30 crypto-security item(s) in the window with ~$1.47B in reported losses The largest is "CertiK Says H1 2026 Web3 Losses Topped $1.31B, Up 28% Excluding Bybit Baseline" (~$1.31B). Dominant vectors: governance attack, bridge exploit, smart-contract bug, flash-loan attack.
-
eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up
eToro has become a strategic investor in Extended, an onchain perpetual futures exchange, and said the round begins a partnership with Zengo, the self-custody wallet eToro acquired earlier this year. Neither company disclosed the investment size.
-
Tom Lee’s Bitmine adds $70 million worth of ETH to treasury: onchain analyst
Bitmine's most recent disclosure shows that it holds 5.74 million ETH, roughly 4.8% of Ethereum's circulating supply.
-
Russia advances crypto bill after dropping wallet address disclosure rule
Russia’s State Duma committee has approved a revised cryptocurrency regulation bill for its second reading, removing a proposed requirement to declare crypto wallet addresses while adding provisions for crypto-funded investments and new transfer controls. According to a statement shared through…
-
Secret Network may leave Cosmos for Arbitrum after bridge exploit
Secret Network proposes moving SCRT to Arbitrum, citing AI exploit risks, old Cosmos code, bridge losses, thin liquidity and a TVL drop.
-
CFTC sues crypto pool operator over alleged $14M fraud
CFTC sues Trevor Vernon and Argent Capital over alleged $14M crypto pool fraud involving Bitcoin, Ether, futures, and investor funds misuse.
-
CFTC charges North Carolina man over alleged $14 million crypto, futures fraud
The CFTC charged a NC man and his company after the agency said he swindled about 60 people out of $14 million in a commodity pool.
-
Kenya's Markets Regulator Seeks Blockchain Tool to Track Crypto Crime
The Capital Markets Authority wants to monitor over 20 blockchains for fraud, laundering, and sanctions evasion under Kenya's new crypto law.
-
BlackRock breaks ETF drought as Bitcoin flashes fresh rally signal
BlackRock’s iShares Bitcoin Trust has recorded its strongest inflow in weeks, helping lift total U.S. spot Bitcoin ETF demand to $265.7 million and adding fresh support to Bitcoin’s latest recovery. According to data from Farside Investors, BlackRock’s iShares Bitcoin Trust…
-
BonkDAO Attacker Moves $19M Loot Into New 'BONK 2.0' DAO
~$20.0M · The wallet behind BonkDAO's $20 million governance attack has parked most of the stolen BONK in a multisig controlled by a newly created shadow DAO, Chainalysis said in a post on its official X account Tuesday.
-
Ctrl Wallet shuts down after exploit, urges users to move funds
Ctrl Wallet has announced the permanent shutdown of its services after a recent security exploit, giving users until Aug. 3 to move their crypto assets before core wallet functions go offline. Ctrl Wallet said in a blog post published Tuesday…
-
What is a governance attack? How BonkDAO lost $20M in a single vote
~$20.0M · On July 6, 2026, someone spent about four million dollars buying BONK, used it to control almost a hundred percent of a seven-wallet vote, and legally walked off with twenty million from the DAO’s treasury. No code was hacked. The…
-
What are cross-chain bridges? Why they keep getting hacked
Blockchains cannot talk to each other on their own. Bridges are the software that moves value between them, and they have leaked more money to hackers than any other kind of crypto infrastructure, billions across a handful of catastrophic breaches.…
-
Former Tether investment chief is looking to sell part of his stake in the stablecoin giant: Bloomberg
Richard Heathcote is reportedly working with PJT Partners to find a buyer for a small part of his 1.26% holding in the issuer of USDT following his transition to an advisory role.
-
SecondFi is shutting down after Cardano wallet exploit
Cardano wallet firm SecondFi says it will not resume "normal operations" and will instead focus on "returning assets to affected users." The post SecondFi is shutting down after Cardano wallet exploit appeared first on Protos.
-
Solana price prediction as tokenized assets drive network activity to record highs
Solana has extended its July rally after record on-chain activity, tokenized stock issuance, and steady ETF inflows revived bullish sentiment. According to data from crypto.news, Solana (SOL) extended its recovery this week, gaining roughly 11% over several sessions to trade…
-
Morning Minute: Strategy Turns Net Seller
~$150K · Michael Saylor becomes a major Bitcoin seller. A memecoin gets "exploited" via governance. And Bernstein doubles down on a $150k BTC call.
