⬢ GM Security — 2026-07-20: $8.6M across 20 incidents

Daily crypto security briefing

2026-07-20 08:00 UTC · last 72h · 20 items · $8.6M reported losses · 22 sources

📊 Trend tracker

6 new today · 14 developing
7-day: 101 incidents, $232.6M stolen (-91% vs prior week)
30-day: 407 incidents, $5.34B stolen
7-day vectors: oracle manipulation (12), smart-contract bug (4), phishing / wallet drainer (4)
Repeat targets (30d): bitcoin (21), trump (11), coinbase (9), ethereum (8), polymarket (8)

[EXPLOIT · DEVELOPING · day 5] SummerFi to Wind Down After Seven Years, Citing Exploit (The Defiant)
[OTHER · DEVELOPING · day 17] eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up (The Defiant)
[EXPLOIT · NEW] Allbridge Core halted after $1.65M Solana exploit — ~$1.6M (crypto.news)
[EXPLOIT · NEW] Allbridge Core pauses protocol after $1.65 million flash loan exploit: onchain analysts — ~$1.6M (The Block)
[OTHER · NEW] Saylor urges Bitcoin to reject BIP-110 in 110-point essay as soft fork’s August showdown approaches (The Block)
[ENFORCEMENT · NEW] Upbit parent Dunamu faces sanction process nearly eight months after $30 million hack: report — ~$30.0M (The Block)
[OTHER · NEW] Bitcoin’s quantum problem gets a recovery tool, but not for Satoshi’s 1.1 million coins (CoinDesk)
[OTHER · NEW] Spreadefi: A closer look at whether it is a scam or not (crypto.news)

[OTHER · DEVELOPING · day 2] Kaspersky exposes OkoBot’s 20-module crypto wallet attack (crypto.news)
[EXPLOIT · DEVELOPING · day 2] TrustedVolumes attacker returns $2M, keeps another $2M as bounty (crypto.news)
[OTHER · DEVELOPING · day 3] Elizabeth Warren corners Trump over $1.4B crypto fortune (crypto.news)
[OTHER · DEVELOPING · day 3] Consensys halts releases after North Korea-linked developer gains access (crypto.news)
[EXPLOIT · DEVELOPING · day 3] Piero Cipollone rattles Coinbase and Circle with stablecoin warning (crypto.news)
[EXPLOIT · DEVELOPING · day 3] ECB Warns Stablecoins May Drain Bank Deposits—Here's What That Means (Decrypt)
[ADVISORY · DEVELOPING · day 3] OpenZeppelin Stack for Zama: Smart Accounts Audit (OpenZeppelin)
[ENFORCEMENT · DEVELOPING · day 3] SBI Holdings seizes control of Coinhako in Singapore crypto push (crypto.news)
[EXPLOIT · DEVELOPING · day 3] Three Men Jailed for Posing as Police in $5.3M UK Crypto Fraud — ~$5.3M (Decrypt)
[ENFORCEMENT · DEVELOPING · day 3] Taiwan sentences BitShine crypto exchange ringleader to 22 years in $39 million fraud case: reports (The Block)

Which of your contracts are upgradeable, and who controls the proxy admin? An unprotected upgrade path is a 100%-loss bug hiding in plain sight.