⬢ GM Security — 2026-07-25: $97.3M across 30 incidents

Daily crypto security briefing

2026-07-25 08:00 UTC · last 72h · 30 items · $97.3M reported losses · 21 sources

📊 Trend tracker

19 new today · 11 developing
7-day: 121 incidents, $278.5M stolen (+33% vs prior week)
30-day: 414 incidents, $4.77B stolen
7-day vectors: bridge exploit (18), flash-loan attack (5), smart-contract bug (3)
Repeat targets (30d): bitcoin (23), trump (11), ethereum (10), coinbase (9), russia (8)
Active actors (30d): Lazarus Group (DPRK) (2)

Last 24 hours

[EXPLOIT · DEVELOPING · day 10] SummerFi to Wind Down After Seven Years, Citing Exploit (The Defiant)
[OTHER · DEVELOPING · day 22] eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up (The Defiant)
[EXPLOIT · NEW] Perp DEX Dango to Wind Down, Will Halt Trading July 29 — ~$1.9M (The Defiant)
[OTHER · NEW] Ex-Sushi CTO Joseph DeLong to Launch Order Book DEX on Robinhood Chain (The Defiant)
[OTHER · NEW] Poolin, Once One of Bitcoin's Biggest Mining Pools, Files for Bankruptcy (Decrypt)
[ENFORCEMENT · NEW] OCC Denies Wise's US National Trust Bank Charter (The Defiant)
[ENFORCEMENT · DEVELOPING · day 3] Justin Sun’s HTX lands on EU sanctions list over alleged Russia ties (crypto.news)
[OTHER · NEW] With the World Cup concluded, LONG DeFi cloud mining is now live; earn up to 50,000 USDT equivalent in BTC, XRP daily (crypto.news)
[EXPLOIT · NEW] Morning Minute: Bitcoin's New $15M Quantum Defense Fund — ~$15.0M (Decrypt)
[ENFORCEMENT · NEW] EU hits Russia with massive 21st sanctions package targeting $120B crypto network (CoinDesk)
[EXPLOIT · NEW] Crypto market maker B2C2 held sale talks with multiple potential buyers (CoinDesk)
[EXPLOIT · NEW] Upbit lifts TAIKO warning after June bridge exploit review (crypto.news)
[SCAM · NEW] The scam that doesn’t rug: How $VLAD farms its victims (crypto.news)
[ENFORCEMENT · NEW] EU bars Belarusians from owning MiCA regulated crypto firms (crypto.news)
[EXPLOIT · NEW] BitMEX faces proposed class-action suit for theft, insider trading as crypto exchange shuts down (CoinDesk)
[EXPLOIT · NEW] Lien Finance hit by $542K exploit tied to bond token logic bug — ~$542K (crypto.news)
[EXPLOIT · NEW] Bitcoin gains 4% as CLARITY Act and hacks shape crypto week (crypto.news)
[EXPLOIT · NEW] Drift exploiter moves $44M through Tornado Cash after months (crypto.news)

Earlier · 24–72h

[EXPLOIT · NEW] DeBond — exploit — $542K (DeFiLlama Hacks DB)
[EXPLOIT · DEVELOPING · day 2] Hacker Behind Fake 'Vladhood' Token Still Collecting Fees After Robinhood CEO's X Account Hack (The Defiant)
[EXPLOIT · DEVELOPING · day 2] Robinhood CEO Vlad Tenev's X Account Hacked to Shill Fake 'Vladhood' Token (Decrypt)
also: The Block · CoinDesk
[OTHER · DEVELOPING · day 2] Southeast Asian Scam Networks Cost Victims Up to $114B in a Year: UN (Decrypt)
[EXPLOIT · DEVELOPING · day 2] DeFi loses $35M in a day: Are ‘bounties’ inviting more hacks? (Protos)
[EXPLOIT · NEW] Verus Ethereum Bridge — exploit — $7.5M (SlowMist Hacked DB)
[EXPLOIT · DEVELOPING · day 2] Arbitrum Perp DEX AFX Trade Drained of $24M, Offers Hacker 30% to Return It — ~$24.0M (Decrypt)
[EXPLOIT · DEVELOPING · day 3] Attacker Drains $24M in USDC From AFX Bridge on Arbitrum — ~$24.0M (The Defiant)
[EXPLOIT · DEVELOPING · day 6] Ostium to Reopen Trading July 23 After $23.8M Vault Exploit — ~$23.8M (The Defiant)
[ENFORCEMENT · DEVELOPING · day 3] US Seizes More Than $25M in Crypto Tied to Investment and Romance Scams (Decrypt)

🧠 Deep reads

Axis Coordinate V2 Contracts Audit (OpenZeppelin)
The EU’s 21st Russia Sanctions Package Targets Crypto Platforms for Sanctions Evasion, Introduces Third-Country Ban Mechanism (Chainalysis)

💡 Security thought-spark

Bug-bounty math: a $50k Immunefi bounty is cheap insurance against a $5M exploit. Is yours live, well-scoped, and actually paid out on time?

Full data: https://gmsecurity.net/briefing.json. Feedback or a source to add? [email protected]. George Donnelly offers Web3 development & security consulting.