⬢ GM Security — 2026-07-16: $108.5M across 30 incidents

Daily crypto security briefing

2026-07-16 08:00 UTC · last 72h · 30 items · $108.5M reported losses · 22 sources

📊 Trend tracker

15 new today · 15 developing
7-day: 92 incidents, $1.31B stolen (-56% vs prior week)
30-day: 449 incidents, $5.47B stolen
7-day vectors: oracle manipulation (11), phishing / wallet drainer (5), smart-contract bug (3)
Repeat targets (30d): bitcoin (20), trump (10), certik (10), coinbase (9), ethereum (8)

Last 24 hours

[EXPLOIT · NEW] SummerFi to Wind Down After Seven Years, Citing Exploit (The Defiant)
[OTHER · DEVELOPING · day 13] eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up (The Defiant)
[ENFORCEMENT · NEW] California duo accused of laundering crypto from fentanyl and meth sales (crypto.news)
[ENFORCEMENT · NEW] California pair charged with laundering crypto proceeds from darknet fentanyl sales (The Block)
[ENFORCEMENT · NEW] OFAC Sanctions Iran Central Bank Crypto Wallets, Freezing $131M in Stablecoins (Chainalysis)
[EXPLOIT · NEW] Blockaid uncovers $18M exploit that forces Ostium trading halt — ~$18.0M (crypto.news)
[EXPLOIT · NEW] Another DeFi Exploit: Perp DEX Ostium Loses $18 Million in Oracle Attack — ~$18.0M (Decrypt)
[ENFORCEMENT · DEVELOPING · day 3] US Treasury Freezes $131 Million in Iran-Linked Crypto Wallets (Decrypt)
[EXPLOIT · NEW] Ostium Halts Trading After Oracle Exploit Drains up to $18M from Vault — ~$18.0M (The Defiant)
[EXPLOIT · NEW] Ostium pauses trading after apparent $18 million vault exploit — ~$18.0M (The Block)
[EXPLOIT · NEW] Ostium suffers $18 million exploit as oracle attack wave continues to hit DeFi (CoinDesk)
[ENFORCEMENT · NEW] UK Fraud Review Calls for Judge Training on Crypto Laundering, AI Scams (Decrypt)
[OTHER · NEW] Strategy feels 'very secure' until bitcoin reaches $8,000-$10,000, says CEO (CoinDesk)
[EXPLOIT · NEW] CISA Adds Two Known Exploited Vulnerabilities to Catalog (CISA Cybersecurity Advisories)
[EXPLOIT · NEW] SCATMAN and the $135K hack: what the SpaceX account breach says about brand-token crime in 2026 — ~$135K (crypto.news)

Earlier · 24–72h

[EXPLOIT · NEW] Ostium — exploit — $18.0M (DeFiLlama Hacks DB)
[OTHER · DEVELOPING · day 2] Argentine Judge Orders ID, Freeze of 25 LIBRA-Linked Crypto Wallets (The Defiant)
[EXPLOIT · DEVELOPING · day 2] Prism Relaunches on New Contract After Exploit Diverted Nearly 40% of Fees (The Defiant)
[EXPLOIT · DEVELOPING · day 2] Bonzo Finance - Rekt — $9.1M (rekt.news Leaderboard)
[ENFORCEMENT · DEVELOPING · day 2] US Government Moves $288M in Seized Crypto to Coinbase Prime (Decrypt)
[ENFORCEMENT · DEVELOPING · day 8] OFAC Sanctions FirstVPN and Ransomware Enablers Behind Attacks on Americans | TRM Labs (TRM Labs)
[EXPLOIT · DEVELOPING · day 3] Bonzo Lend Loses $9M on Hedera in Supra Oracle Exploit — ~$9.1M (The Defiant)
[OTHER · DEVELOPING · day 3] Strategy Sells $467M in MSTR Shares, Bitcoin Stack Steady (The Defiant)
[ENFORCEMENT · DEVELOPING · day 3] Courtroom-Ready Analytics: How Chainalysis Met the Daubert Standard (Chainalysis)
[EXPLOIT · DEVELOPING · day 3] Lumi Finance — exploit — $270K (SlowMist Hacked DB)
[EXPLOIT · DEVELOPING · day 2] Chi Protocol — exploit — $9K (SlowMist Hacked DB)
[SCAM · DEVELOPING · day 3] Analysis of a Google Sites Community Application Phishing Campaign and macOS Information-Stealing… (SlowMist)
[ENFORCEMENT · DEVELOPING · day 3] Chinese Prosecutors Float Treating Crypto Mixer, Privacy Coin Use as Sign of Money Laundering (Decrypt)

🧠 Deep reads

💡 Security thought-spark

Run `slither .` and `aderyn` on every PR. Free static analysis catches reentrancy, unchecked returns, and access-control gaps before an auditor (or attacker) does.

Full data: https://gmsecurity.net/briefing.json. Feedback or a source to add? [email protected]. George Donnelly offers Web3 development & security consulting.