⬢ GM Security — 2026-07-13: $44.2M across 20 incidents

Daily crypto security briefing

2026-07-13 08:00 UTC · last 72h · 20 items · $44.2M reported losses · 22 sources

📊 Trend tracker

4 new today · 16 developing
7-day: 102 incidents, $2.69B stolen (+70% vs prior week)
30-day: 410 incidents, $5.33B stolen
7-day vectors: governance attack (3), oracle manipulation (2), phishing / wallet drainer (2)
Repeat targets (30d): bitcoin (19), certik (10), trump (9), coinbase (8), ethereum (8)

Last 24 hours

[ENFORCEMENT · NEW] Turkey charges 504 suspects in crypto-linked $1bn money laundering case (crypto.news)
[OTHER · NEW] Is Ethereum ready to outperform Bitcoin? Tom Lee points to key ratio (crypto.news)
[OTHER · NEW] Senate Democrats renew push for hearings into Trump’s crypto holdings (crypto.news)
[ENFORCEMENT · NEW] Coinbase pushes back on Warren as CLARITY Act vote nears (crypto.news)

Earlier · 24–72h

[OTHER · DEVELOPING · day 2] The general leaves before the war ends: Paul Grewal exits Coinbase on the eve of CLARITY (crypto.news)
[ADVISORY · DEVELOPING · day 2] Hedera lending protocol Bonzo Lend hit for $9 million after Supra verifier accepts manipulated price update (The Block)
[EXPLOIT · DEVELOPING · day 2] Lending protocol Bonzo loses 77% of value locked as $9 million oracle exploit rattles Hedera — ~$9.1M (CoinDesk)
[EXPLOIT · DEVELOPING · day 2] Bitcoin, ether ETFs snap eight-week outflow streaks with $282 million combined inflow (The Block)
[EXPLOIT · DEVELOPING · day 2] Bonzo Lend — exploit — $10.1M (SlowMist Hacked DB)
also: DeFiLlama Hacks DB
[OTHER · DEVELOPING · day 3] Hong Kong Clearing exposes fake crypto wallet scam using cash rewards (crypto.news)
[EXPLOIT · DEVELOPING · day 2] Suspected Hedera exploit sends over $5.8M to Ethereum as HBAR slips — ~$5.8M (crypto.news)
[ENFORCEMENT · DEVELOPING · day 3] DOJ abandons BitClub founder case despite $722M fraud claims (crypto.news)
[ENFORCEMENT · DEVELOPING · day 3] DOJ to drop charges against man accused in $722 million BitClub crypto Ponzi scheme: Bloomberg (The Block)
[ADVISORY · DEVELOPING · day 3] Lombard LBTC Rate Limits Audit (OpenZeppelin)
[ADVISORY · DEVELOPING · day 4] Coinbase Chief Legal Officer Paul Grewal to Step Down (The Defiant)
[EXPLOIT · DEVELOPING · day 3] BonkDAO - Rekt — $19.3M (rekt.news Leaderboard)
[ENFORCEMENT · DEVELOPING · day 3] Jailed Fraudster Charged With Moving $290K in Forfeited Crypto From Prison (Decrypt)
[OTHER · DEVELOPING · day 3] Ledger researchers disclose Tangem card flaw; Tangem says risk to everyday users is ‘virtually non-existent’ (The Block)

🧠 Deep reads

💡 Security thought-spark

Assume every admin key is already compromised. What's the blast radius? If the answer is "total," add a timelock + multisig before you ship anything else.

Full data: https://gmsecurity.net/briefing.json. Feedback or a source to add? [email protected]. George Donnelly offers Web3 development & security consulting.