⬢ GM Security — 2026-07-23: $133.5M across 30 incidents

Daily crypto security briefing

2026-07-23 08:00 UTC · last 72h · 30 items · $133.5M reported losses · 21 sources

📊 Trend tracker

19 new today · 11 developing
7-day: 106 incidents, $240.4M stolen (-81% vs prior week)
30-day: 425 incidents, $5.46B stolen
7-day vectors: bridge exploit (12), flash-loan attack (5), oracle manipulation (5)
Repeat targets (30d): bitcoin (22), trump (11), ethereum (9), coinbase (9), secondfi (8)
Active actors (30d): Lazarus Group (DPRK) (2)

Last 24 hours

[EXPLOIT · DEVELOPING · day 8] SummerFi to Wind Down After Seven Years, Citing Exploit (The Defiant)
[OTHER · DEVELOPING · day 20] eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up (The Defiant)
[ENFORCEMENT · DEVELOPING · day 6] South Korea’s Mirae Asset completes acquisition of crypto exchange Korbit (crypto.news)
[EXPLOIT · NEW] Bitcoin, Ethereum-linked protocols lose $35 million in multiple attacks hours apart (CoinDesk)
[EXPLOIT · NEW] Verus Ethereum Bridge hacked again for $7.54M after May exploit — ~$7.5M (crypto.news)
[EXPLOIT · NEW] Arbitrum-based AFX Trade drained of $24 million after bridge keys compromised — ~$24.0M (CoinDesk)
[EXPLOIT · NEW] AFX bridge exploit drains $24.15M USDC as attacker buys 12,467 ETH — ~$24.1M (crypto.news)
[EXPLOIT · NEW] Arbitrum protocol AFX Trade hit by $24 million bridge exploit: Blockaid — ~$24.0M (The Block)
[EXPLOIT · NEW] Attacker Drains $24M in USDC From AFX Bridge on Arbitrum — ~$24.0M (The Defiant)
[OTHER · DEVELOPING · day 5] XRP price breaks key barrier as AI payments cross 1 million (crypto.news)
[EXPLOIT · DEVELOPING · day 4] Ostium to Reopen Trading July 23 After $23.8M Vault Exploit — ~$23.8M (The Defiant)
[ENFORCEMENT · NEW] US Seizes More Than $25M in Crypto Tied to Investment and Romance Scams (Decrypt)
[ENFORCEMENT · NEW] TRM claims HTX is rotating wallets to ‘stay ahead of screening’ (Protos)
[OTHER · NEW] ‘Optimistic signals’ meet a $68,000 wall as bitcoin’s recovery faces its next test: analysts (The Block)
[ENFORCEMENT · NEW] U.S. seeks forfeiture of $25 million in crypto tied to romance and investment scams (CoinDesk)
[OTHER · NEW] Professional crypto scammer says drunk girls scammed him (Protos)
[ENFORCEMENT · NEW] Justin Sun's HTX 'Rotating' On-Chain Wallets Amid UK Sanctions: TRM Labs (Decrypt)
[EXPLOIT · DEVELOPING · day 4] Morning Minute: OpenAI Model Escapes Containment, Hacks Hugging Face (Decrypt)
[EXPLOIT · NEW] Midnight token rebounds 19% after Wanchain bridge hack, Hoskinson calls for ZK revamp (CoinDesk)
[EXPLOIT · NEW] SecondFi to shut down after $2.4 million ADA wallet theft — ~$2.4M (CoinDesk)
[ADVISORY · DEVELOPING · day 2] Crypto institutions look beyond audits as trust signals falter: Hacken (Cointelegraph (Security))
[EXPLOIT · NEW] SecondFi to wind down after $2.6M ADA theft linked to wallet flaw — ~$2.6M (Cointelegraph (Security))
[ENFORCEMENT · NEW] U.S. DOJ targets $25M in crypto linked to investment and romance scams (crypto.news)
[EXPLOIT · NEW] Balance stablecoin collapses 99% after $1 million exploit drains its bitcoin vaults — ~$1.0M (CoinDesk)

Earlier · 24–72h

[ENFORCEMENT · DEVELOPING · day 2] US seeks forfeiture of $25 million in crypto tied to global fraud investigations (The Block)
[EXPLOIT · DEVELOPING · day 2] AI models escaped OpenAI’s sandbox and hit Hugging Face. Crypto is where that gets dangerous (CoinDesk)
[ENFORCEMENT · DEVELOPING · day 2] HTX keeps rotating wallets to evade UK sanctions screening: TRM Labs (The Block)
[EXPLOIT · DEVELOPING · day 2] BlockThreat - Week 29, 2026 (BlockThreat)

🧠 Deep reads

💡 Security thought-spark

Monitor your protocol like an attacker would: alert on large withdrawals, admin calls, and pause events (Tenderly / Hypernative / Forta). Detection time is loss size.

Full data: https://gmsecurity.net/briefing.json. Feedback or a source to add? [email protected]. George Donnelly offers Web3 development & security consulting.