⬢ GM Security — 2026-07-15: $38.6M across 23 incidents

Daily crypto security briefing

2026-07-15 08:00 UTC · last 72h · 23 items · $38.6M reported losses · 22 sources

📊 Trend tracker

• 10 new today · 13 developing
• 7-day: 76 incidents, $1.22B stolen (-60% vs prior week)
• 30-day: 434 incidents, $5.38B stolen
• 7-day vectors: oracle manipulation (5), phishing / wallet drainer (4), smart-contract bug (3)
• Repeat targets (30d): bitcoin (20), trump (10), certik (10), coinbase (9), ethereum (8)

Last 24 hours

• [OTHER · DEVELOPING · day 12] eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up (The Defiant)
• [OTHER · NEW] Argentine Judge Orders ID, Freeze of 25 LIBRA-Linked Crypto Wallets (The Defiant)
• [ENFORCEMENT · NEW] US freezes $131M in Iran-linked crypto tied to central bank (crypto.news)
• [ENFORCEMENT · NEW] How Asset Managers Are Investing in Crypto (The Block)
• [EXPLOIT · NEW] Prism Relaunches on New Contract After Exploit Diverted Nearly 40% of Fees (The Defiant)
• [OTHER · NEW] ‘Soft print, hard regime’: Bitcoin climbs toward $64,000 as June CPI falls 0.4% in largest monthly drop since 2020 (The Block)
• [SCAM · NEW] The BONK governance attack: How a DAO lost $20 million in one proposal — ~$20.0M (crypto.news)
• [EXPLOIT · NEW] Bonzo Finance - Rekt — $9.1M (rekt.news Leaderboard)
• [ENFORCEMENT · NEW] US Government Moves $288M in Seized Crypto to Coinbase Prime (Decrypt)
• [ENFORCEMENT · NEW] Former LA deputy jailed for lying in Adam Iza crypto extortion case (crypto.news)
• [OTHER · DEVELOPING · day 4] XRP price risks $1 breakdown as Binance selling pressure persists (crypto.news)

Earlier · 24–72h

• [ENFORCEMENT · DEVELOPING · day 2] U.S. government moves $288 million in seized bitcoin, ether to Coinbase Prime (CoinDesk)
• [ENFORCEMENT · DEVELOPING · day 7] OFAC Sanctions FirstVPN and Ransomware Enablers Behind Attacks on Americans | TRM Labs (TRM Labs)
• [EXPLOIT · DEVELOPING · day 2] Bonzo Lend Loses $9M on Hedera in Supra Oracle Exploit — ~$9.1M (The Defiant)
• [OTHER · DEVELOPING · day 2] Strategy Sells $467M in MSTR Shares, Bitcoin Stack Steady (The Defiant)
• [EXPLOIT · DEVELOPING · day 2] BlueMove’s $500K SUI loss raises insider job suspicions (Protos)
• [ENFORCEMENT · DEVELOPING · day 2] Courtroom-Ready Analytics: How Chainalysis Met the Daubert Standard (Chainalysis)
• [EXPLOIT · DEVELOPING · day 2] Lumi Finance — exploit — $270K (SlowMist Hacked DB)
• [EXPLOIT · NEW] Chi Protocol — exploit — $9K (SlowMist Hacked DB)
• [ENFORCEMENT · DEVELOPING · day 2] Chinese Prosecutors Float Treating Crypto Mixer, Privacy Coin Use as Sign of Money Laundering (Decrypt)
• [EXPLOIT · DEVELOPING · day 2] Lumi Finance — exploit — $270K (DeFiLlama Hacks DB)

🧠 Deep reads

• Threat Intelligence | Injective SDK Compromised, Crypto Wallet Private Keys Stolen (SlowMist)
• Analysis of a Google Sites Community Application Phishing Campaign and macOS Information-Stealing… (SlowMist)

💡 Security thought-spark

Oracle check: are you reading a spot price or a TWAP? A spot price on a low-liquidity pool is a standing invitation to a flash-loan attack.

Full data: https://gmsecurity.net/briefing.json. Feedback or a source to add? [email protected]. George Donnelly offers Web3 development & security consulting.