⬢ GM Security — 2026-07-07: $1.47B across 22 incidents

Daily crypto security briefing

2026-07-07 08:00 UTC · last 72h · 22 items · $1.47B reported losses · 22 sources

📊 Trend tracker

• 18 new today · 4 developing
• 7-day: 125 incidents, $3.02B stolen (+241% vs prior week)
• 30-day: 349 incidents, $4.12B stolen
• 7-day vectors: phishing / wallet drainer (4), flash-loan attack (3), bridge exploit (3)
• Repeat targets (30d): bitcoin (16), certik (10), trump (8), polymarket (7), humanity (6)

Last 24 hours

• [OTHER · DEVELOPING · day 5] eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up (The Defiant)
• [ENFORCEMENT · NEW] Polymarket hit with New York lawsuit over Strategy Bitcoin market (crypto.news)
• [EXPLOIT · NEW] BONK faces $20 million treasury drain after attacker spends $4 million to pass malicious proposal — ~$20.0M (CoinDesk)
• [ENFORCEMENT · DEVELOPING · day 2] President Trump’s Bitcoin reserve plan stalls as agencies debate control (crypto.news)
• [EXPLOIT · NEW] Solana Meme Coin Bonk Treasury Drained of $20 Million in 'Malicious' Governance Attack — ~$20.0M (Decrypt)
• [ADVISORY · NEW] EMURGO Says Hacked Cardano Wallet SecondFi Won't Reopen (The Defiant)
• [OTHER · NEW] BonkDAO loses $20 million following ‘malicious governance proposal’ attack (The Block)
• [ENFORCEMENT · NEW] Judge revives fraud claim against Barry Silbert, DCG in Genesis Yield lawsuit (The Block)
• [EXPLOIT · NEW] DeFi platform Summer Finance loses $6M in vault exploit — ~$8.0M (Protos)
• [OTHER · DEVELOPING · day 2] Solana price remains on recovery path as on-chain activity reaches new high (crypto.news)
• [EXPLOIT · NEW] Summer Finance Drained of $6M in Flash Loan Exploit — ~$6.0M (The Defiant)
• [SCAM · NEW] BlockThreat - Week 27, 2026 (BlockThreat)
• [ENFORCEMENT · NEW] Russia built a sanctions-proof stablecoin. The data says it is dying (crypto.news)
• [EXPLOIT · NEW] DeFi protocol Summer.fi halts Lazy Summer vaults after $6 million exploit — ~$6.0M (CoinDesk)
• [ENFORCEMENT · NEW] Two giants, same model: What Garlinghouse’s attack on Saylor reveals about Ripple (crypto.news)
• [EXPLOIT · NEW] The $6 trillion standoff: Banks vs crypto over stablecoin yield (crypto.news)
• [EXPLOIT · NEW] SecondFi won’t reopen after Cardano wallet breach (crypto.news)
• [EXPLOIT · NEW] DeFi protocol Summer Finance exploited for $6 million; analysts point to flash loan attack — ~$70.9M (The Block)

Earlier · 24–72h

• [ENFORCEMENT · DEVELOPING · day 2] Nigel Farage failed to declare funding from crypto gambling figure convicted of fraud: Sunday Times (The Block)
• [EXPLOIT · NEW] Lazy Summer Protocol — exploit — $6.0M (DeFiLlama Hacks DB)

🧠 Deep reads

• CertiK Says H1 2026 Web3 Losses Topped $1.31B, Up 28% Excluding Bybit Baseline (The Defiant)
• BonkDAO Treasury Drained of $20M via Malicious Proposal (The Defiant)

💡 Security thought-spark

Bug-bounty math: a $50k Immunefi bounty is cheap insurance against a $5M exploit. Is yours live, well-scoped, and actually paid out on time?

Full data: https://gmsecurity.net/briefing.json. Feedback or a source to add? [email protected]. George Donnelly offers Web3 development & security consulting.