⬢ GM Security — 2026-07-11: $28.0M across 28 incidents

Daily crypto security briefing

2026-07-11 08:00 UTC · last 72h · 28 items · $28.0M reported losses · 22 sources

📊 Trend tracker

• 12 new today · 16 developing
• 7-day: 114 incidents, $3.03B stolen (+150% vs prior week)
• 30-day: 400 incidents, $5.31B stolen
• 7-day vectors: governance attack (3), phishing / wallet drainer (3), bridge exploit (2)
• Repeat targets (30d): bitcoin (17), certik (10), polymarket (8), trump (8), xrp (7)

Last 24 hours

• [OTHER · DEVELOPING · day 8] eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up (The Defiant)
• [ENFORCEMENT · NEW] DOJ abandons BitClub founder case despite $722M fraud claims (crypto.news)
• [ENFORCEMENT · NEW] DOJ to drop charges against man accused in $722 million BitClub crypto Ponzi scheme: Bloomberg (The Block)
• [ADVISORY · NEW] Lombard LBTC Rate Limits Audit (OpenZeppelin)
• [EXPLOIT · NEW] Can hackers drain Tangem cards? Ledger reveals laser attack — ~$250K (crypto.news)
• [EXPLOIT · DEVELOPING · day 2] The SecondFi recovery: 16 million stolen ADA and crypto’s restitution experiment — ~$2.4M (crypto.news)
• [EXPLOIT · NEW] BonkDAO - Rekt — $19.3M (rekt.news Leaderboard)
• [ENFORCEMENT · NEW] Jailed Fraudster Charged With Moving $290K in Forfeited Crypto From Prison (Decrypt)
• [OTHER · NEW] Ledger researchers disclose Tangem card flaw; Tangem says risk to everyday users is ‘virtually non-existent’ (The Block)
• [SCAM · DEVELOPING · day 2] What are wallet drainers? Inside the approval-phishing industry (crypto.news)
• [OTHER · NEW] Intesa Sanpaolo bought XRP through a trust. How banks actually hold crypto (crypto.news)
• [ENFORCEMENT · NEW] DOJ charges inmate over alleged $290K forfeited crypto theft — ~$290K (crypto.news)
• [ENFORCEMENT · NEW] DOJ charges federal inmate over alleged theft of $290,000 in crypto forfeited to US government — ~$290K (The Block)

Earlier · 24–72h

• [OTHER · NEW] Live updates: Bitcoin rises to $64,000 as SK Hynix opens for trade after $26.5 billion IPO (CoinDesk)
• [EXPLOIT · DEVELOPING · day 2] Zcash confirms July 28 Ironwood activation after Orchard bug (crypto.news)
• [EXPLOIT · DEVELOPING · day 2] Compromised Injective SDK sends wallet keys through fake telemetry (crypto.news)
• [ADVISORY · DEVELOPING · day 2] Coinbase Chief Legal Officer Paul Grewal steps down, remains in advisory role (The Block)
  also: The Defiant
• [EXPLOIT · DEVELOPING · day 2] Ethereum Foundation Turns AI Loose on ETH Network to Find Bugs Before Hackers Do (Decrypt)
• [ENFORCEMENT · DEVELOPING · day 2] Interpol Ties $122.5M Crypto Wallet to Romance Scam Ring (The Defiant)
• [ENFORCEMENT · DEVELOPING · day 2] Circle’s refusal to ‘burn and reissue’ stolen USDC angers prosecutors, report (Protos)
• [ENFORCEMENT · DEVELOPING · day 2] Summer.fi Hacker Moves $1.35M Into Tornado Cash (The Defiant)
• [EXPLOIT · DEVELOPING · day 2] Summer Finance - Rekt — $6.0M (rekt.news Leaderboard)
• [EXPLOIT · DEVELOPING · day 2] Schneider Electric Easergy MiCOM Px40 Series (CISA Cybersecurity Advisories)
• [ENFORCEMENT · DEVELOPING · day 2] A 20-Year-Old's Crypto Wallet Moved $123M in Romance-Scam Cash: Interpol Says (Decrypt)
• [ENFORCEMENT · DEVELOPING · day 2] Malaysia Seizes Over 75,000 Crypto Mining Rigs in Power-Theft Crackdown (Decrypt)
• [ADVISORY · DEVELOPING · day 2] Kraken Wins $22M From Auditor That Abandoned It During Operation Choke Point 2.0 (Decrypt)

🧠 Deep reads

• TrackAgent: The On-Chain AI Intelligence Agent Now Powers SlowMist’s Free Stolen Asset Assessment (SlowMist)
• Symbiotic Core v2 Adapters Audit (OpenZeppelin)

💡 Security thought-spark

Signature security: are you checking for replay (nonce + chainId + deadline) and malleability on every signed message? EIP-712 done halfway is still exploitable.

Full data: https://gmsecurity.net/briefing.json. Feedback or a source to add? [email protected]. George Donnelly offers Web3 development & security consulting.