23 crypto-security item(s) in the window with ~$38.6M in reported losses The largest is "The BONK governance attack: How a DAO lost $20 million in one proposal" (~$20.0M). Dominant vectors: smart-contract bug, private-key compromise, phishing / wallet drainer, oracle manipulation.
-
eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up
eToro has become a strategic investor in Extended, an onchain perpetual futures exchange, and said the round begins a partnership with Zengo, the self-custody wallet eToro acquired earlier this year. Neither company disclosed the investment size.
-
Argentine Judge Orders ID, Freeze of 25 LIBRA-Linked Crypto Wallets
The order targets holders at Binance, Bybit, OKX and Bitfinex, but analyst Fernando Molina says no funds have actually been frozen yet.
-
US freezes $131M in Iran-linked crypto tied to central bank
US authorities froze over $130M in crypto tied to Iran’s central bank as Treasury expands sanctions pressure on Tehran’s digital asset flows.
-
How Asset Managers Are Investing in Crypto
Asset managers invest in crypto mainly through regulated products: spot ETFs, digital asset funds, tokenized funds, qualified custodians, and blockchain company equity. Most invest on behalf of clients rather than for their own accounts. Their aim is to deliver digital asset exposure inside the brokerage, retirement, and advisory structures clients already use, with the custody, […]
-
Prism Relaunches on New Contract After Exploit Diverted Nearly 40% of Fees
A pseudonymous team is redeploying the Uniswap v4 token that pays fees to everyone who holds it, after a bad actor created 2,500 'phantom' fee positions. The original token has crashed more than 90% in a day.
-
‘Soft print, hard regime’: Bitcoin climbs toward $64,000 as June CPI falls 0.4% in largest monthly drop since 2020
June CPI fell 0.4% and core held at 2.6% annually, lifting BTC toward $64,000 as analysts flip from fears to a summer recovery case.
-
The BONK governance attack: How a DAO lost $20 million in one proposal
~$20.0M · Nobody hacked anything. No smart contract failed, no private key leaked, no phishing link fired. On July 6, the treasury of BonkDAO, the community organization behind one of Solana’s flagship memecoins, transferred roughly $20 million worth of BONK to a…
-
Bonzo Finance - Rekt
$9.1M · Zero equals zero. Supra’s oracle verifier accepted a zeroed signature against a zeroed key, and Bonzo Finance on Hedera lost $9.05 million because the math checked out and nobody questioned the premise.
-
US Government Moves $288M in Seized Crypto to Coinbase Prime
The seized coins landed at the government's custodian, which stops short of a sale but has revived questions about Trump's no-sell pledge.
-
Former LA deputy jailed for lying in Adam Iza crypto extortion case
A former Los Angeles County Sheriff’s Department deputy has been sentenced to 18 months in federal prison after admitting he lied to federal investigators about threats made by a cryptocurrency businessman during a 2021 extortion incident. The U.S. Attorney’s Office…
-
XRP price risks $1 breakdown as Binance selling pressure persists
XRP trades at $1.07 as Binance selling stays strong, $1.08 blocks recovery, and bullish social sentiment raises pullback risk in July 2026.
-
U.S. government moves $288 million in seized bitcoin, ether to Coinbase Prime
Coins from the Farace and BTC-e seizures moved through fresh wallets before landing on the exchange, despite president Donald Trump's previous no-sell reserve order.
-
Threat Intelligence | Injective SDK Compromised, Crypto Wallet Private Keys Stolen
Background This investigation began with what appeared to be a routine development workflow: a developer installs the official Injective SDK, generates a wallet, imports a mnemonic phrase, or passes an existing private key to an SDK interface. Everything appears normal during installation, and wallet operations may return the expected results. At the same time, however, an additional network request — one that is not part of the intended application logic — is silently sent in the background. Recently, security research firm Socket identified anomalous behavior in version 1.20.21 of the npm p…
-
OFAC Sanctions FirstVPN and Ransomware Enablers Behind Attacks on Americans | TRM Labs
On July 13, 2026, OFAC sanctioned the FirstVPN Service (1VPNS), its administrator Dmytro Rashevskyi, and cryptor vendor Yevgeniy Silayev — targeting the anonymity and malware-obfuscation services ransomware groups rely on rather than a ransomware group itself, with TRM data showing operators paying the service directly on-chain.
