25 crypto-security item(s) in the window with ~$33.5M in reported losses The largest is "Ostium - Rekt" ($23.8M). Dominant vectors: bridge exploit, access-control flaw, flash-loan attack, governance attack.
-
SummerFi to Wind Down After Seven Years, Citing Exploit
Aave founder Stani Kulechov called the DeFi access point 'an OG' as its team said it would sunset the UI.
-
eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up
eToro has become a strategic investor in Extended, an onchain perpetual futures exchange, and said the round begins a partnership with Zengo, the self-custody wallet eToro acquired earlier this year. Neither company disclosed the investment size.
-
US seeks forfeiture of $25 million in crypto tied to global fraud investigations
US prosecutors seek forfeiture of $25 million in crypto recovered from five investigations into international fraud and laundering networks.
-
AI models escaped OpenAI’s sandbox and hit Hugging Face. Crypto is where that gets dangerous
OpenAI said the systems had their cyber guardrails lowered for an internal benchmark, but the incident shows how autonomous exploit chains could pose a deeper threat to smart contracts.
-
HTX keeps changing wallets after UK sanctions, TRM Labs says
TRM Labs says HTX rotates wallets across four blockchains after UK sanctions, while the exchange calls the changes routine security steps.
-
BlockThreat - Week 29, 2026
$35.3M stolen across 21 incidents. Infinite minting blockchains, subverted governance, bridge hacks, and the clearest signal yet of where defense is heading.
-
Can Solana price break past $80 resistance this week?
Solana price has climbed to $78 after buyers defended support near $74, though repeated failures below $80 and lingering concern over the BONK governance attack have kept market sentiment cautious. According to data from crypto.news, Solana (SOL) price traded at…
-
AI firm ORO says North Korean hacker stole $600K worth of crypto
~$630K · ORO revealed that it lost $630K in crypto when a North Korean hacker tricked a staff member into installing a malicious Microsoft extension. The post AI firm ORO says North Korean hacker stole $600K worth of crypto appeared first on Protos.
-
Galaxy sets up $5 million fund to help shield Bitcoin against quantum computing threats
The crypto financial services firm is funding developers to strengthen the blockchain's security before quantum computers become powerful enough to steal billions in crypto.
-
Russia’s parliament passes crypto market law with $3,800 annual cap for retail investors
While citizens still cannot use Bitcoin to buy groceries, the Kremlin is officially letting companies use digital tokens to bypass sanctions and other global trade hurdles.
-
Russia is legalizing crypto for everyone except Russians
The Duma's crypto law caps citizens at $3,800 a year while opening unlimited cross-border rails for sanctions-era trade. The design, decoded.
-
FlashTrade — exploit
$98K · Attack method: Unknown. Reported loss ~$98,000. FlashTrade (a Solana perps protocol) detected an unauthorized $98,000 withdrawal from its ephemeral instance. As a precaution, trading, deposits, and withdrawals were paused. Thanks to the newly rolled-out withdrawal batching and monitoring system, the incident was detected quickly and contained. The team will fully cover the amount, with all user funds safe.
-
Ostium - Rekt
$23.8M · An attacker used a trusted price forwarder to feed the vault a fake $60K Bitcoin quote to drain $23.75 million from Ostium on Arbitrum, then collected the payout on trades that were never real.
-
Siemens Opcenter X
View CSAF Summary Opcenter X before V2604 contain an authentication bypass vulnerability that could allow an attacker to gain full unauthorized access to the application. Siemens has released a new version for Opcenter X and recommends to update to the latest version. The following versions of Siemens Opcenter X are affected: Opcenter X vers:intdot/<2604 CVSS Vendor Equipment Vulnerabilities v3 10 Siemens Siemens Opcenter X Improper Verification of Cryptographic Signature Background Critical Infrastructure Sectors: Critical Manufacturing Countries/Areas Deployed: Worldwide Company Headquarter…
-
CMTAT Confidential Audit
Summary
-
Pakistan Launches Crypto Investigation Unit to Fight Money Laundering
Islamabad is building the enforcement side of its crypto push, standing up a unit to police money laundering even as it licenses exchanges.
