⬢ GM Security — 2026-07-19: $29.3M across 29 incidents

Daily crypto security briefing

2026-07-19 08:00 UTC · last 72h · 29 items · $29.3M reported losses · 22 sources

📊 Trend tracker

3 new today · 26 developing
7-day: 109 incidents, $238.0M stolen (-91% vs prior week)
30-day: 401 incidents, $5.33B stolen
7-day vectors: oracle manipulation (12), smart-contract bug (4), phishing / wallet drainer (4)
Repeat targets (30d): bitcoin (19), trump (11), coinbase (9), ethereum (8), polymarket (8)

Last 24 hours

[EXPLOIT · DEVELOPING · day 4] SummerFi to Wind Down After Seven Years, Citing Exploit (The Defiant)
[OTHER · DEVELOPING · day 16] eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up (The Defiant)
[OTHER · NEW] Kaspersky exposes OkoBot’s 20-module crypto wallet attack (crypto.news)
[EXPLOIT · NEW] TrustedVolumes attacker returns $2M, keeps another $2M as bounty (crypto.news)

Earlier · 24–72h

[OTHER · DEVELOPING · day 2] Elizabeth Warren corners Trump over $1.4B crypto fortune (crypto.news)
[OTHER · DEVELOPING · day 2] Consensys halts releases after North Korea-linked developer gains access (crypto.news)
[EXPLOIT · DEVELOPING · day 2] Piero Cipollone rattles Coinbase and Circle with stablecoin warning (crypto.news)
[EXPLOIT · DEVELOPING · day 2] ECB Warns Stablecoins May Drain Bank Deposits—Here's What That Means (Decrypt)
[ADVISORY · DEVELOPING · day 2] OpenZeppelin Stack for Zama: Smart Accounts Audit (OpenZeppelin)
[ENFORCEMENT · DEVELOPING · day 2] SBI Holdings seizes control of Coinhako in Singapore crypto push (crypto.news)
[EXPLOIT · DEVELOPING · day 2] Three Men Jailed for Posing as Police in $5.3M UK Crypto Fraud — ~$5.3M (Decrypt)
[OTHER · DEVELOPING · day 2] Is there a Robinhood Chain token? (crypto.news)
[ENFORCEMENT · DEVELOPING · day 2] Taiwan court sentences BitShine founder to 22 years in $39M crypto fraud — ~$1.27B (crypto.news)
[EXPLOIT · DEVELOPING · day 3] Airbnb CEO says X account was hacked, attacker posted AI-slop on tokenization (CoinDesk)
[ENFORCEMENT · DEVELOPING · day 2] Taiwan sentences BitShine crypto exchange ringleader to 22 years in $39 million fraud case: reports (The Block)
[ENFORCEMENT · DEVELOPING · day 5] Argentine judge orders freeze of 25 crypto wallets in $LIBRA probe (crypto.news)
[ADVISORY · DEVELOPING · day 3] USDT vs USDC: Comparing the Two Largest Stablecoins (The Block)
[EXPLOIT · NEW] Across — exploit (DeFiLlama Hacks DB)
[EXPLOIT · DEVELOPING · day 3] BlockThreat - Week 28, 2026 (BlockThreat)
[OTHER · DEVELOPING · day 3] Bitcoin Q-Day Recovery Proposal Aims to Let Users Prove Ownership After Quantum Attack (Decrypt)
[EXPLOIT · DEVELOPING · day 3] Ostium Vault Exploiter Routes 10,540 ETH to Tornado Cash — ~$24.0M (The Defiant)
[OTHER · DEVELOPING · day 3] UK gang who posed as cops to steal $5.4M in crypto jailed (Protos)
also: The Block
[ADVISORY · DEVELOPING · day 3] QuicknodeEarn Audit (OpenZeppelin)
[ENFORCEMENT · DEVELOPING · day 3] A crypto risk management framework for financial institutions (Elliptic)
[EXPLOIT · DEVELOPING · day 3] Morning Minute: Base Hands Its App Over to Cobie (Decrypt)
[ADVISORY · DEVELOPING · day 3] DefiTuna Lending — exploit — $580K (SlowMist Hacked DB)
[ENFORCEMENT · DEVELOPING · day 3] Feds Arrest Florida Man Over Video Game Malware That Stole $220K in Crypto — ~$220K (Decrypt)

🧠 Deep reads

💡 Security thought-spark

Red-team your own UX: ask an LLM to "write the wallet-drainer that would exploit a careless user of this approve() flow," then design the flow that defeats it.

Full data: https://gmsecurity.net/briefing.json. Feedback or a source to add? [email protected]. George Donnelly offers Web3 development & security consulting.