exploit
Allbridge Core paused its Solana deployment on July 19 after an attacker used a $1.12M Kamino flash loan and USDC/USDT swaps to drain roughly $1.65M and bridged to Ethereum.
exploit
Across said its Solana deployment was attacked at ~5:30 AM UTC on July 17. Users were kept whole; the loss sits with the Risk Labs relayer. Solana deposits paused.
exploit
DeFiTuna disclosed on July 16 that an attacker used a self-created illiquid TUNA/USDC pool routed through Jupiter to round a position's asset value to zero, bypassing the solvency check.
exploit
Polychain/Variant-backed neo-brokerage Cascade lost 1.34M USDC from pre-launch First Wave deposits on July 16; funds were bridged Arbitrum→Solana→Ethereum and swapped into unfreezable DAI.
protocol
A consensus bug hit during vault rotation forces THORChain to pause churning. v3.19.4 is scrapped; the fix ships in v3.20 alongside XMR and router V6. Solana re-enables first.
governance
BonkDAO confirmed a ~$20M treasury drain on July 6, 2026 after malicious proposal BIP-76 'Sowellian BonkDAO' passed on its own governance platform. Upbit and Kraken paused BONK.
governance
Solana activated Solana Governance Proposals: 100,000 SOL staked to open, 15% of active stake to advance, two-thirds supermajority to pass — with staker sovereignty for delegators.
infrastructure
Backpack Securities and Sunrise launched SPCX on Solana on June 12, the day SpaceX priced at $135 on Nasdaq. The token is 1:1-backed and redeemable into shares via ACATS.
exploit
An attacker minted a counterfeit LP token, called withdraw on Raydium's deprecated AMM V3 program, and drained 150,177 RAY, 5,603 SOL and 893,700 USDC from 5 Serum-era pools.