-
Crypto AML Software for Detecting Money Laundering: A Buyer's Guide | TRM Labs
Learn what effective crypto AML software for detecting money laundering must do, and why financial institutions, law enforcement, and regulators choose TRM Labs.
-
Russia's First Comprehensive Crypto Law Is Two Votes Away From Passing
The bill licenses exchanges, caps retail investors at about $3,800 a year, and creates a legal pathway for Russian companies to pay foreign partners in crypto—bypassing Western sanctions.
-
Consensys Halted MetaMask Releases Over North Korea-Linked Contractor
A contractor brought in through a third-party provider worked on MetaMask code from March until Consensys cut off access in April and paused product releases. The company says it found no stolen assets, exposed data or malicious code.
-
Allbridge Halts Core Bridge After $1.65M Flash Loan Exploit
~$1.6M · The attacker used a $1.12 million Kamino flash loan to skew Allbridge's Solana stablecoin pools, then bridged the proceeds to Ethereum, security firms said.
-
Across, Allbridge, TeleSwap lost $5.7M to bridge hacks in past week
~$5.7M · A trio of hacks targeting blockchain bridges Across, Allbridge, and TeleSwap have seen over $5M lost in recent days. The post Across, Allbridge, TeleSwap lost $5.7M to bridge hacks in past week appeared first on Protos.
-
MetaMask hired suspected North Korean dev flagged months earlier
A suspected North Korean mole worked on MetaMask's wallet code for a month despite being flagged by a Lazarus Group security page last year. The post MetaMask hired suspected North Korean dev flagged months earlier appeared first on Protos.
-
Zilliqa asks exchanges to pause ZIL transfers after suspected cold wallet theft
Zilliqa said exchanges paused ZIL deposits and withdrawals after an exchange partner’s cold wallet was compromised, with the amount stolen still undisclosed.
-
Threat Intelligence | On-Chain Backdoor in a Malicious TRAE Extension
A malicious extension that has already been removed from Open VSX can still be downloaded from the TRAE IDE extension marketplace. The extension disguises itself as a commonly used Solidity language support plugin, with the package name juannegro.solidity. As of July 18, 2026, TRAE’s plugin marketplace API was still providing version 0.0.189 of the extension (VSIX file). Reverse analysis shows that the extension is actually a cross-platform (Windows, macOS, and Linux) malware dropper. It automatically runs after the IDE starts, creates a user-level persistence mechanism on the system, and the…
-
Allbridge Core — exploit
$1.6M · Attack method: Flash Loan Price Manipulation. Reported loss ~$1,650,000. Cross-chain bridge protocol Allbridge Core was exploited on July 19-20, 2026. The attacker used a ~$1.12M USDC flash loan from Kamino to rapidly swap in the Solana USDC/USDT liquidity pools, manipulating ratios and draining approximately $1.65 million. The team paused the protocol, urged affected LPs to withdraw funds immediately, and asked arbitrage profiteers to return funds for LP compensation.
Sources unavailable: CertiK (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); ConsenSys Diligence (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Cantina / Spearbit (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); pcaversaccio (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Chainabuse (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Arkham Intelligence (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @PeckShieldAlert (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @CertiKAlert (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @CyversAlerts (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @BlockSecTeam (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @AnciliaInc (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Phalcon_xyz (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @zachxbt (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @SlowMist_Team (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @MistTrack_io (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @realScamSniffer (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @samczsun (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @tayvano_ (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @spreekaway (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @_SEAL_Org (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @hypernative (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @HalbornSecurity (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Beosin_com (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @GoPlusSecurity (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Quantstamp (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Chainalysis (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @TrugardLabs (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Immunefi (Invalid character in tag name Line: 1 Column: 49 Char: @)
Generated by GM Security · automated digest, verify before acting.