis)

💡 Security thought-spark

Which of your contracts are upgradeable, and who controls the proxy admin? An unprotected upgrade path is a 100%-loss bug hiding in plain sight.

Full data: https://gmsecurity.net/briefing.json. Feedback or a source to add? [email protected]. George Donnelly offers Web3 development & security consulting.