-
How to buy crypto presales safely
DOGEBALL is highlighted as a crypto presale focused on smart contract audits, utility, and liquidity planning as investors assess early-stage opportunities. Crypto presales allow investors to buy new tokens before they hit public markets. Finding an early project can lead…
-
Single address votes 99.9% to drain BONK treasury of $21M
~$21.0M · A vote was put to BONK holders last week, with one voter making up 99.9% of the turnout and sending 4.4T tokens to an unknown address. The post Single address votes 99.9% to drain BONK treasury of $21M appeared first on Protos.
-
Peter Schiff calls Strategy a Ponzi after $216M BTC sale
Peter Schiff called Strategy’s Bitcoin model a “mid-cycle Ponzi” after the firm sold 3,588 BTC to fund Digital Credit dividends.
-
Two traders sue Polymarket over disputed resolution of Strategy bitcoin sale market
Plaintiffs allege Polymarket wrongly resolved the market as "No" despite Strategy's SEC filing disclosing it sold 32 BTC between May 26 and May 31.
-
OpenZeppelin and T‑REX Network Partner to Advance Institutional Compliance Infrastructure
As strategic technical partners, OpenZeppelin and T-REX Network are working together to co-design the next phase of the T-REX Protocol, the infrastructure layer also known as ERC-3643, the onchain compliance standard for regulated assets. The partnership focuses on hardening the Protocol's foundations and delivering ERC-3643 as a standard audited OpenZeppelin Contracts library component accessible to developers.
-
BONK faces $20 million treasury drain after attacker spends $4 million to pass malicious proposal
~$20.0M · The attacker bought enough of the memecoin's tokens to pass a governance proposal that sent the group's holdings to a wallet they controlled, then began selling.
-
Solana Meme Coin Bonk Treasury Drained of $20 Million in 'Malicious' Governance Attack
~$20.0M · The Bonk DAO wallet was exploited for roughly $20 million worth of the prominent dog-themed meme coin on Solana.
-
EMURGO Says Hacked Cardano Wallet SecondFi Won't Reopen
EMURGO, the Cardano-founding entity behind SecondFi, said Monday the hacked wallet service will not resume normal operations even after ongoing security audits conclude, telling all users to migrate away using its official recovery process. "Although we believe unaffected users remain safe,…
-
BonkDAO Treasury Drained of $20M via Malicious Proposal
~$20.0M · BonkDAO, the decentralized autonomous organization tied to the Solana-based memecoin BONK, said Monday it was the target of a malicious governance proposal that drained an estimated $20 million worth of BONK tokens from its treasury, according to a post on its official X account. The DAO said the…
-
DeFi platform Summer Finance loses $6M in vault exploit
~$8.0M · Losses totalling $8M kick off the week’s DeFi security news, while a bug on Aptos put “most assets across all chains” at risk. The post DeFi platform Summer Finance loses $6M in vault exploit appeared first on Protos.
-
Summer Finance Drained of $6M in Flash Loan Exploit
~$6.0M · DeFi vault platform Summer Finance was drained of roughly $6 million on Monday in an exploit that security firm Blockaid said its detection system flagged as it was unfolding. Blockaid posted the exploit transaction, the attacker's address and the affected Lazy Summer contracts within minutes of…
-
CertiK Says H1 2026 Web3 Losses Topped $1.31B, Up 28% Excluding Bybit Baseline
~$1.31B · Web3 security incidents cost the industry more than $1.31 billion across 344 events in the first half of 2026, according to CertiK's Hack3D H1 2026 Report, published Monday. Net losses stood near $1.2 billion after frozen and recovered funds, the blockchain security firm said. Headline totals show…
-
BlockThreat - Week 27, 2026
$1.2M stolen across 3 incidents. A peaceful week with new intel on DPRK backdoors, social engineering tactics, and security research.
-
BonkDAO — exploit
$21.3M · Technique: Protocol Logic / Malicious Governance Proposal. Chain: Solana. Target: Token. Reported loss ~$21,300,000.
Sources unavailable: CertiK (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); ConsenSys Diligence (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Cantina / Spearbit (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); pcaversaccio (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Chainabuse (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Arkham Intelligence (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @PeckShieldAlert (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @CertiKAlert (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @CyversAlerts (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @BlockSecTeam (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @AnciliaInc (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Phalcon_xyz (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @zachxbt (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @SlowMist_Team (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @MistTrack_io (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @realScamSniffer (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @samczsun (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @tayvano_ (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @spreekaway (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @_SEAL_Org (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @hypernative (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @HalbornSecurity (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Beosin_com (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @GoPlusSecurity (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Quantstamp (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Chainalysis (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @TrugardLabs (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Immunefi (Invalid character in tag name Line: 34 Column: 49 Char: @)
Generated by GM Security · automated digest, verify before acting.