governance
BonkDAO confirmed a ~$20M treasury drain on July 6, 2026 after malicious proposal BIP-76 'Sowellian BonkDAO' passed on its own governance platform. Upbit and Kraken paused BONK.
exploit
A flash-loaned donation to Summer.fi's Ark inflated FleetCommander.totalAssets() and let an attacker redeem $70.9M from a $64.8M deposit. Lazy Summer vaults paused; funds are moving to Tornado Cash.
protocol
VALR, Africa's largest regulated exchange, ships 200+ cross-asset perps on July 6 by natively integrating Hyperliquid's L1 — the first CEX to route perp order flow to an on-chain DEX.
exploit
Security firm Hexens disclosed a stale-cache type-confusion in the Aptos Move VM in late February. Aptos patched within days; no funds lost. Coverage went public on July 4.
protocol
Consensys launched MetaMask Money Account on June 30 on Monad, paying up to 4% variable APY on mUSD routed through Morpho vaults curated by Steakhouse Financial, with Mastercard spending.
exploit
An attacker skipped Hinkal's zk verification with a 'Proofless Deposit', drained ~$820K in USDC on Ethereum, and laundered 410 ETH via Tornado Cash plus 44.7 ETH bridged to Bitcoin over THORChain.
regulation
SEC Release 33-11426, published to the Federal Register on July 2, poses 27 questions on crypto and event-contract ETFs. Comments on File S7-2026-24 due 60 days after publication.
The Foundation's monthly 40.63M ENA release hits July 2. Three days later a 171.88M cliff — 2.82% of circulating supply — arrives from the Core Contributors and Investors buckets.
regulation
OFAC added 134 wallets tied to ISIS-K to the SDN list on July 1: 131 TRON, 3 Monero. Tether froze the TRON balances within hours; the Monero side stays out of reach.