29 crypto-security item(s) in the window with ~$29.3M in reported losses The largest is "Taiwan court sentences BitShine founder to 22 years in $39M crypto fraud" (~$1.27B). Dominant vectors: bridge exploit, smart-contract bug.
-
SummerFi to Wind Down After Seven Years, Citing Exploit
Aave founder Stani Kulechov called the DeFi access point 'an OG' as its team said it would sunset the UI.
-
eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up
eToro has become a strategic investor in Extended, an onchain perpetual futures exchange, and said the round begins a partnership with Zengo, the self-custody wallet eToro acquired earlier this year. Neither company disclosed the investment size.
-
Kaspersky exposes OkoBot’s 20-module crypto wallet attack
Kaspersky has exposed OkoBot, a year-old malware operation that uses roughly 20 modules to steal crypto wallet recovery phrases and has affected users across at least five countries. Kaspersky researchers discovered that the malware has remained active for more than…
-
TrustedVolumes attacker returns $2M, keeps another $2M as bounty
A TrustedVolumes attacker has returned 1,122 ETH worth about $2 million while keeping another $2 million as a self-declared bounty. According to Com Feed monitoring, the Ethereum transfer represents a partial recovery from the May exploit, which initially drained about…
-
Elizabeth Warren corners Trump over $1.4B crypto fortune
Senator Elizabeth Warren has demanded that President Donald Trump disclose his 2026 crypto earnings after a federal filing showed $1.4 billion in income from digital asset ventures during 2025. Warren, in a Thursday letter, asked Trump to release details covering…
-
xAI Grok Build 0-Day Discovered One Day After Open Source: Trust Boundary Bypass and the Fragmented…
xAI Grok Build 0-Day Discovered One Day After Open Source: Trust Boundary Bypass and the Fragmented Security Landscape of AI Coding Tools Author: Thinking Editor: 77 Security is a long-term battle between attackers and defenders. But as the battlefield shifts from Web3 to AI coding tools, the nature of that battle is quietly changing. Attackers no longer need to craft complex exploit chains — sometimes, just a few lines of JSON configuration are enough to dismantle an entire permission system. On July 15, 2026, xAI officially open-sourced Grok Build (Grok Build CLI) under the Apache 2.0 licen…
-
Threat Intelligence | Analysis of a GitHub Poisoning Attack Disguised as Recruitment
Background Recently, MistEye detected a malicious code delivery campaign targeting developers under the guise of recruitment. The attacker first contacted developers via LinkedIn, posing as a recruiter from a Web3 project. After discussing the target’s work experience and interview arrangements, the attacker sent the target a GitHub repository, claiming it contained the MVP that needed to be tried before the interview. The chat logs show that the attacker first asked about the target’s work experience and product background, and discussed the subsequent interview arrangements. Afterwards, the…
-
Consensys halts releases after North Korea-linked developer gains access
Consensys has temporarily halted product releases after a North Korea-linked consultant gained access to its systems for about one month. Drop Site News reported that the developer joined the Ethereum software company under the alias “Tyler Knapp” and used the…
-
Piero Cipollone rattles Coinbase and Circle with stablecoin warning
Piero Cipollone has warned that stablecoins could drain bank deposits as Coinbase fell 1.75% to $157 and Circle lost 6% across five sessions to trade near $60. The European Central Bank executive board member raised the concern during a July…
-
ECB Warns Stablecoins May Drain Bank Deposits—Here's What That Means
ECB board member Piero Cipollone laid out the three-layer threat banks face from digital payments, and pitched the digital euro as the only structural answer.
- OpenZeppelin Stack for Zama: Smart Accounts Audit
-
SBI Holdings seizes control of Coinhako in Singapore crypto push
SBI Holdings has acquired a majority stake in Coinhako after securing regulatory approval for the Singapore crypto exchange deal on July 16. According to SBI Holdings, the transaction involved a capital injection through SBI Ventures Asset Pte. Ltd. and the…
-
Three Men Jailed for Posing as Police in $5.3M UK Crypto Fraud
~$5.3M · The gang built fake police websites to fool victims, then spent the stolen crypto on Rolexes and luxury holidays, the Met said.
-
Is there a Robinhood Chain token?
No. Robinhood Chain runs on ether and has no native token. Why it does not, what CASHCAT actually is, and how the scams work.
-
Taiwan court sentences BitShine founder to 22 years in $39M crypto fraud
~$1.27B · Taiwan has sentenced the alleged mastermind behind the BitShine crypto exchange to 22 years in prison after finding he led a fraud and money laundering operation that prosecutors said caused more than NT$1.27 billion ($39 million) in losses to over…
-
Airbnb CEO says X account was hacked, attacker posted AI-slop on tokenization
Brian Chesky regained control of his account and told any new crypto followers he would be a "disappointing follow".
