19 crypto-security item(s) in the window with ~$2.14B in reported losses The largest is "Crypto security losses hit $1.1B in H1 2026: Blockaid report" (~$1.10B). Dominant vectors: bridge exploit, governance attack, private-key compromise, smart-contract bug.

• 🧊 On-chain — Tether USDT freezes (7d): 6 addresses (2026-07-28). Source: Dune
• bridge exploit activity observed (1 item(s))
• governance attack activity observed (1 item(s))
• private-key compromise activity observed (1 item(s))

• SummerFi to Wind Down After Seven Years, Citing Exploit
  Aave founder Stani Kulechov called the DeFi access point 'an OG' as its team said it would sunset the UI.
  The Defiant · Wed, 29 Jul 2026 08:00:05 GMT
• eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up
  eToro has become a strategic investor in Extended, an onchain perpetual futures exchange, and said the round begins a partnership with Zengo, the self-custody wallet eToro acquired earlier this year. Neither company disclosed the investment size.
  The Defiant · Wed, 29 Jul 2026 08:00:05 GMT
• Myanmar crypto scam bill clears parliament
  Myanmar’s Parliament approved an anti-scam bill proposing 10-year-to-life terms for crypto fraud, while final enactment details remain pending.
  crypto.news · Wed, 29 Jul 2026 06:24:02 GMT
• Crypto security losses hit $1.1B in H1 2026: Blockaid report
  ~$1.10B · Crypto security incidents caused $1.1 billion in losses across 212 cases in H1 2026, as key compromises overtook contract bugs.
  crypto.news · Wed, 29 Jul 2026 04:57:06 GMT
• Threat Intelligence | Job Scam Alert: Interview Software Used to Deliver Info-Stealing Malware
  Background Recently, MistEye identified an information-stealing campaign targeting Web3 professionals through fake recruitment offers. Attackers impersonate recruiters, contact job seekers about interview arrangements, and then direct them to relay.lc for further communication. The site presents itself as Relay , an AI-powered meeting and collaboration platform, claiming to offer features such as real-time transcription, collaborative notes, AI-generated summaries, action items, and cross-platform desktop clients. For someone attending a remote interview, this workflow does not appear unusual…
  SlowMist · Wed, 29 Jul 2026 03:56:57 GMT
• Crypto hacks hit record high in H1 2026 as losses top $1 billion, Blockaid says
  ~$1.00B · Ethereum and Solana projects lost the most during the first half of 2026, at $332 million and $326 million, respectively.
  The Block · Tue, 28 Jul 2026 19:45:26 GMT
• Zcash Activates Ironwood Upgrade After Counterfeiting Scare
  The long-awaited network upgrade retires Zcash's vulnerable Orchard shielded pool and introduces new safeguards to protect the cryptocurrency's supply.
  Decrypt · Tue, 28 Jul 2026 18:24:19 GMT
• 1inch Aqua and SwapVM MVP v1.0 Audit
  Summary Type: DeFi Timeline: 2026-01-12 → 2026-02-02 Languages: Solidity
  OpenZeppelin · Tue, 28 Jul 2026 16:55:52 GMT
• Clear Creek reveals $15M Bitcoin, crypto ETF portfolio
  Clear Creek Financial Management disclosed about $15.1 million across Bitcoin, Ethereum, XRP, and Solana exchange-traded funds in its latest US regulatory filing. Clear Creek’s Bitcoin ETF holdings top $10 million Clear Creek’s largest disclosed crypto position was the Bitwise Bitcoin…
  crypto.news · Tue, 28 Jul 2026 16:22:49 GMT
• Apple kept fake bitcoin wallet on App Store after $875,000 theft report, lawsuit alleges
  ~$875K · A lawsuit alleges Apple kept a fake bitcoin wallet app on its store after one user reported an $875,000 theft, leading to another user having roughly $840,000 stolen.
  CoinDesk · Tue, 28 Jul 2026 11:59:17 GMT
• ChatGPT’s Hugging Face breach shows why AI containment matters more than ever
  AEREDIUM says enterprise AI security must shift from model safety to cryptographic containment and structural authorization controls. When OpenAI disclosed that one of its AI models escaped a restricted testing environment and breached Hugging Face’s infrastructure, the discussion quickly centered…
  crypto.news · Tue, 28 Jul 2026 11:44:16 GMT
• Myanmar Approves Death Penalty for Forced Scam Labor, Life for Crypto Fraud
  Scam operations across the region drove up to $114 billion in losses in 2025, according to United Nations estimates.
  Decrypt · Tue, 28 Jul 2026 11:29:21 GMT
• Crypto DAO — exploit
  $8.2M · Technique: Protocol Logic. Chain: BSC. Target: DeFi Protocol. Reported loss ~$8,200,000.
  DeFiLlama Hacks DB · Tue, 28 Jul 2026 00:00:00 GMT
• NY Attorney General Letitia James warns Clarity Act would ‘dilute’ states’ ability to go after fraud as pressure mounts
  NYAG Letitia James urged Congress to tighten a crypto bill, warning that it would weaken states' ability to police the industry.
