⬢ GM Security — 2026-07-17: $78.0M across 30 incidents

Daily crypto security briefing

2026-07-17 08:00 UTC · last 72h · 30 items · $78.0M reported losses · 22 sources

📊 Trend tracker

• 19 new today · 11 developing
• 7-day: 111 incidents, $1.35B stolen (-28% vs prior week)
• 30-day: 468 incidents, $5.51B stolen
• 7-day vectors: oracle manipulation (12), phishing / wallet drainer (5), smart-contract bug (4)
• Repeat targets (30d): bitcoin (21), coinbase (10), trump (10), certik (10), ethereum (8)

Last 24 hours

• [EXPLOIT · DEVELOPING · day 2] SummerFi to Wind Down After Seven Years, Citing Exploit (The Defiant)
• [OTHER · DEVELOPING · day 14] eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up (The Defiant)
• [ENFORCEMENT · NEW] Dutch crypto exchange Knaken bankrupt as €7M in funds goes missing (crypto.news)
• [EXPLOIT · NEW] Airbnb CEO Brian Chesky confirms X hack after crypto tokenization posts (crypto.news)
• [ADVISORY · NEW] USDT vs USDC: Comparing the Two Largest Stablecoins (The Block)
• [EXPLOIT · NEW] BlockThreat - Week 28, 2026 (BlockThreat)
• [OTHER · NEW] Pi Network upgrade puts battered PI price on the brink of a rebound (crypto.news)
• [OTHER · NEW] Bitcoin Q-Day Recovery Proposal Aims to Let Users Prove Ownership After Quantum Attack (Decrypt)
• [EXPLOIT · NEW] Ostium Vault Exploiter Routes 10,540 ETH to Tornado Cash — ~$24.0M (The Defiant)
• [OTHER · NEW] UK gang who posed as cops to steal $5.4M in crypto jailed (Protos)
• [ENFORCEMENT · NEW] Coinbase and Ripple seize Europe as Binance retreats under MiCA (crypto.news)
• [ADVISORY · NEW] QuicknodeEarn Audit (OpenZeppelin)
• [ENFORCEMENT · NEW] US jury indicts South Dakota crypto investor on 29 counts over alleged $20 million investor fraud (The Block)
• [OTHER · NEW] Crypto for Advisors: Strengthening defenses against AI fraud (CoinDesk)
• [EXPLOIT · NEW] Morning Minute: Base Hands Its App Over to Cobie (Decrypt)
• [ADVISORY · NEW] DefiTuna Lending — exploit — $580K (SlowMist Hacked DB)
• [ENFORCEMENT · NEW] Feds Arrest Florida Man Over Video Game Malware That Stole $220K in Crypto — ~$220K (Decrypt)
• [ENFORCEMENT · NEW] U.S. adds four Iran central bank crypto wallets to sanctions, Tether freezes $131 million of contents (CoinDesk)

Earlier · 24–72h

• [OTHER · NEW] Two groups of crypto investors are selling bitcoin to cap its latest price recovery (CoinDesk)
• [ENFORCEMENT · DEVELOPING · day 2] OFAC Sanctions Iran Central Bank Crypto Wallets, Freezing $131M in Stablecoins (Chainalysis)
• [EXPLOIT · DEVELOPING · day 2] Another DeFi Exploit: Perp DEX Ostium Loses $18 Million in Oracle Attack — ~$18.0M (Decrypt)
• [ENFORCEMENT · DEVELOPING · day 4] US Treasury Freezes $131 Million in Iran-Linked Crypto Wallets (Decrypt)
• [EXPLOIT · DEVELOPING · day 2] Ostium Halts Trading After Oracle Exploit Drains up to $18M from Vault — ~$18.0M (The Defiant)
• [ENFORCEMENT · DEVELOPING · day 2] UK Fraud Review Calls for Judge Training on Crypto Laundering, AI Scams (Decrypt)
• [EXPLOIT · NEW] Ostium — exploit — $18.0M (SlowMist Hacked DB)
  also: DeFiLlama Hacks DB
• [EXPLOIT · DEVELOPING · day 2] CISA Adds Two Known Exploited Vulnerabilities to Catalog (CISA Cybersecurity Advisories)
• [OTHER · DEVELOPING · day 3] Argentine Judge Orders ID, Freeze of 25 LIBRA-Linked Crypto Wallets (The Defiant)
• [EXPLOIT · DEVELOPING · day 3] Prism Relaunches on New Contract After Exploit Diverted Nearly 40% of Fees (The Defiant)

🧠 Deep reads

• Telegram Account Compromised, Wallet Swapped: How Does macOS Malware Break Through Your Defenses? (SlowMist)
• A crypto risk management framework for financial institutions (Elliptic)

💡 Security thought-spark

Least privilege for keys: deployer ≠ owner ≠ pauser ≠ upgrader. One key, one job, separate hardware. Map yours today and look for overlaps.

Full data: https://gmsecurity.net/briefing.json. Feedback or a source to add? [email protected]. George Donnelly offers Web3 development & security consulting.