⬢ GM Security — 2026-07-10: $1.12B across 27 incidents

Daily crypto security briefing

2026-07-10 08:00 UTC · last 72h · 27 items · $1.12B reported losses · 22 sources

📊 Trend tracker

• 20 new today · 7 developing
• 7-day: 101 incidents, $3.01B stolen (+138% vs prior week)
• 30-day: 388 incidents, $5.29B stolen
• 7-day vectors: phishing / wallet drainer (3), governance attack (2), bridge exploit (2)
• Repeat targets (30d): bitcoin (17), certik (10), polymarket (8), trump (8), coinbase (7)

Last 24 hours

• [OTHER · DEVELOPING · day 7] eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up (The Defiant)
• [OTHER · NEW] Live markets: Bitcoin ETFs bleed again while ether funds snap a five-day inflow streak — ~$95.0M (CoinDesk)
• [EXPLOIT · NEW] Zcash confirms July 28 Ironwood activation after Orchard bug (crypto.news)
• [EXPLOIT · NEW] Compromised Injective SDK sends wallet keys through fake telemetry (crypto.news)
• [EXPLOIT · NEW] Ethereum Foundation reveals why AI still fails at finding real bugs (crypto.news)
  also: Decrypt
• [ADVISORY · NEW] Coinbase Chief Legal Officer Paul Grewal steps down, remains in advisory role (The Block)
• [OTHER · NEW] CryptoQuant says bitcoin rebound remains a bear-market recovery, not a trend reversal (The Block)
• [SCAM · NEW] Hong Kong SFC forces crypto platforms to ditch SMS authentication (crypto.news)
• [ENFORCEMENT · NEW] Interpol Ties $122.5M Crypto Wallet to Romance Scam Ring (The Defiant)
• [ENFORCEMENT · NEW] Circle’s refusal to ‘burn and reissue’ stolen USDC angers prosecutors, report (Protos)
• [ENFORCEMENT · NEW] Summer.fi Hacker Moves $1.35M Into Tornado Cash (The Defiant)
• [EXPLOIT · NEW] Crypto hack losses fall below $1 billion in H1 2026 despite record attack volume: Immunefi — ~$1.00B (The Block)
• [EXPLOIT · NEW] Summer Finance - Rekt — $6.0M (rekt.news Leaderboard)
• [EXPLOIT · NEW] Schneider Electric Easergy MiCOM Px40 Series (CISA Cybersecurity Advisories)
• [ENFORCEMENT · DEVELOPING · day 3] XRP price prediction after breakout puts $1.14 and $1.18 back in focus (crypto.news)
• [ENFORCEMENT · NEW] INTERPOL operation blocks illicit crypto transfers and leads to 5,811 arrests (crypto.news)
• [OTHER · DEVELOPING · day 2] Ethereum price holds $1,750 as Middle East tensions and $1,800 wall cap recovery (crypto.news)
• [ENFORCEMENT · NEW] A 20-Year-Old's Crypto Wallet Moved $123M in Romance-Scam Cash: Interpol Says (Decrypt)

Earlier · 24–72h

• [ENFORCEMENT · NEW] DOJ warning puts Binance crypto freeze policy in the spotlight (crypto.news)
• [SCAM · NEW] Ethereum phishing scam drains nearly $1 million from crypto wallet — ~$1.0M (crypto.news)
• [ENFORCEMENT · NEW] Malaysia Seizes Over 75,000 Crypto Mining Rigs in Power-Theft Crackdown (Decrypt)
• [ADVISORY · NEW] Kraken Wins $22M From Auditor That Abandoned It During Operation Choke Point 2.0 (Decrypt)
• [ENFORCEMENT · DEVELOPING · day 2] Kenya's Markets Regulator Seeks Blockchain Tool to Track Crypto Crime (Decrypt)
• [EXPLOIT · DEVELOPING · day 3] BonkDAO Attacker Moves $19M Loot Into New 'BONK 2.0' DAO — ~$20.0M (The Defiant)
• [EXPLOIT · DEVELOPING · day 2] Morning Minute: Strategy Turns Net Seller — ~$150K (Decrypt)

🧠 Deep reads

• OpenZeppelin and T‑REX Network Partner to Advance Institutional Compliance Infrastructure (OpenZeppelin)
• Symbiotic Core v2 Adapters Audit (OpenZeppelin)

💡 Security thought-spark

LLM triage prompt: "Here is a transaction trace — explain in plain English what it did, then flag anything that looks like value leaving the protocol unexpectedly."

Full data: https://gmsecurity.net/briefing.json. Feedback or a source to add? [email protected]. George Donnelly offers Web3 development & security consulting.