⬢ GM Security — 2026-07-14: $18.6M across 16 incidents

Daily crypto security briefing

2026-07-14 08:00 UTC · last 72h · 16 items · $18.6M reported losses · 21 sources

📊 Trend tracker

• 14 new today · 2 developing
• 7-day: 89 incidents, $2.61B stolen (+60% vs prior week)
• 30-day: 424 incidents, $5.35B stolen
• 7-day vectors: oracle manipulation (4), governance attack (4), phishing / wallet drainer (3)
• Repeat targets (30d): bitcoin (20), trump (10), certik (10), coinbase (9), ethereum (8)

Last 24 hours

• [OTHER · DEVELOPING · day 11] eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up (The Defiant)
• [ENFORCEMENT · NEW] U.S. government moves $288 million in seized bitcoin, ether to Coinbase Prime (CoinDesk)
• [ENFORCEMENT · NEW] Why did the U.S. move $297M in Bitcoin and Ether to Coinbase Prime? (crypto.news)
• [ENFORCEMENT · DEVELOPING · day 6] OFAC Sanctions FirstVPN and Ransomware Enablers Behind Attacks on Americans | TRM Labs (TRM Labs)
• [EXPLOIT · NEW] Bonzo Lend Loses $9M on Hedera in Supra Oracle Exploit — ~$9.1M (The Defiant)
• [OTHER · NEW] Strategy Sells $467M in MSTR Shares, Bitcoin Stack Steady (The Defiant)
• [EXPLOIT · NEW] BlueMove’s $500K SUI loss raises insider job suspicions (Protos)
• [EXPLOIT · NEW] Trump triggers $20B crypto wipeout with Strait of Hormuz takeover claim (crypto.news)
• [ENFORCEMENT · NEW] Courtroom-Ready Analytics: How Chainalysis Met the Daubert Standard (Chainalysis)
• [EXPLOIT · NEW] Lumi Finance — exploit — $270K (SlowMist Hacked DB)
• [ENFORCEMENT · NEW] Chinese Prosecutors Float Treating Crypto Mixer, Privacy Coin Use as Sign of Money Laundering (Decrypt)
  also: The Block
• [ENFORCEMENT · NEW] Bank of Thailand targets stablecoin transactions in latest probe (crypto.news)
  also: The Block

Earlier · 24–72h

• [EXPLOIT · NEW] Lumi Finance — exploit — $270K (DeFiLlama Hacks DB)
• [EXPLOIT · NEW] Bonzo Lend — exploit — $9.1M (SlowMist Hacked DB)

🧠 Deep reads

• Threat Intelligence | Injective SDK Compromised, Crypto Wallet Private Keys Stolen (SlowMist)
• Analysis of a Google Sites Community Application Phishing Campaign and macOS Information-Stealing… (SlowMist)

💡 Security thought-spark

Checks-effects-interactions audit: grep for `.call{value:` and confirm every external call happens AFTER state updates. Reentrancy still drains protocols in 2026.

Full data: https://gmsecurity.net/briefing.json. Feedback or a source to add? [email protected]. George Donnelly offers Web3 development & security consulting.