27 crypto-security item(s) in the window with ~$88.0M in reported losses The largest is "Across Protocol relayer loses under $4M in Solana attack" (~$41.7M). Dominant vectors: governance attack, phishing / wallet drainer, access-control flaw, private-key compromise.
-
SummerFi to Wind Down After Seven Years, Citing Exploit
Aave founder Stani Kulechov called the DeFi access point 'an OG' as its team said it would sunset the UI.
-
eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up
eToro has become a strategic investor in Extended, an onchain perpetual futures exchange, and said the round begins a partnership with Zengo, the self-custody wallet eToro acquired earlier this year. Neither company disclosed the investment size.
-
MistEye DNS Guard Officially Released: A Lightweight Host-Based Defense for Network Threat…
MistEye DNS Guard Officially Released: A Lightweight Host-Based Defense for Network Threat Visibility The SlowMist Security Team has officially released MistEye DNS Guard , a lightweight local DNS relay and threat observation tool written in Rust. Designed for macOS and Linux hosts, it provides system-wide DNS takeover, domain and public IP detection, outbound process monitoring, malicious event retention, and Webhook alerting. It is primarily built to cover common risk scenarios such as access to malicious domains, DNS responses containing malicious indicators, and applications directly conn…
-
Garden Finance takes app offline after independent solver database compromise
Garden Finance has temporarily taken its application offline after an attacker compromised the off-chain database of an independent solver, leading to the loss of solver-owned digital assets while leaving protocol contracts and user funds unaffected. Blockchain security firm Blockaid reported…
-
Triple A says it can meet all liabilities after treasury wallet exploit
Triple-A has confirmed that unauthorized access to its treasury wallets resulted in the loss of company-owned digital assets while stating that client funds and payment operations have remained unaffected. Triple-A said in a statement on Monday that it detected unauthorized…
-
WEMIX freezes bridges after owner-key breach mints 5.23M WEMIX$
~$724K · WEMIX says compromised contract owner privileges enabled 5.23M WEMIX$ minting, while $724,198 in USDC.e moved across chains during the hack.
-
Triple-A hot wallet losses climb to $11.8 million as new deposits keep being swept: report
~$11.8M · Triple-A said it is investigating and that customer funds are not affected, though it has not fully addressed the incident publicly.
-
WEMIX — exploit
$6.3M · Attack method: Private Key Leakage. Reported loss ~$6,250,000. The owner privileges of a WEMIX$-related smart contract were compromised, allowing the attacker to illegally mint approximately 5.23 million WEMIX$ stablecoins (worth about $6.25 million), which were swapped into WEMIX and USDC.e before being bridged out. The team has suspended bridges and related services while working with exchanges, security firms, and law enforcement to track the funds.
-
Garden Finance — exploit
$450K · Attack method: Supply Chain Attack. Reported loss ~$450,000. Security firm Blockaid detected an ongoing exploit targeting Garden Finance’s HTLC contracts, draining about $450,000 in USDT across Ethereum, Base, Arbitrum, and BNB Chain. The project stated that an independent solver’s off-chain database was compromised and fraudulent records were inserted, causing improper fund releases; the protocol and smart contracts themselves were not compromised, and the app has been temporarily taken offline.
-
Threat Intelligence | From “Compliant Emails” to Remote Control: An Investigation into a Web3…
Threat Intelligence | From “Compliant Emails” to Remote Control: An Investigation into a Web3 Wallet Phishing Attack Background Recently, the SlowMist security team captured a phishing attack campaign that lasted for several months and was carried out through multiple channels, with the attackers impersonating multiple Web3 wallet brands. We first noticed this incident through two phishing emails. The attackers impersonated Keystone and OneKey respectively, using pretexts such as “terms of service updates,” “account verification,” and “regulatory compliance” to require recipients to complete…
-
Binance tests staff monthly with fake phishing attacks
Binance tests staff with monthly phishing drills, retrains failures, and may dismiss repeat offenders as social engineering attacks grow.
-
EU adds HTX to Russia sanctions list, barring transactions starting Aug. 23
Other crypto platforms listed alongside HTX include EXMO, Rapira, BitPapa, Aifory Pro, WhiteBird, NoOnecrypto and Exnode.
-
Ripple bought a bank in pieces. Here is the $4 billion audit
While the market watched the token, the company spent $4 billion assembling what it was never granted: custody, prime brokerage, corporate treasury, and payment rails, acquisition by acquisition. This is the audit of what the money bought, what it earns,…
-
North Korea arrests hackers accused of laundering stolen funds from country's bank via crypto
The group allegedly breached Central Bank systems, converted crypto to cash via Chinese brokers, and used small transfers to evade detection.
