exploit
Allbridge Core paused its Solana deployment on July 19 after an attacker used a $1.12M Kamino flash loan and USDC/USDT swaps to drain roughly $1.65M and bridged to Ethereum.
regulation
HM Treasury confirmed on July 16 that HSBC Orion has passed DSS Gate 2 — first firm cleared to run a live digital-securities depository in the UK, ahead of the DIGIT gilt pilot.
exploit
Across said its Solana deployment was attacked at ~5:30 AM UTC on July 17. Users were kept whole; the loss sits with the Risk Labs relayer. Solana deposits paused.
protocol
Cardano crossed the Van Rossem hard fork boundary on July 18 at 21:44:51 UTC — Protocol Version 11, ratified entirely through on-chain Voltaire governance without an IOG or Cardano Foundation trigger.
protocol
Aave activated V4 on Avalanche on July 15 with one Liquidity Hub, three Spokes and a $15M Avalanche Foundation milestone-based incentive envelope.
regulation
One year after Trump signed GENIUS into law, the OCC, FDIC, NCUA, Treasury, FinCEN and OFAC have eight proposed stablecoin rules and zero finalized — pushing the effective date to Jan 18, 2027.
exploit
DeFiTuna disclosed on July 16 that an attacker used a self-created illiquid TUNA/USDC pool routed through Jupiter to round a position's asset value to zero, bypassing the solvency check.
exploit
An attacker used a compromised Ostium oracle signer to push future-dated prices through the protocol's PriceUpKeep forwarder on July 15, draining $18–24M from the OLP vault.
exploit
Polychain/Variant-backed neo-brokerage Cascade lost 1.34M USDC from pre-launch First Wave deposits on July 16; funds were bridged Arbitrum→Solana→Ethereum and swapped into unfreezable DAI.