28 crypto-security item(s) in the window with ~$28.0M in reported losses The largest is "BonkDAO - Rekt" ($19.3M). Dominant vectors: governance attack, phishing / wallet drainer, supply-chain attack, access-control flaw.

• 🧊 On-chain — Tether USDT freezes (7d): 13 addresses (2026-07-10). Source: Dune
• governance attack activity observed (1 item(s))
• phishing / wallet drainer activity observed (1 item(s))
• supply-chain attack activity observed (1 item(s))

• eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up
  eToro has become a strategic investor in Extended, an onchain perpetual futures exchange, and said the round begins a partnership with Zengo, the self-custody wallet eToro acquired earlier this year. Neither company disclosed the investment size.
  The Defiant · Sat, 11 Jul 2026 08:00:05 GMT
• DOJ abandons BitClub founder case despite $722M fraud claims
  The U.S. Department of Justice has reportedly moved to dismiss its criminal case against the founder of BitClub Network despite allegations that the crypto mining scheme defrauded investors of $722 million. According to a report by Bloomberg Law, citing two…
  crypto.news · Sat, 11 Jul 2026 06:16:17 GMT
• DOJ to drop charges against man accused in $722 million BitClub crypto Ponzi scheme: Bloomberg
  A former contestant on 'The Apprentice' is one of the persons urging the DOJ to drop the charges, the report said.
  The Block · Fri, 10 Jul 2026 20:12:46 GMT
• Lombard LBTC Rate Limits Audit
  Summary
  OpenZeppelin · Fri, 10 Jul 2026 15:58:48 GMT
• Can hackers drain Tangem cards? Ledger reveals laser attack
  ~$250K · Ledger researchers found an unpatchable Tangem card flaw, but exploiting it requires physical access, specialist skills and a $250K lab.
  crypto.news · Fri, 10 Jul 2026 13:57:43 GMT
• The SecondFi recovery: 16 million stolen ADA and crypto’s restitution experiment
  ~$2.4M · An exploit drained roughly 16 million ADA, about $2.4 million, from 374 Cardano wallets in late June. What happened next is the interesting part: EMURGO, one of Cardano’s founding entities, announced a recovery path to return the assets within two…
  crypto.news · Fri, 10 Jul 2026 13:45:00 GMT
• BonkDAO - Rekt
  $19.3M · $19.3 million drained from BonkDAO in a pure governance attack. An attacker bought 1% of BONK, buried a treasury transfer inside a boring proposal, and passed it with 2.9% turnout. No code broke., no keys leaked, just crooked token-weighted governance voting math.
  rekt.news Leaderboard · governance attack · Fri, 10 Jul 2026 12:00:00 GMT
• Jailed Fraudster Charged With Moving $290K in Forfeited Crypto From Prison
  A convicted launderer serving time for a $5 million scheme allegedly moved crypto that a court had ordered him to forfeit.
  Decrypt · Fri, 10 Jul 2026 11:30:57 GMT
• Ledger researchers disclose Tangem card flaw; Tangem says risk to everyday users is ‘virtually non-existent’
  Ledger researchers disclosed a laser attack that resets Tangem card passwords by bypassing a recovery-state check in the firmware.
  The Block · Fri, 10 Jul 2026 11:08:31 GMT
• What are wallet drainers? Inside the approval-phishing industry
  Wallet drainers stole billions by tricking users into signing malicious approvals. How they work, drainer-as-a-service, and how to revoke the danger.
  crypto.news · phishing / wallet drainer · Fri, 10 Jul 2026 10:54:23 GMT
• Intesa Sanpaolo bought XRP through a trust. How banks actually hold crypto
  Italy’s largest bank disclosed an $18 million XRP position, and the interesting part is not the size but the plumbing: the exposure runs through Grayscale’s trust, not through wallets, keys, or even the shiny new ETFs. Bank crypto exposure has…
  crypto.news · Fri, 10 Jul 2026 10:40:00 GMT
• DOJ charges inmate over alleged $290K forfeited crypto theft
  ~$290K · DOJ charges inmate Rossen Iossifov over an alleged $290,000 crypto theft involving forfeited funds, exchanges and mixing services.
  crypto.news · Fri, 10 Jul 2026 10:00:00 GMT
• DOJ charges federal inmate over alleged theft of $290,000 in crypto forfeited to US government
  ~$290K · Federal inmate Rossen Iossifov faces new charges for allegedly taking $290,000 in government-forfeited cryptocurrency.
  The Block · Fri, 10 Jul 2026 09:13:08 GMT
• TrackAgent: The On-Chain AI Intelligence Agent Now Powers SlowMist’s Free Stolen Asset Assessment
  TrackAgent: An On-Chain AI Intelligence Agent for Real-World Theft Investigations TrackAgent is an AI-powered on-chain investigation system purpose-built for tracing stolen crypto assets in real-world theft cases. It is neither a traditional address lookup tool nor an automation script that simply follows predefined workflows. Instead, it acts more like an on-chain detective — continuously analyzing fund movements around a case, identifying critical nodes, determining promising investigation paths, and organizing complex on-chain activity into findings that are easy to understand, verify, and…
  SlowMist · Fri, 10 Jul 2026 08:00:32 GMT
• Live updates: Bitcoin rises to $64,000 as SK Hynix opens for trade after $26.5 billion IPO
  Spot bitcoin funds lost about $95 million on Thursday and ether funds roughly $52 million, ending the one bright spot in crypto's institutional flows even as prices rallied.
  CoinDesk · Fri, 10 Jul 2026 06:21:34 GMT
• Zcash confirms July 28 Ironwood activation after Orchard bug
  Zcash has scheduled its Ironwood network upgrade for July 28, setting the activation date for the protocol change designed to close the Orchard shielded pool and help verify whether the previously disclosed vulnerability was ever exploited. Zcash core developer Sean…
  crypto.news · Fri, 10 Jul 2026 05:58:34 GMT
• Compromised Injective SDK sends wallet keys through fake telemetry
