30 crypto-security item(s) in the window with ~$133.5M in reported losses The largest is "AFX bridge exploit drains $24.15M USDC as attacker buys 12,467 ETH" (~$24.1M). Dominant vectors: bridge exploit, governance attack.
-
SummerFi to Wind Down After Seven Years, Citing Exploit
Aave founder Stani Kulechov called the DeFi access point 'an OG' as its team said it would sunset the UI.
-
eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up
eToro has become a strategic investor in Extended, an onchain perpetual futures exchange, and said the round begins a partnership with Zengo, the self-custody wallet eToro acquired earlier this year. Neither company disclosed the investment size.
-
South Korea’s Mirae Asset completes acquisition of crypto exchange Korbit
Mirae Asset has completed its takeover of South Korean cryptocurrency exchange Korbit after securing regulatory approval, paving the way to raise its ownership stake to more than 97%. According to an announcement from Korbit, Mirae Asset Consulting, an affiliate of…
-
Bitcoin, Ethereum-linked protocols lose $35 million in multiple attacks hours apart
The attacks hit Verus, B² Network and other cross-chain systems, showing how compromised keys, upgrade powers and validation checks can empty protocols without breaking the underlying cryptography.
-
Verus Ethereum Bridge hacked again for $7.54M after May exploit
~$7.5M · Verus Ethereum Bridge was exploited for about $7.54 million, with Blockaid linking the attack to the same bridge flaw seen in May 2026.
-
Arbitrum-based AFX Trade drained of $24 million after bridge keys compromised
~$24.0M · Security firms said the attacker used enough hot-validator signatures to approve a 24.15 million USDC withdrawal, while Arbitrum said its native bridge was not affected.
-
AFX bridge exploit drains $24.15M USDC as attacker buys 12,467 ETH
~$24.1M · AFX lost $24.15 million in USDC after its cross-chain bridge was exploited, and stolen funds were later swapped into 12,467 ETH on Ethereum.
-
Arbitrum protocol AFX Trade hit by $24 million bridge exploit: Blockaid
~$24.0M · PeckShield flagged that the attacker bridged the stolen funds from Arbitrum to Ethereum and swapped them for 12,467 ETH.
-
Attacker Drains $24M in USDC From AFX Bridge on Arbitrum
~$24.0M · The exploit targeted a bridge operated by derivatives exchange AFX and emptied nearly all of the USDC locked in the contract, according to security firm Blockaid. Arbitrum co-founder Steven Goldfeder said the network's native bridge was not affected.
-
XRP price breaks key barrier as AI payments cross 1 million
XRP price has climbed nearly 4% to a two-week high of $1.1574 as Bitcoin’s return above $65,000, whale accumulation and fresh ETF inflows have supported its latest recovery. According to data from crypto.news, XRP (XRP) price was trading near $1.14…
-
Ostium to Reopen Trading July 23 After $23.8M Vault Exploit
~$23.8M · Positions will be marked to the live market price at reopen, and new OLP liquidity-provider deposits stay paused as the protocol works through recovery.
-
US Seizes More Than $25M in Crypto Tied to Investment and Romance Scams
Prosecutors filed five forfeiture cases as Secret Service agents traced funds from thousands of victims to launderers in Southeast Asia.
-
TRM claims HTX is rotating wallets to ‘stay ahead of screening’
TRM Labs has issued a new analysis claiming that HTX has been rotating its wallets "to stay...ahead of screening" following sanctions. The post TRM claims HTX is rotating wallets to ‘stay ahead of screening’ appeared first on Protos.
-
‘Optimistic signals’ meet a $68,000 wall as bitcoin’s recovery faces its next test: analysts
Bitcoin holds above $65,800 as spot ETFs log a sixth day of inflows. Bitfinex analysts flag $68K resistance as the next test.
-
How Bitcoin ATM scams work and how banks can spot the risk on-chain
Crypto ATM scams reach banks the same way most cryptoasset risk does: through ordinary customers. A customer withdraws cash, feeds it into an ATM on the instruction of someone they've never met, and the funds are gone before anyone at the bank has reason to look twice.
-
U.S. seeks forfeiture of $25 million in crypto tied to romance and investment scams
The cases add to more than $800 million that authorities say a dedicated federal scam task force has recovered.