-
ARK Invest buys $251K of BitMine, Solana ETF
Cathie Wood’s ARK Invest has added about $251,500 in BitMine Immersion Technologies shares and the 3iQ Solana Staking ETF across three of its exchange-traded funds. ARK Invest adds BitMine exposure ARK Invest’s Friday trade disclosures show its flagship ARK Innovation…
-
Bankrbot — exploit
$480K · Attack method: Account Compromise. Reported loss ~$479,885. The Bankrbot X account (despite on-device passkey) was compromised and posted fake airdrop links; concurrently, the project's Bankr wallet (without MFA) was drained of ~1.5 billion $BNKR tokens which were then dumped.
-
Triple-A hot wallets lose $9.7M in suspected exploit
~$9.7M · Triple-A’s hot wallets appear to have lost more than $9.7 million across several blockchains, with the suspected attacker swapping the assets and consolidating the proceeds on Ethereum. What happened to Triple-A’s hot wallets On-chain analyst Specter first identified suspicious transactions…
-
Across Protocol relayer loses under $4M in Solana attack
~$41.7M · Across Protocol’s Risk Labs-operated relayer lost less than $4 million after an attacker fabricated $41.7 million in Solana deposit events, according to a post-incident report released by the cross-chain protocol. Across attacker forged 1,627 Solana deposits The attack occurred between…
-
Perp DEX Dango to Wind Down, Will Halt Trading July 29
~$1.9M · The Hack VC-backed Layer 1 will shut its blockchain on Aug. 13 and return user funds as USDC, closing out a mainnet run of under four months that began with a $1.9 million exploit.
-
Ex-Sushi CTO Joseph DeLong to Launch Order Book DEX on Robinhood Chain
The former SushiSwap CTO described the decentralized exchange as a side project that 'outgrew nights and weekends,' with no specs, contract, or token disclosed.
-
The EU’s 21st Russia Sanctions Package Targets Crypto Platforms for Sanctions Evasion, Introduces Third-Country Ban Mechanism
Summary The EU’s 21st Russia sanctions package introduces a transaction ban on 14 crypto-related service platforms across six jurisdictions: Georgia,… The post The EU’s 21st Russia Sanctions Package Targets Crypto Platforms for Sanctions Evasion, Introduces Third-Country Ban Mechanism appeared first on Chainalysis.
-
Poolin, Once One of Bitcoin's Biggest Mining Pools, Files for Bankruptcy
The Singapore-based pool never recovered from freezing withdrawals in 2022. Now it's auctioning off its last Texas mining sites to pay back 11,700 users still holding IOUs.
-
OCC Denies Wise's US National Trust Bank Charter
The regulator cited money-laundering risk concerns in a rare rejection amid a wave of crypto charter approvals. Wise plans to refile under the GENIUS Act.
-
Axis Coordinate V2 Contracts Audit
Summary Type: DeFi Timeline: 2026-07-03 → 2026-07-07 Languages: Solidity Findings Total issues: 25 (24 resolved, 1 partially resolved) Critical: 0 (0 resolved) · High: 2 (2 resolved) · Medium: 7 (6 resolved, 1 partially resolved) · Low: 13 (13 resolved) Notes & Additional Information 3 notes raised (3 resolved) Client Reported Issues 0 reported issues (0 resolved)
-
Morning Minute: Bitcoin's New $15M Quantum Defense Fund
~$15.0M · Plus, the Clarity Act is no longer expected to progress before the August recess. And Vlad Tenev's X was hacked to post a meme coin...
-
EU hits Russia with massive 21st sanctions package targeting $120B crypto network
The EU is considering a ban on third-country crypto services providers for the first time and is targeting 14 crypto companies, which it has not named yet.
-
Crypto market maker B2C2 held sale talks with multiple potential buyers
The SBI-owned crypto trading firm is said to have attracted takeover interest from a number of suitors over the past 18 months, but valuation has been a sticking point.
Sources unavailable: CertiK (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); ConsenSys Diligence (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Cantina / Spearbit (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); pcaversaccio (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Chainabuse (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Arkham Intelligence (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @PeckShieldAlert (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @CertiKAlert (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @CyversAlerts (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @BlockSecTeam (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @AnciliaInc (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Phalcon_xyz (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @zachxbt (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @SlowMist_Team (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @MistTrack_io (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @realScamSniffer (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @samczsun (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @tayvano_ (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @spreekaway (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @_SEAL_Org (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @hypernative (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @HalbornSecurity (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Beosin_com (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @GoPlusSecurity (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Quantstamp (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Chainalysis (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @TrugardLabs (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Immunefi (Invalid character in tag name Line: 1 Column: 49 Char: @)
Generated by GM Security · automated digest, verify before acting.