One year after Trump signed GENIUS into law, the OCC, FDIC, NCUA, Treasury, FinCEN and OFAC have eight proposed stablecoin rules and zero finalized — pushing the effective date to Jan 18, 2027.
DeFiTuna disclosed on July 16 that an attacker used a self-created illiquid TUNA/USDC pool routed through Jupiter to round a position's asset value to zero, bypassing the solvency check.
An attacker used a compromised Ostium oracle signer to push future-dated prices through the protocol's PriceUpKeep forwarder on July 15, draining $18–24M from the OLP vault.
Polychain/Variant-backed neo-brokerage Cascade lost 1.34M USDC from pre-launch First Wave deposits on July 16; funds were bridged Arbitrum→Solana→Ethereum and swapped into unfreezable DAI.
An attacker with an authorized oracle-signer key and a registered PriceUpKeep forwarder booked twenty round-trip BTC/USD trades, draining ~28% of Ostium's OLP vault; trading paused.
Japan's dominant security-token platform completes 'Project Keystone', porting all live RWA — corporate bonds, real estate, funds — from Corda 5 onto a dedicated Avalanche EVM L1 with sub-2s finality.
Arkham data shows ~3,800 BTC and 30,007 ETH — from the Ryan Farace, BTC-e and Brian Krewson cases — reached Coinbase Prime on July 13, testing the Strategic Bitcoin Reserve no-sell posture.
EMURGO, one of Cardano's five Pentad governance entities, stepped down on July 8 to lead recovery for its SecondFi wallet, drained of 16M ADA (~$2.4M) via an Ed25519 signer flaw.
Core devs pin NU6.3 to mainnet block 3,428,143 (~Jul 28, 08:00 EST). Orchard becomes spend-only; new shielded value flows through a turnstile into the Ironwood pool.