  A malicious update to an Injective developer package has exposed private keys and seed phrases after being downloaded more than 300 times, Socket has found. According to security firm Socket, version 1.20.21 of the @injectivelabs/sdk-ts npm package, which has about…
  crypto.news · supply-chain attack · Fri, 10 Jul 2026 05:43:44 GMT
• Coinbase Chief Legal Officer Paul Grewal steps down, remains in advisory role
  Coinbase Chief Legal Officer Paul Grewal joined the firm in mid-2020 to lead its legal, compliance and government relations operations.
  The Block · Thu, 09 Jul 2026 21:13:44 GMT
• Ethereum Foundation Turns AI Loose on ETH Network to Find Bugs Before Hackers Do
  Ethereum researchers are using AI agents to hunt for vulnerabilities, shifting security work from finding bugs to proving which ones are real.
  Decrypt · Thu, 09 Jul 2026 18:27:47 GMT
• Interpol Ties $122.5M Crypto Wallet to Romance Scam Ring
  Thai police made two arrests as Interpol's 97-country sweep logged 5,811 arrests and $293 million in intercepted assets.
  The Defiant · Thu, 09 Jul 2026 17:14:06 GMT
• Circle’s refusal to ‘burn and reissue’ stolen USDC angers prosecutors, report
  Prosecutors in Wisconsin and New York are upset with stablecoin giant Circle after it repeatedly hindered attempts to recover stolen funds. The post Circle’s refusal to ‘burn and reissue’ stolen USDC angers prosecutors, report appeared first on Protos.
  Protos · Thu, 09 Jul 2026 16:58:18 GMT
• Summer.fi Hacker Moves $1.35M Into Tornado Cash
  Summer.fi's own post-mortem confirms the attacker began laundering the $6M haul through the mixer, calling it a sign of "limited intent to return the funds voluntarily."
  The Defiant · Thu, 09 Jul 2026 16:24:47 GMT
• Summer Finance - Rekt
  $6.0M · $6.04 million stolen from Summer Finance's Lazy Summer depositors when a capped-for-removal Ark was still counted in the vault’s value, letting a donated stale asset inflate the share price and drain real liquidity.
  rekt.news Leaderboard · Thu, 09 Jul 2026 12:00:00 GMT
• Schneider Electric Easergy MiCOM Px40 Series
  View CSAF Summary Schneider Electric is aware of a vulnerability in its Easergy MiCOM Px40 Series products. The [Easergy MiCOM Px40](https://www.se.com/ww/en/product-subcategory/4725-easergy-micom-px40-series/?filter=business-6-medium-voltage-distribution-and-grid-automation) is a protection relay series for Medium Voltage, High Voltage and Extra High Voltage protection. Failure to apply the mitigations provided below may risk unauthorized exposure of basic device identification through the SNMP protocol. The following versions of Schneider Electric Easergy MiCOM Px40 Series are affected: Eas…
  CISA Cybersecurity Advisories · access-control flaw · Thu, 09 Jul 2026 12:00:00 GMT
• Symbiotic Core v2 Adapters Audit
  Summary Type: DeFi Timeline: 2026-06-08 → 2026-06-17 Languages: Solidity Findings Total issues: 28 (11 resolved, 2 partially resolved) Critical: 0 (0 resolved) · High: 0 (0 resolved) · Medium: 7 (1 resolved, 2 partially resolved) · Low: 9 (4 resolved) Notes & Additional Information 12 notes raised (6 resolved) Client Reported Issues 0 reported issues (0 resolved)
  OpenZeppelin · Thu, 09 Jul 2026 11:49:35 GMT
• A 20-Year-Old's Crypto Wallet Moved $123M in Romance-Scam Cash: Interpol Says
  The two Thai arrests were part of Operation First Light, a 97-country sweep that logged 5,811 arrests and intercepted $293 million.
  Decrypt · Thu, 09 Jul 2026 09:21:54 GMT
• Malaysia Seizes Over 75,000 Crypto Mining Rigs in Power-Theft Crackdown
  More than 3,000 raids since 2022 have led to 629 arrests, as authorities target miners siphoning electricity from the national grid.
  Decrypt · Wed, 08 Jul 2026 15:40:15 GMT
• Kraken Wins $22M From Auditor That Abandoned It During Operation Choke Point 2.0
  The crypto exchange says an arbitrator sided with it after accounting firm Mazars walked away from a nearly finished audit.
  Decrypt · Wed, 08 Jul 2026 15:05:02 GMT

Sources unavailable: CertiK (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); ConsenSys Diligence (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Cantina / Spearbit (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); pcaversaccio (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Chainabuse (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Arkham Intelligence (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @PeckShieldAlert (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @CertiKAlert (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @CyversAlerts (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @BlockSecTeam (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @AnciliaInc (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Phalcon_xyz (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @zachxbt (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @SlowMist_Team (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @MistTrack_io (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @realScamSniffer (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @samczsun (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @tayvano_ (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @spreekaway (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @_SEAL_Org (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @hypernative (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @HalbornSecurity (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Beosin_com (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @GoPlusSecurity (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Quantstamp (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Chainalysis (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @TrugardLabs (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Immunefi (Invalid character in tag name Line: 34 Column: 49 Char: @)

📸 Share image for socials — 1200×630

⬇ Download PNG

Generated by GM Security · automated digest, verify before acting.