-
Professional crypto scammer says drunk girls scammed him
Self-proclaimed crypto rugpuller Ronnie Magrehbi says he was robbed of $14,000 worth of crypto by drunk Australian girls partying in Bali. The post Professional crypto scammer says drunk girls scammed him appeared first on Protos.
-
Justin Sun's HTX 'Rotating' On-Chain Wallets Amid UK Sanctions: TRM Labs
TRM Labs says the UK-sanctioned exchange has rotated hot wallets across blockchains, leaving address-list screening struggling to keep pace.
-
Morning Minute: OpenAI Model Escapes Containment, Hacks Hugging Face
Plus, the BTC ETFs stay green. The Clarity Act hits a wall over who enforces the ethics rules. And Jack Mallers walks away from XXI Capital.
-
Midnight token rebounds 19% after Wanchain bridge hack, Hoskinson calls for ZK revamp
Charles Hoskinson says the exploit, which briefly sent NIGHT to an all-time low, underscores why the industry needs to move beyond legacy bridge infrastructure.
-
SecondFi to shut down after $2.4 million ADA wallet theft
~$2.4M · The breach stemmed from a vulnerability in transaction signing software that enabled the derivation of private keys from blockchain transaction data.
-
Crypto institutions look beyond audits as trust signals falter: Hacken
Institutional due diligence is shifting toward continuous monitoring, signer controls and incident readiness after operational failures accounted for most crypto losses.
-
From Having Controls to Effective Controls | Risk Control Insights from the FATF’s Latest Report
Background In July 2026, the Financial Action Task Force (FATF) released its seventh Targeted Update on Implementation of the FATF Standards on Virtual Assets and Virtual Asset Service Providers . The FATF noted that since 2025, illicit activities involving virtual assets have become increasingly sophisticated and interconnected. These include scam centers operated by organized crime groups, pig butchering scams, cyber theft linked to North Korea, terrorist financing/proliferation financing (TF/PF), sanctions evasion, and cross-border money laundering. Stablecoins, peer-to-peer (P2P) transact…
-
SecondFi to wind down after $2.6M ADA theft linked to wallet flaw
~$2.6M · SecondFi will wind down after a $2.6 million ADA theft, while users still await recovery tools that were initially expected within weeks of the exploit.
-
U.S. DOJ targets $25M in crypto linked to investment and romance scams
The U.S. Department of Justice has moved to forfeit more than $25 million in cryptocurrency recovered from five investigations into international fraud networks that allegedly tricked victims in the United States and Canada through fake crypto investment schemes. According to…
-
Balance stablecoin collapses 99% after $1 million exploit drains its bitcoin vaults
~$1.0M · An attacker fed the lending system a fake, abnormally low bitcoin price, liquidated vaults that should have been safe, and pocketed the difference in a single transaction.
-
US seeks forfeiture of $25 million in crypto tied to global fraud investigations
US prosecutors seek forfeiture of $25 million in crypto recovered from five investigations into international fraud and laundering networks.
-
AI models escaped OpenAI’s sandbox and hit Hugging Face. Crypto is where that gets dangerous
OpenAI said the systems had their cyber guardrails lowered for an internal benchmark, but the incident shows how autonomous exploit chains could pose a deeper threat to smart contracts.
-
HTX keeps rotating wallets to evade UK sanctions screening: TRM Labs
UK authorities sanctioned the crypto exchange in May for its alleged role in facilitating Russian sanctions evasion.
-
BlockThreat - Week 29, 2026
$35.3M stolen across 21 incidents. Infinite minting blockchains, subverted governance, bridge hacks, and the clearest signal yet of where defense is heading.
Sources unavailable: CertiK (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); ConsenSys Diligence (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Cantina / Spearbit (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); pcaversaccio (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Chainabuse (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Arkham Intelligence (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @PeckShieldAlert (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @CertiKAlert (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @CyversAlerts (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @BlockSecTeam (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @AnciliaInc (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Phalcon_xyz (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @zachxbt (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @SlowMist_Team (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @MistTrack_io (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @realScamSniffer (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @samczsun (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @tayvano_ (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @spreekaway (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @_SEAL_Org (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @hypernative (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @HalbornSecurity (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Beosin_com (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @GoPlusSecurity (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Quantstamp (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Chainalysis (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @TrugardLabs (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Immunefi (Feed not recognized as RSS 1 or 2.); Immunefi Audit Reports (source deadline 45000ms exceeded)
Generated by GM Security · automated digest, verify before acting.