⬢ GM Security — 2026-07-08: $1.47B across 30 incidents

Daily crypto security briefing

2026-07-08 08:00 UTC · last 72h · 30 items · $1.47B reported losses · 22 sources

📊 Trend tracker

• 19 new today · 11 developing
• 7-day: 127 incidents, $3.08B stolen (+2653% vs prior week)
• 30-day: 368 incidents, $4.19B stolen
• 7-day vectors: bridge exploit (4), governance attack (3), flash-loan attack (3)
• Repeat targets (30d): bitcoin (17), certik (10), polymarket (8), trump (8), how (6)

Last 24 hours

• [OTHER · DEVELOPING · day 6] eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up (The Defiant)
• [OTHER · NEW] Tom Lee’s Bitmine adds $70 million worth of ETH to treasury: onchain analyst (The Block)
• [ENFORCEMENT · NEW] Russia advances crypto bill after dropping wallet address disclosure rule (crypto.news)
• [EXPLOIT · NEW] Secret Network may leave Cosmos for Arbitrum after bridge exploit (crypto.news)
• [OTHER · NEW] CFTC sues crypto pool operator over alleged $14M fraud (crypto.news)
• [ENFORCEMENT · NEW] CFTC charges North Carolina man over alleged $14 million crypto, futures fraud (The Block)
• [ENFORCEMENT · NEW] Kenya's Markets Regulator Seeks Blockchain Tool to Track Crypto Crime (Decrypt)
• [OTHER · NEW] BlackRock breaks ETF drought as Bitcoin flashes fresh rally signal (crypto.news)
• [EXPLOIT · DEVELOPING · day 2] BonkDAO Attacker Moves $19M Loot Into New 'BONK 2.0' DAO — ~$20.0M (The Defiant)
• [EXPLOIT · NEW] Ctrl Wallet shuts down after exploit, urges users to move funds (crypto.news)
• [EXPLOIT · NEW] What is a governance attack? How BonkDAO lost $20M in a single vote — ~$20.0M (crypto.news)
• [EXPLOIT · NEW] What are cross-chain bridges? Why they keep getting hacked (crypto.news)
• [ADVISORY · NEW] Former Tether investment chief is looking to sell part of his stake in the stablecoin giant: Bloomberg (CoinDesk)
• [EXPLOIT · NEW] SecondFi is shutting down after Cardano wallet exploit (Protos)
• [OTHER · DEVELOPING · day 3] Solana price prediction as tokenized assets drive network activity to record highs (crypto.news)
• [EXPLOIT · NEW] Morning Minute: Strategy Turns Net Seller — ~$150K (Decrypt)
• [ADVISORY · NEW] How to buy crypto presales safely (crypto.news)
• [EXPLOIT · NEW] Single address votes 99.9% to drain BONK treasury of $21M — ~$21.0M (Protos)
• [ENFORCEMENT · NEW] Peter Schiff calls Strategy a Ponzi after $216M BTC sale (crypto.news)
• [ENFORCEMENT · NEW] Two traders sue Polymarket over disputed resolution of Strategy bitcoin sale market (The Block)

Earlier · 24–72h

• [EXPLOIT · DEVELOPING · day 2] BONK faces $20 million treasury drain after attacker spends $4 million to pass malicious proposal — ~$20.0M (CoinDesk)
• [EXPLOIT · DEVELOPING · day 2] Solana Meme Coin Bonk Treasury Drained of $20 Million in 'Malicious' Governance Attack — ~$20.0M (Decrypt)
• [ADVISORY · DEVELOPING · day 2] EMURGO Says Hacked Cardano Wallet SecondFi Won't Reopen (The Defiant)
• [EXPLOIT · DEVELOPING · day 2] BonkDAO Treasury Drained of $20M via Malicious Proposal — ~$20.0M (The Defiant)
• [EXPLOIT · DEVELOPING · day 2] DeFi platform Summer Finance loses $6M in vault exploit — ~$8.0M (Protos)
• [EXPLOIT · DEVELOPING · day 2] Summer Finance Drained of $6M in Flash Loan Exploit — ~$6.0M (The Defiant)
• [SCAM · DEVELOPING · day 2] BlockThreat - Week 27, 2026 (BlockThreat)
• [EXPLOIT · NEW] BonkDAO — exploit — $21.3M (DeFiLlama Hacks DB)

🧠 Deep reads

• OpenZeppelin and T‑REX Network Partner to Advance Institutional Compliance Infrastructure (OpenZeppelin)
• CertiK Says H1 2026 Web3 Losses Topped $1.31B, Up 28% Excluding Bybit Baseline (The Defiant)

💡 Security thought-spark

Verify, don't trust the deploy: re-derive deployed bytecode from source and diff it. Malicious swaps happen at deploy time, after the audit.

Full data: https://gmsecurity.net/briefing.json. Feedback or a source to add? [email protected]. George Donnelly offers Web3 development & security consulting.