governance
Uniswap Labs' Snapshot temperature check on activating v4 protocol fees closed July 12, 2026, with roughly 93% support. Binding on-chain vote runs the week of July 13.
protocol
The EF Protocol Support account announced its own dissolution on July 9, absorbing the team that ran All Core Devs into the new Protocol Layer cluster from the June 23 restructure.
regulation
Sony Bank's Connectia Trust NA — a $40M NY trust chartered to issue a USD-pegged stablecoin — cleared OCC conditional approval on July 7. Operations targeted for 2027 after final sign-off.
protocol
Karst (Upgrade 19) activated July 8 16:00 UTC across op, ink, zora, mode, lisk, metal, unichain, soneium, ethernity, tbn. Adds L2CM, promotes kona-client, ports five Osaka EIPs. op-geth EoS.
exploit
Summer.fi's Lazy Summer vaults lose $6.04M in an ERC-4626 donation attack. Root cause: a Silo Varlamore USDC vault token stale-priced since November's Stream Finance collapse. Vaults paused.
exploit
A flash-loaned donation to Summer.fi's Ark inflated FleetCommander.totalAssets() and let an attacker redeem $70.9M from a $64.8M deposit. Lazy Summer vaults paused; funds are moving to Tornado Cash.
exploit
An attacker skipped Hinkal's zk verification with a 'Proofless Deposit', drained ~$820K in USDC on Ethereum, and laundered 410 ETH via Tornado Cash plus 44.7 ETH bridged to Bitcoin over THORChain.
The Foundation's monthly 40.63M ENA release hits July 2. Three days later a 171.88M cliff — 2.82% of circulating supply — arrives from the Core Contributors and Investors buckets.
protocol
Robinhood launched its Ethereum L2 on July 1 on Arbitrum Orbit with Chainlink CCIP and Data Streams live day one, Uniswap and Pleiades AMMs, and 24/7 stock tokens in 120+ countries.
exploit
A flash-loan-assisted exchange-rate manipulation between GOOGLx and wGOOGLx on Edel's xStock lending market inflated collateral 78×, opening ~$403K of bad debt routed through Tornado Cash.
governance
Researchers flagged a June 25 Tornado Cash governance proposal that swaps the DAO treasury address for a lookalike — ~$23M in TORN and relayer balances at risk.
infrastructure
Loopring took its zk-rollup DEX relayer offline on June 28, 2026, ending the first production zkRollup on Ethereum. A whitelist-only smart contract upgrade returns L2 balances to L1.
governance
Snapshot closed GIP-151 on June 27 above 215% of quorum, authorising pro-rata redemption of GNO for the DAO's liquid treasury — over the cofounders' opposition.
infrastructure
A consensus bug sequenced an invalid block, halting Base's single sequencer for ~2 hours. Sequencing restored by 17:51 UTC; Beryl mainnet upgrade still set for 18:00 UTC.
protocol
The Ethereum Foundation laid off 54 staff (~20%) and slashed its 2026 budget 40% on June 23, reorganizing into five layer-clusters under a 5% endowment-spend target by 2030.
protocol
A June 21 ethresear.ch post by Clément Lesaege would let Ethereum validators vote to redirect 0–10% of staking rewards — ~50–70k ETH a year — to ecosystem funding via a splitter contract.
exploit
Taiko's chain state verification was compromised on June 22; proposers stopped producing blocks, the ERC20 Vault on Ethereum was drained for an estimated $1.7M, and all bridges are flagged unsafe.
exploit
Attacker farmed approvals from Ethereum's largest sandwich bot using 66 fake WETH/USDC/USDT tokens, then swept ~1,474 WETH, 2.87M USDC and 2M USDT in a single sweep tx.
protocol
Beryl ships a native B20 token precompile, cuts L1 withdrawal delay from 7 to 5 days, and lands Reth V2 with ~50% lower disk and +33% throughput. Sepolia live June 18, mainnet June 25.
exploit
On June 14, an attacker exploited a numRealTxs vs decoded_slots gap in Aztec Connect's immutable rollup contract and drained 909 ETH, 270,513 DAI and 167.89 wstETH.
protocol
Glamsterdam-devnet-5 and -6 are now running with every planned EIP — ePBS, BALs, gas repricing. Foundation engineers describe it as the last phase before testnet hardening.
regulation
On June 11, Japan's House of Representatives passed the FIEA amendment reclassifying crypto as financial instruments. Flat 20% tax (vs 55%), insider-trading ban, spot ETF path. Upper House next.
exploit
An attacker bought >50% of a 16,384-supply MiniMeToken, used a no-timelock Aragon Voting app to mint 10B TOP in a single tx, and swapped them for 944.2 WETH from a Balancer V1 pool.
exploit
Coordinated Ethereum + BSC attack on Humanity Protocol's Hyperlane bridge: 141.2M H drained, 200M minted on BSC, ~$36M stolen. Team blames a compromised employee laptop; H down ~86%.
exploit
Yuga's blockchain lead 0xQuit and researcher Coffee pulled 29 BAYC, 2 CryptoPunks and 37 other blue-chips out of Flooring before an attacker could redeem them through the fpToken bug.
protocol
IoTeX mainnet hard-forks at block 48,985,561 (~23:52 UTC on June 7). v2.4.0 'Yap' ships EIP-7702 account abstraction, EIP-7623 calldata repricing, EIP-2935 and EIP-2537.
governance
The Foundation proposes a $43.5M 2027 operating budget — $16M stablecoins/RWA, 1,740 ETH and 230M ARB — drawn from the DAO treasury. On-chain vote opens June 8.
exploit
Gnosis co-founder Martin Köppelmann confirms an active exploit on Gnosis Pay tied to Zodiac Delay Modifier v1.1.0 and Roles Modifier v2; Gnosis pledges to cover all user losses.
on-chain
Researcher 0xFlorent_ found an integer-overflow path in the HongCoin admin function and unlocked 1,003.62 ETH (~$2M) trapped in the 2016 ICO refund contract for nine years.
regulation
A U.S. federal TRO in Newton AC/DC Fund v. Ermilov forced Circle to blacklist Zama's cUSDC contract at 01:08 UTC on May 30, 2026, locking 12.6M USDC.
exploit
Cosmos-Ethereum Gravity Bridge lost ~$5.4M on May 30. Peckshield and on-chain analyst Specter call it a signing key compromise. Team halted validators; attacker holds ~2,102 ETH.
protocol
The Kohaku privacy SDK landed @kohaku-eth/railgun v0.0.1-alpha.22 on May 26 — brotli compression, ERC-4337 mempool relaying operational. Tornado Cash and Privacy Pools modules still in dev.
exploit
Bybit's primary ETH cold wallet lost about 401,000 ETH on Feb 21, 2025 via a Safe{Wallet} UI manipulation. Arkham and the FBI attribute the attack to Lazarus.
protocol
Pectra went live on Ethereum mainnet on May 7, 2025. Eleven EIPs ship together; EIP-7702 gives EOAs temporary contract code, EIP-7251 raises the validator effective-balance cap to 2048 ETH.