  The Block · Mon, 27 Jul 2026 20:31:57 GMT
• SparkKitty Malware Found in App Stores Targets Crypto Wallet Seed Phrases
  A newly detailed report says SparkKitty malware scanned photos on infected iPhones and Android devices for cryptocurrency wallet recovery phrases after infiltrating Apple's App Store and Google Play.
  Decrypt · Mon, 27 Jul 2026 20:09:57 GMT
• AFX Trade - Rekt
  $24.1M · Five compromised validator signatures cleared the two-thirds threshold guarding a bridge, draining $24.15 million from AFX Trade's USDC custody bridge contract on Arbitrum and moving it out through the same public rails everyone else uses.
  rekt.news Leaderboard · bridge exploit · Mon, 27 Jul 2026 12:00:00 GMT
• MistEye DNS Guard Officially Released: A Lightweight Host-Based Defense for Network Threat…
  MistEye DNS Guard Officially Released: A Lightweight Host-Based Defense for Network Threat Visibility The SlowMist Security Team has officially released MistEye DNS Guard , a lightweight local DNS relay and threat observation tool written in Rust. Designed for macOS and Linux hosts, it provides system-wide DNS takeover, domain and public IP detection, outbound process monitoring, malicious event retention, and Webhook alerting. It is primarily built to cover common risk scenarios such as access to malicious domains, DNS responses containing malicious indicators, and applications directly conn…
  SlowMist · governance attack · Mon, 27 Jul 2026 07:42:28 GMT
• WEMIX — exploit
  $6.3M · Attack method: Private Key Leakage. Reported loss ~$6,250,000. The owner privileges of a WEMIX$-related smart contract were compromised, allowing the attacker to illegally mint approximately 5.23 million WEMIX$ stablecoins (worth about $6.25 million), which were swapped into WEMIX and USDC.e before being bridged out. The team has suspended bridges and related services while working with exchanges, security firms, and law enforcement to track the funds.
  SlowMist Hacked DB · private-key compromise, smart-contract bug · Sun, 26 Jul 2026 12:00:00 GMT
• Garden Finance — exploit
  $450K · Attack method: Supply Chain Attack. Reported loss ~$450,000. Security firm Blockaid detected an ongoing exploit targeting Garden Finance’s HTLC contracts, draining about $450,000 in USDT across Ethereum, Base, Arbitrum, and BNB Chain. The project stated that an independent solver’s off-chain database was compromised and fraudulent records were inserted, causing improper fund releases; the protocol and smart contracts themselves were not compromised, and the app has been temporarily taken offline.
  SlowMist Hacked DB · supply-chain attack · Sun, 26 Jul 2026 12:00:00 GMT

Sources unavailable: CertiK (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); ConsenSys Diligence (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Cantina / Spearbit (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); pcaversaccio (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Chainabuse (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Arkham Intelligence (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @PeckShieldAlert (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @CertiKAlert (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @CyversAlerts (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @BlockSecTeam (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @AnciliaInc (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Phalcon_xyz (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @zachxbt (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @SlowMist_Team (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @MistTrack_io (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @realScamSniffer (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @samczsun (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @tayvano_ (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @spreekaway (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @_SEAL_Org (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @hypernative (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @HalbornSecurity (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Beosin_com (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @GoPlusSecurity (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Quantstamp (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @Chainalysis (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); @TrugardLabs (HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"}); Immunefi (Feed not recognized as RSS 1 or 2.)

📸 Share image for socials — 1200×630

⬇ Download PNG

Generated by GM Security · automated digest, verify before acting.