23 crypto-security item(s) in the window with ~$19.6M in reported losses The largest is "Wanchain Cardano bridge exploit drains 515M NIGHT worth $9M" (~$9.0M). Dominant vectors: bridge exploit, flash-loan attack, social engineering, private-key compromise.
-
SummerFi to Wind Down After Seven Years, Citing Exploit
Aave founder Stani Kulechov called the DeFi access point 'an OG' as its team said it would sunset the UI.
-
eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up
eToro has become a strategic investor in Extended, an onchain perpetual futures exchange, and said the round begins a partnership with Zengo, the self-custody wallet eToro acquired earlier this year. Neither company disclosed the investment size.
-
Wanchain Cardano bridge exploit drains 515M NIGHT worth $9M
~$9.0M · BlockSec says Wanchain’s Cardano bridge lost about 515M NIGHT in a reported exploit, while Midnight says its core network remains secure.
-
ENS DAO activates two-year veto council after $20M BonkDAO attack
ENS DAO approved an eight-member Security Council with two-year veto power to stop malicious proposals during the governance timelock period
-
SEC charges Florida man and company in alleged $22 million crypto mining fraud scheme
The defendants allegedly raised $22 million from more than 380 investors through a fraudulent crypto asset mining scheme.
-
Crypto AML Software for Detecting Money Laundering: A Buyer's Guide | TRM Labs
Learn what effective crypto AML software for detecting money laundering must do, and why financial institutions, law enforcement, and regulators choose TRM Labs.
-
Russia's First Comprehensive Crypto Law Is Two Votes Away From Passing
The bill licenses exchanges, caps retail investors at about $3,800 a year, and creates a legal pathway for Russian companies to pay foreign partners in crypto—bypassing Western sanctions.
-
Consensys Halted MetaMask Releases Over North Korea-Linked Contractor
A contractor brought in through a third-party provider worked on MetaMask code from March until Consensys cut off access in April and paused product releases. The company says it found no stolen assets, exposed data or malicious code.
-
Allbridge Halts Core Bridge After $1.65M Flash Loan Exploit
~$1.6M · The attacker used a $1.12 million Kamino flash loan to skew Allbridge's Solana stablecoin pools, then bridged the proceeds to Ethereum, security firms said.
-
AI-assisted hacking is outpacing traditional code reviews, NEAR co-founder says
NEAR co-founder Polosukhin called formal verification a necessary shift for securing blockchain code from AI hacking.
-
Hackers hijack Kenyan president’s website, demand 5 Bitcoin
Hackers have disabled Kenyan President William Ruto’s official website, replaced its homepage and demanded a ransom of 5 Bitcoin. According to a report, the Kenyan government opened an investigation after attackers took control of president.go.ke on July 18 and posted…
-
Across, Allbridge, TeleSwap lost $5.7M to bridge hacks in past week
~$5.7M · A trio of hacks targeting blockchain bridges Across, Allbridge, and TeleSwap have seen over $5M lost in recent days. The post Across, Allbridge, TeleSwap lost $5.7M to bridge hacks in past week appeared first on Protos.
-
SEC targets Mining Automatic over alleged $22M crypto mining fraud
The U.S. Securities and Exchange Commission has sued Mining Automatic and its owner, Zan Shaikh, after they allegedly raised about $22 million from more than 380 investors through a fraudulent crypto mining operation. The SEC announced the partially settled charges…
-
Solana price stalls below $80 as exploits test fragile recovery
Solana price has stalled near $76 after repeated failures at $80, as two ecosystem exploits, weak momentum, and geopolitical stress have kept traders cautious. According to data from crypto.news, Solana (SOL) price traded at $76.12 at the time of writing,…
-
Zilliqa halts ZIL transfers after exchange cold wallet theft
Zilliqa asked exchanges to pause ZIL transfers after a partner cold wallet was compromised, while the amount stolen remains undisclosed.
-
Crypto security audits lose trust as institutions demand live monitoring
Crypto institutions move beyond audits after operational failures drove 88.3% of Q2 losses, with monitoring and signer safeguards in focus.
-
MetaMask hired suspected North Korean dev flagged months earlier
A suspected North Korean mole worked on MetaMask's wallet code for a month despite being flagged by a Lazarus Group security page last year. The post MetaMask hired suspected North Korean dev flagged months earlier appeared first on Protos.
-
Zilliqa asks exchanges to pause ZIL transfers after suspected cold wallet theft
Zilliqa said exchanges paused ZIL deposits and withdrawals after an exchange partner’s cold wallet was compromised, with the amount stolen still undisclosed.
-
Brazil’s securities regulator sets up task force with 60-day deadline for tokenization proposal
The framework will address critical issues like official ownership records, private key custody, transaction reversibility and system liability.
-
Crypto institutions look beyond audits as trust signals falter: Hacken
Institutional due diligence is shifting toward continuous monitoring, signer controls and incident readiness after operational failures accounted for most crypto losses.
-
Cross-chain protocol Allbridge halts after $1.65 million flash loan exploit
~$1.6M · The attacker used a $1.12 million flash loan from Kamino to manipulate pool ratios, enabling them to withdraw assets at favorable rates before bridging funds.
-
Threat Intelligence | On-Chain Backdoor in a Malicious TRAE Extension
A malicious extension that has already been removed from Open VSX can still be downloaded from the TRAE IDE extension marketplace. The extension disguises itself as a commonly used Solidity language support plugin, with the package name juannegro.solidity. As of July 18, 2026, TRAE’s plugin marketplace API was still providing version 0.0.189 of the extension (VSIX file). Reverse analysis shows that the extension is actually a cross-platform (Windows, macOS, and Linux) malware dropper. It automatically runs after the IDE starts, creates a user-level persistence mechanism on the system, and the…
-
Allbridge Core — exploit
$1.6M · Attack method: Flash Loan Price Manipulation. Reported loss ~$1,650,000. Cross-chain bridge protocol Allbridge Core was exploited on July 19-20, 2026. The attacker used a ~$1.12M USDC flash loan from Kamino to rapidly swap in the Solana USDC/USDT liquidity pools, manipulating ratios and draining approximately $1.65 million. The team paused the protocol, urged affected LPs to withdraw funds immediately, and asked arbitrage profiteers to return funds for LP compensation.
Sources unavailable: CertiK (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); ConsenSys Diligence (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Cantina / Spearbit (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); pcaversaccio (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Chainabuse (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Arkham Intelligence (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @PeckShieldAlert (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @CertiKAlert (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @CyversAlerts (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @BlockSecTeam (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @AnciliaInc (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Phalcon_xyz (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @zachxbt (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @SlowMist_Team (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @MistTrack_io (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @realScamSniffer (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @samczsun (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @tayvano_ (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @spreekaway (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @_SEAL_Org (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @hypernative (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @HalbornSecurity (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Beosin_com (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @GoPlusSecurity (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Quantstamp (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Chainalysis (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @TrugardLabs (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Immunefi (Invalid character in tag name Line: 1 Column: 49 Char: @)
Generated by GM Security · automated digest, verify before acting.