GM SECURITY — Thu, 16 Jul 2026 08:00:11 GMT (last 72h) ================================================================ 30 crypto-security item(s) in the window with ~$108.5M in reported losses The largest is "Blockaid uncovers $18M exploit that forces Ostium trading halt" (~$18.0M). Dominant vectors: oracle manipulation, phishing / wallet drainer, smart-contract bug, access-control flaw. TRENDS: • 🧊 On-chain — Tether USDT freezes (7d): 18 addresses (2026-07-15). Source: Dune • oracle manipulation activity observed (8 item(s)) • phishing / wallet drainer activity observed (2 item(s)) • smart-contract bug activity observed (2 item(s)) TREND TRACKER (cross-day): • 15 new today · 15 developing • 7-day: 92 incidents, $1.31B stolen (-56% vs prior week) • 30-day: 449 incidents, $5.47B stolen • 7-day vectors: oracle manipulation (11), phishing / wallet drainer (5), smart-contract bug (3) • Repeat targets (30d): bitcoin (20), trump (10), certik (10), coinbase (9), ethereum (8) STATS: 30 incidents · $108.5M reported losses · 22 live sources INCIDENTS & REPORTS: - (NEW) SummerFi to Wind Down After Seven Years, Citing Exploit The Defiant · https://thedefiant.io/news/defi/summerfi-to-wind-down-after-seven-years-citing-exploit - (DEVELOPING · day 13) eToro Takes Strategic Stake in Onchain Derivatives Exchange Extended, Plans Zengo Tie-Up The Defiant · https://thedefiant.io/news/cefi/etoro-strategic-stake-onchain-derivatives-extended-zengo - (NEW) California duo accused of laundering crypto from fentanyl and meth sales crypto.news · https://crypto.news/california-duo-accused-of-laundering-crypto-from-fentanyl-and-meth-sales/ - (NEW) California pair charged with laundering crypto proceeds from darknet fentanyl sales The Block · https://www.theblock.co/post/408560/california-duo-darknet-drug-crypto-money-laundering?utm_source=rss&utm_medium=rss - (NEW) OFAC Sanctions Iran Central Bank Crypto Wallets, Freezing $131M in Stablecoins Chainalysis · https://www.chainalysis.com/blog/ofac-sanctions-iran-central-bank-crypto-wallets-freezing-131m-in-stablecoins/ - (NEW) [~$18.0M] Blockaid uncovers $18M exploit that forces Ostium trading halt vectors: oracle manipulation crypto.news · https://crypto.news/blockaid-uncovers-18m-exploit-that-forces-ostium-halt/ - (NEW) [~$18.0M] Another DeFi Exploit: Perp DEX Ostium Loses $18 Million in Oracle Attack vectors: oracle manipulation Decrypt · https://decrypt.co/373566/defi-exploit-ostium-oracle-hack - (DEVELOPING · day 3) US Treasury Freezes $131 Million in Iran-Linked Crypto Wallets Decrypt · https://decrypt.co/373565/us-treasury-freezes-131-million-iran-crypto - (NEW) [~$18.0M] Ostium Halts Trading After Oracle Exploit Drains up to $18M from Vault vectors: oracle manipulation The Defiant · https://thedefiant.io/news/hacks/ostium-halts-trading-after-oracle-exploit-drains-up-to-usd18m-from-vault - (NEW) [~$18.0M] Ostium pauses trading after apparent $18 million vault exploit The Block · https://www.theblock.co/post/408450/ostium-pauses-trading-after-apparent-18-million-vault-exploit?utm_source=rss&utm_medium=rss - (NEW) Ostium suffers $18 million exploit as oracle attack wave continues to hit DeFi vectors: oracle manipulation CoinDesk · https://www.coindesk.com/business/2026/07/15/ostium-suffers-usd18-million-exploit-as-oracle-attack-wave-continues-to-hit-defi - (NEW) UK Fraud Review Calls for Judge Training on Crypto Laundering, AI Scams Decrypt · https://decrypt.co/373528/uk-fraud-review-calls-for-judge-training-on-crypto-laundering-ai-scams - (NEW) Strategy feels 'very secure' until bitcoin reaches $8,000-$10,000, says CEO CoinDesk · https://www.coindesk.com/markets/2026/07/15/strategy-feels-very-secure-until-bitcoin-reaches-usd8-000-usd10-000-says-ceo - (NEW) CISA Adds Two Known Exploited Vulnerabilities to Catalog vectors: oracle manipulation, access-control flaw CISA Cybersecurity Advisories · https://www.cisa.gov/news-events/alerts/2026/07/15/cisa-adds-two-known-exploited-vulnerabilities-catalog - (NEW) Telegram Account Compromised, Wallet Swapped: How Does macOS Malware Break Through Your Defenses? vectors: phishing / wallet drainer SlowMist · https://slowmist.medium.com/telegram-account-compromised-wallet-swapped-how-does-macos-malware-break-through-your-defenses-dad9bfed9c02?source=rss-4ceeedda40e8------2 - (NEW) [~$135K] SCATMAN and the $135K hack: what the SpaceX account breach says about brand-token crime in 2026 crypto.news · https://crypto.news/scatman-spacex-account-hack-brand-token-crime/ - (NEW) [$18.0M] Ostium — exploit vectors: oracle manipulation DeFiLlama Hacks DB · https://api.llama.fi/hacks - (DEVELOPING · day 2) Argentine Judge Orders ID, Freeze of 25 LIBRA-Linked Crypto Wallets The Defiant · https://thedefiant.io/news/regulation/argentine-judge-orders-id-freeze-of-25-libra-linked-crypto-wallets - (DEVELOPING · day 2) Prism Relaunches on New Contract After Exploit Diverted Nearly 40% of Fees The Defiant · https://thedefiant.io/news/hacks/prism-relaunches-on-new-contract-after-exploit-diverted-nearly-40-of-fees - (DEVELOPING · day 2) [$9.1M] Bonzo Finance - Rekt vectors: oracle manipulation rekt.news Leaderboard · https://rekt.news/bonzo-finance-rekt/ - (DEVELOPING · day 2) US Government Moves $288M in Seized Crypto to Coinbase Prime Decrypt · https://decrypt.co/373463/us-government-moves-288m-in-seized-crypto-to-coinbase-prime - (DEVELOPING · day 3) Threat Intelligence | Injective SDK Compromised, Crypto Wallet Private Keys Stolen vectors: private-key compromise, supply-chain attack SlowMist · https://slowmist.medium.com/threat-intelligence-injective-sdk-compromised-crypto-wallet-private-keys-stolen-0b8f06bf37ad?source=rss-4ceeedda40e8------2 - (DEVELOPING · day 8) OFAC Sanctions FirstVPN and Ransomware Enablers Behind Attacks on Americans | TRM Labs TRM Labs · https://www.trmlabs.com/resources/blog/ofac-sanctions-firstvpn-and-ransomware-enablers-behind-attacks-on-americans - (DEVELOPING · day 3) [~$9.1M] Bonzo Lend Loses $9M on Hedera in Supra Oracle Exploit vectors: oracle manipulation The Defiant · https://thedefiant.io/news/hacks/bonzo-lend-loses-9m-on-hedera-in-supra-oracle-exploit - (DEVELOPING · day 3) Strategy Sells $467M in MSTR Shares, Bitcoin Stack Steady The Defiant · https://thedefiant.io/news/cefi/strategy-sells-467m-in-mstr-shares-bitcoin-stack-steady - (DEVELOPING · day 3) Courtroom-Ready Analytics: How Chainalysis Met the Daubert Standard Chainalysis · https://www.chainalysis.com/blog/chainalysis-daubert-standard-sterlingov/ - (DEVELOPING · day 3) [$270K] Lumi Finance — exploit vectors: smart-contract bug SlowMist Hacked DB · https://x.com/SlowMist_Team/status/2076669154036527314 - (DEVELOPING · day 2) [$9K] Chi Protocol — exploit vectors: flash-loan attack, smart-contract bug SlowMist Hacked DB · https://x.com/DefimonAlerts/status/2076887008773829119 - (DEVELOPING · day 3) Analysis of a Google Sites Community Application Phishing Campaign and macOS Information-Stealing… vectors: phishing / wallet drainer SlowMist · https://slowmist.medium.com/analysis-of-a-google-sites-community-application-phishing-campaign-and-macos-information-stealing-43ed1b04a1da?source=rss-4ceeedda40e8------2 - (DEVELOPING · day 3) Chinese Prosecutors Float Treating Crypto Mixer, Privacy Coin Use as Sign of Money Laundering Decrypt · https://decrypt.co/373374/chinese-prosecutors-float-treating-crypto-mixer-privacy-coin-use-as-sign-of-money-laundering SOURCES UNAVAILABLE: • CertiK: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • ConsenSys Diligence: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • Cantina / Spearbit: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • pcaversaccio: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • Chainabuse: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • Arkham Intelligence: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • @PeckShieldAlert: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • @CertiKAlert: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • @CyversAlerts: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • @BlockSecTeam: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • @AnciliaInc: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • @Phalcon_xyz: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • @zachxbt: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • @SlowMist_Team: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • @MistTrack_io: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • @realScamSniffer: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • @samczsun: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • @tayvano_: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • @spreekaway: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • @_SEAL_Org: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • @hypernative: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • @HalbornSecurity: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • @Beosin_com: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • @GoPlusSecurity: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • @Quantstamp: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • @Chainalysis: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • @TrugardLabs: HTTP 402: {"detail":"credits depleted","status":402,"title":"Payment Required","type":"https://api.x.com/2/problems/credits-depleted"} • Immunefi: Invalid character in tag name Line: 1 Column: 49 Char: @