-
Taiwan sentences BitShine crypto exchange ringleader to 22 years in $39 million fraud case: reports
The defendant reportedly led a criminal group that operated under the guise of BitShine, which was once registered with the FSC.
-
Argentine judge orders freeze of 25 crypto wallets in $LIBRA probe
Argentine court has ordered the identification of holders behind 25 cryptocurrency wallets and frozen assets linked to the $LIBRA token investigation after authorities traced millions of dollars across multiple blockchain networks. According to Argentine newspaper Clarín, Federal Judge Marcelo Martínez…
-
USDT vs USDC: Comparing the Two Largest Stablecoins
USDT and USDC are stablecoins pegged one-to-one to the U.S. dollar, each backed by reserves covering every token in circulation. Tether’s USDT is the largest stablecoin, with the deepest liquidity across global exchanges. Circle’s USDC is the second-largest, with Circle staking its reputation on being a publicly traded company, with frequent audits, U.S. and E.U. […]
-
Across — exploit
Chain: Solana. Target: DeFi Protocol. Bridge-related.
-
BlockThreat - Week 28, 2026
$36.3M stolen across 4 incidents. Carpe diem.
-
Bitcoin Q-Day Recovery Proposal Aims to Let Users Prove Ownership After Quantum Attack
Project Eleven says a new post-quantum cryptographic proof could help Bitcoin users recover wallets after Q-Day by verifying ownership.
-
Ostium Vault Exploiter Routes 10,540 ETH to Tornado Cash
~$24.0M · Blockchain security firm PeckShield now puts the drain on Arbitrum perpetuals protocol Ostium at roughly $24M, above the up-to-$18M first estimated.
-
UK gang who posed as cops to steal $5.4M in crypto jailed
According to the UK’s Metropolitan Police, the gang contacted unsuspecting crypto holders and convinced them that their funds were at risk. The post UK gang who posed as cops to steal $5.4M in crypto jailed appeared first on Protos.
-
QuicknodeEarn Audit
Summary Type: DeFi Timeline: 2026-04-20 → 2026-04-29 Languages: Solidity Findings Total issues: 15 (14 resolved, 1 partially resolved) Critical: 0 (0 resolved) · High: 0 (0 resolved) · Medium: 0 (0 resolved) · Low: 11 (10 resolved, 1 partially resolved) Notes & Additional Information 4 notes raised (4 resolved) Client Reported Issues 0 reported issues (0 resolved)
-
A crypto risk management framework for financial institutions
Cryptoasset risk is now an explicit supervisory expectation. Banking supervisors worldwide expect financial institutions (FIs) to identify and manage cryptoasset-related risk wherever cryptoasset activity, products or counterparties are in scope, across anti-money laundering and countering the financing of terrorism (AML/CFT) regulation, sanctions compliance and governance.
-
Morning Minute: Base Hands Its App Over to Cobie
Plus, Stripe makes a $53 billion move that could crown a stablecoin king. And Ostium gets drained of $18M in the latest DeFi exploit.
-
DefiTuna Lending — exploit
$580K · Attack method: Smart Contract Vulnerability. Reported loss ~$580,000. The Solana-based DeFi protocol DefiTuna's lending pools were exploited by an attacker who drained approximately $580K, creating a matching deficit in the USDC lending pool. The attack vector has been identified and patched; the team is investigating and working on fund recovery.
-
Feds Arrest Florida Man Over Video Game Malware That Stole $220K in Crypto
~$220K · Zyaire Wilkins allegedly procured malware hidden in video games that infected 8,000 devices and broke into 80 crypto wallets, the FBI says.
Sources unavailable: CertiK (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); ConsenSys Diligence (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Cantina / Spearbit (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); pcaversaccio (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Chainabuse (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Arkham Intelligence (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @PeckShieldAlert (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @CertiKAlert (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @CyversAlerts (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @BlockSecTeam (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @AnciliaInc (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Phalcon_xyz (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @zachxbt (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @SlowMist_Team (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @MistTrack_io (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @realScamSniffer (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @samczsun (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @tayvano_ (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @spreekaway (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @_SEAL_Org (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @hypernative (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @HalbornSecurity (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Beosin_com (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @GoPlusSecurity (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Quantstamp (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Chainalysis (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @TrugardLabs (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Immunefi (Invalid character in tag name Line: 1 Column: 49 Char: @)
Generated by GM Security · automated digest, verify before acting.