⬢ GM Security — 2026-07-24: $172.5M across 30 incidents

Daily crypto security briefing

2026-07-24 08:00 UTC · last 72h · 30 items · $172.5M reported losses · 22 sources

📊 Trend tracker

12 new today · 18 developing
7-day: 118 incidents, $307.0M stolen (-76% vs prior week)
30-day: 418 incidents, $4.75B stolen
7-day vectors: bridge exploit (15), oracle manipulation (6), flash-loan attack (5)
Repeat targets (30d): bitcoin (23), trump (11), ethereum (9), coinbase (9), secondfi (8)
Active actors (30d): Lazarus Group (DPRK) (2)

Last 24 hours

[EXPLOIT · DEVELOPING · day 9] SummerFi to Wind Down After Seven Years, Citing Exploit (The Defiant)
[OTHER · DEVELOPING · day 21] eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up (The Defiant)
[ENFORCEMENT · NEW] EU targets 14 crypto operators and 94 banks in Russia sanctions (crypto.news)
[EXPLOIT · NEW] Hacker Behind Fake 'Vladhood' Token Still Collecting Fees After Robinhood CEO's X Account Hack (The Defiant)
[EXPLOIT · NEW] Robinhood CEO Vlad Tenev’s X account hacked in $10M memecoin scam — ~$10.0M (crypto.news)
[EXPLOIT · NEW] Robinhood CEO Vlad Tenev's X Account Hacked to Shill Fake 'Vladhood' Token (Decrypt)
also: The Block · CoinDesk
[OTHER · NEW] Southeast Asian Scam Networks Cost Victims Up to $114B in a Year: UN (Decrypt)
[EXPLOIT · NEW] DeFi loses $35M in a day: Are ‘bounties’ inviting more hacks? (Protos)
[ENFORCEMENT · NEW] Will Bitcoin price hold $65K support as oil surge revives inflation fears? (crypto.news)
[OTHER · NEW] Crypto catches its breath as bitcoin settles into a holding pattern amid July rally (CoinDesk)
[EXPLOIT · NEW] Arbitrum Perp DEX AFX Trade Drained of $24M, Offers Hacker 30% to Return It — ~$24.0M (Decrypt)
[EXPLOIT · NEW] New Verus-Ethereum bridge attack drains $7.5 million through flaw used in May: Blockaid — $7.5M (The Block)
also: SlowMist Hacked DB

Earlier · 24–72h

[ENFORCEMENT · DEVELOPING · day 7] South Korea’s Mirae Asset completes acquisition of crypto exchange Korbit (crypto.news)
[EXPLOIT · DEVELOPING · day 2] Bitcoin, Ethereum-linked protocols lose $35 million in multiple attacks hours apart (CoinDesk)
[EXPLOIT · DEVELOPING · day 2] Verus Ethereum Bridge hacked again for $7.54M after May exploit — ~$7.5M (crypto.news)
[EXPLOIT · DEVELOPING · day 2] Arbitrum-based AFX Trade drained of $24 million after bridge keys compromised — ~$24.0M (CoinDesk)
[EXPLOIT · DEVELOPING · day 2] Arbitrum protocol AFX Trade hit by $24 million bridge exploit: Blockaid — ~$24.0M (The Block)
[EXPLOIT · DEVELOPING · day 2] Attacker Drains $24M in USDC From AFX Bridge on Arbitrum — ~$24.0M (The Defiant)
[EXPLOIT · DEVELOPING · day 5] Ostium to Reopen Trading July 23 After $23.8M Vault Exploit — ~$23.8M (The Defiant)
[ENFORCEMENT · DEVELOPING · day 2] US Seizes More Than $25M in Crypto Tied to Investment and Romance Scams (Decrypt)
[ENFORCEMENT · DEVELOPING · day 2] TRM claims HTX is rotating wallets to ‘stay ahead of screening’ (Protos)
[OTHER · DEVELOPING · day 2] Professional crypto scammer says drunk girls scammed him (Protos)
[ENFORCEMENT · DEVELOPING · day 2] Justin Sun's HTX 'Rotating' On-Chain Wallets Amid UK Sanctions: TRM Labs (Decrypt)
[EXPLOIT · NEW] AFX Bridge — exploit — $24.1M (SlowMist Hacked DB)
[EXPLOIT · NEW] 42DAO — exploit — $915K (SlowMist Hacked DB)
[EXPLOIT · DEVELOPING · day 5] Morning Minute: OpenAI Model Escapes Containment, Hacks Hugging Face (Decrypt)
[ADVISORY · DEVELOPING · day 3] Crypto institutions look beyond audits as trust signals falter: Hacken (Cointelegraph (Security))
[EXPLOIT · DEVELOPING · day 2] SecondFi to wind down after $2.6M ADA theft linked to wallet flaw — ~$2.6M (Cointelegraph (Security))

🧠 Deep reads

💡 Security thought-spark

Bridge inputs are untrusted inputs: validate source chain, sender, and nonce on every cross-chain message. Replays are how bridges get drained.

Full data: https://gmsecurity.net/briefing.json. Feedback or a source to add? [email protected]. George Donnelly offers Web3 development & security consulting.