-
Bonzo Lend Loses $9M on Hedera in Supra Oracle Exploit
~$9.1M · A single manipulated price feed let an attacker turn 250 SAUCE tokens worth a few dollars into $9.05 million in borrowed USDC and wrapped HBAR in eight seconds.
-
Strategy Sells $467M in MSTR Shares, Bitcoin Stack Steady
The bitcoin treasury company's cash reserve climbed to $3 billion even as its 843,775 BTC holdings stayed frozen for a second straight week.
-
BlueMove’s $500K SUI loss raises insider job suspicions
Around $500K worth of SUI tokens was drained from BlueMove DEX's locked pools last weekend, leading to rumours of an inside job. The post BlueMove’s $500K SUI loss raises insider job suspicions appeared first on Protos.
-
Courtroom-Ready Analytics: How Chainalysis Met the Daubert Standard
Blockchain tracing tools like Chainalysis Reactor help investigators untangle the financial networks behind illicit activity: fraud, theft, sanctions evasion, cybercrime,… The post Courtroom-Ready Analytics: How Chainalysis Met the Daubert Standard appeared first on Chainalysis.
-
Lumi Finance — exploit
$270K · Attack method: Smart Contract Logic Vulnerability. Reported loss ~$270,000. The DeFi protocol Lumi Finance on Arbitrum suffered an exploit where attackers leveraged Sodium smart accounts that performed token approvals as a side effect during UserOp validation. This allowed a malicious Paymaster to gain allowances from multiple accounts and drain funds, resulting in approximately $270,000 in losses.
-
Chi Protocol — exploit
$9K · Attack method: Smart Contract Logic Vulnerability. Reported loss ~$8,500. Chi Protocol (a DeFi stablecoin protocol issuing $USC backed by LSTs/LRTs on Ethereum) was exploited due to a logic error in the ArbitrageV5 contract’s burn() function. The attacker used a flash loan to buy heavily depegged $USC cheaply on a thin Uniswap V2 pool and burned it to redeem full-value collateral (weETH/stETH/WETH) at the hardcoded $1 peg, without the burn function checking the actual peg (unlike the mint function). This resulted in approximately $8,500 loss, nearly draining the protocol’s reserves.
-
Analysis of a Google Sites Community Application Phishing Campaign and macOS Information-Stealing…
Analysis of a Google Sites Community Application Phishing Campaign and macOS Information-Stealing Malware Abstract On July 8, 2026, Bruce Xu (@brucexu_eth) reported a phishing link disguised as a BuilDAO / Builder community application page. The attackers hosted the page on Google Sites, leveraging the trusted appearance of sites.google.com to lower users’ guard. The first part of the page mimicked a community application form, prompting users to provide information such as their location, identity, project links, and reasons for joining the community. Instead of proceeding to a legitimate re…
-
Chinese Prosecutors Float Treating Crypto Mixer, Privacy Coin Use as Sign of Money Laundering
An article in the top prosecutors' paper urges new blockchain evidence rules, presumptions of intent, and a state platform to sell seized coins.
-
Lumi Finance — exploit
$270K · Technique: Protocol Logic / Silent Auto-Approval Hack. Chain: Arbitrum. Target: DeFi Protocol. Reported loss ~$270,000.
Sources unavailable: CertiK (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); ConsenSys Diligence (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Cantina / Spearbit (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); pcaversaccio (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Chainabuse (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Arkham Intelligence (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @PeckShieldAlert (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @CertiKAlert (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @CyversAlerts (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @BlockSecTeam (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @AnciliaInc (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Phalcon_xyz (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @zachxbt (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @SlowMist_Team (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @MistTrack_io (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @realScamSniffer (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @samczsun (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @tayvano_ (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @spreekaway (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @_SEAL_Org (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @hypernative (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @HalbornSecurity (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Beosin_com (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @GoPlusSecurity (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Quantstamp (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Chainalysis (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @TrugardLabs (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Immunefi (Invalid character in tag name Line: 36 Column: 49 Char: @)
Generated by GM Security · automated digest, verify before acting.