⬢ GM Security — 2026-07-26: $110.0M across 29 incidents

Daily crypto security briefing

2026-07-26 08:00 UTC · last 72h · 29 items · $110.0M reported losses · 21 sources

📊 Trend tracker

• 8 new today · 21 developing
• 7-day: 130 incidents, $340.1M stolen (+63% vs prior week)
• 30-day: 405 incidents, $4.81B stolen
• 7-day vectors: bridge exploit (18), flash-loan attack (5), smart-contract bug (3)
• Repeat targets (30d): bitcoin (23), trump (11), russia (9), ethereum (9), coinbase (9)
• Active actors (30d): Lazarus Group (DPRK) (3)

Last 24 hours

• [EXPLOIT · DEVELOPING · day 11] SummerFi to Wind Down After Seven Years, Citing Exploit (The Defiant)
• [OTHER · DEVELOPING · day 23] eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up (The Defiant)
• [SCAM · NEW] Binance tests staff monthly with fake phishing attacks (crypto.news)
• [ENFORCEMENT · NEW] EU adds HTX to Russia sanctions list, barring transactions starting Aug. 23 (The Block)
• [ADVISORY · NEW] Ripple bought a bank in pieces. Here is the $4 billion audit (crypto.news)
• [ENFORCEMENT · NEW] North Korea arrests hackers accused of laundering stolen funds from country's bank via crypto (CoinDesk)
  also: crypto.news
• [OTHER · DEVELOPING · day 3] ARK Invest buys $251K of BitMine, Solana ETF (crypto.news)
• [SCAM · NEW] Bankrbot — exploit — $480K (SlowMist Hacked DB)
• [EXPLOIT · NEW] Triple-A hot wallets lose $9.7M in suspected exploit — ~$9.7M (crypto.news)
• [EXPLOIT · NEW] Across Protocol relayer loses under $4M in Solana attack — ~$41.7M (crypto.news)

Earlier · 24–72h

• [EXPLOIT · DEVELOPING · day 2] Perp DEX Dango to Wind Down, Will Halt Trading July 29 — ~$1.9M (The Defiant)
• [OTHER · DEVELOPING · day 2] Ex-Sushi CTO Joseph DeLong to Launch Order Book DEX on Robinhood Chain (The Defiant)
• [OTHER · DEVELOPING · day 2] Poolin, Once One of Bitcoin's Biggest Mining Pools, Files for Bankruptcy (Decrypt)
• [ENFORCEMENT · DEVELOPING · day 2] OCC Denies Wise's US National Trust Bank Charter (The Defiant)
• [ENFORCEMENT · DEVELOPING · day 4] Justin Sun’s HTX lands on EU sanctions list over alleged Russia ties (crypto.news)
• [OTHER · DEVELOPING · day 2] With the World Cup concluded, LONG DeFi cloud mining is now live; earn up to 50,000 USDT equivalent in BTC, XRP daily (crypto.news)
• [EXPLOIT · DEVELOPING · day 2] Morning Minute: Bitcoin's New $15M Quantum Defense Fund — ~$15.0M (Decrypt)
• [ENFORCEMENT · DEVELOPING · day 2] EU hits Russia with massive 21st sanctions package targeting $120B crypto network (CoinDesk)
• [EXPLOIT · DEVELOPING · day 2] Crypto market maker B2C2 held sale talks with multiple potential buyers (CoinDesk)
• [EXPLOIT · DEVELOPING · day 2] BitMEX faces proposed class-action suit for theft, insider trading as crypto exchange shuts down (CoinDesk)
• [EXPLOIT · NEW] Triple-A — exploit — $9.7M (DeFiLlama Hacks DB)
• [EXPLOIT · DEVELOPING · day 3] Hacker Behind Fake 'Vladhood' Token Still Collecting Fees After Robinhood CEO's X Account Hack (The Defiant)
• [EXPLOIT · DEVELOPING · day 3] Robinhood CEO Vlad Tenev's X Account Hacked to Shill Fake 'Vladhood' Token (Decrypt)
  also: The Block
• [OTHER · DEVELOPING · day 3] Southeast Asian Scam Networks Cost Victims Up to $114B in a Year: UN (Decrypt)
• [EXPLOIT · DEVELOPING · day 3] DeFi loses $35M in a day: Are ‘bounties’ inviting more hacks? (Protos)
• [EXPLOIT · DEVELOPING · day 2] Verus Ethereum Bridge — exploit — $7.5M (SlowMist Hacked DB)
• [EXPLOIT · DEVELOPING · day 3] Arbitrum Perp DEX AFX Trade Drained of $24M, Offers Hacker 30% to Return It — ~$24.0M (Decrypt)

🧠 Deep reads

• Axis Coordinate V2 Contracts Audit (OpenZeppelin)
• The EU’s 21st Russia Sanctions Package Targets Crypto Platforms for Sanctions Evasion, Introduces Third-Country Ban Mechanism (Chainalysis)

💡 Security thought-spark

Verify, don't trust the deploy: re-derive deployed bytecode from source and diff it. Malicious swaps happen at deploy time, after the audit.

Full data: https://gmsecurity.net/briefing.json. Feedback or a source to add? [email protected]. George Donnelly offers Web3 development & security consulting.