Search
Search the Blockchain Posts newsroom.
Cascade's Arbitrum CLS vault drained for ~$1.34M USDC before the platform ever went live
Polychain/Variant-backed neo-brokerage Cascade lost 1.34M USDC from pre-launch First Wave deposits on July 16; funds were bridged Arbitrum→Solana→Ethereum and swapped into unfreezable DAI.
Ostium's Arbitrum perp DEX drained for up to $18M USDC after oracle-signer key compromise
An attacker with an authorized oracle-signer key and a registered PriceUpKeep forwarder booked twenty round-trip BTC/USD trades, draining ~28% of Ostium's OLP vault; trading paused.
Progmat migrates ¥452B ($2.7B) of tokenized securities from Corda to Avalanche
Japan's dominant security-token platform completes 'Project Keystone', porting all live RWA — corporate bonds, real estate, funds — from Corda 5 onto a dedicated Avalanche EVM L1 with sub-2s finality.
US government moves $288M in seized BTC and ETH to Coinbase Prime
Arkham data shows ~3,800 BTC and 30,007 ETH — from the Ryan Farace, BTC-e and Brian Krewson cases — reached Coinbase Prime on July 13, testing the Strategic Bitcoin Reserve no-sell posture.
EMURGO exits Cardano's Pentad governance to focus on SecondFi hack recovery
EMURGO, one of Cardano's five Pentad governance entities, stepped down on July 8 to lead recovery for its SecondFi wallet, drained of 16M ADA (~$2.4M) via an Ed25519 signer flaw.
Zcash locks NU6.3 Ironwood activation to block 3,428,143 on July 28
Core devs pin NU6.3 to mainnet block 3,428,143 (~Jul 28, 08:00 EST). Orchard becomes spend-only; new shielded value flows through a turnstile into the Ironwood pool.
Bonzo Lend loses $9.05M on Hedera after Supra oracle accepts zeroed BLS signature
Bonzo Lend drained of ~$9.05M on July 11 after a Supra oracle verifier accepted a zeroed BLS signature. Attacker inflated SAUCE price 12 orders of magnitude, bridged $5.25M via LayerZero.
Uniswap v4 protocol-fee temp check clears at ~93%, binding on-chain vote follows
Uniswap Labs' Snapshot temperature check on activating v4 protocol fees closed July 12, 2026, with roughly 93% support. Binding on-chain vote runs the week of July 13.
Ethereum Foundation disbands Protocol Support team as five-cluster reorg lands
The EF Protocol Support account announced its own dissolution on July 9, absorbing the team that ran All Core Devs into the new Protocol Layer cluster from the June 23 restructure.
Stellar Zipper (Protocol 27) activates on mainnet, ships Soroban auth delegation
Protocol 27 lands on Stellar mainnet on July 10, adding CAP-0071-01 authentication delegation for Soroban custom accounts and CAP-0071-02 address-bound credentials.
Polkadot enacts referenda 1909 & 1910: 10k DOT self-stake, unslashable nominators
Polkadot's OpenGov enacted two staking overhauls on July 6, 2026 — validators need 10,000 DOT self-stake at zero commission, nominators lose slashing exposure, unbonding drops from 28 days to ~2.
THORChain rolls Monero, router V6 into v3.20 as consensus bug halts churning
A consensus bug hit during vault rotation forces THORChain to pause churning. v3.19.4 is scrapped; the fix ships in v3.20 alongside XMR and router V6. Solana re-enables first.
ESMA launches first MiCA-era supervisory action, targeting CASP custody resilience
ESMA announced a Common Supervisory Action on July 8 covering the digital operational resilience of authorised CASPs' custody services. NCAs run the risk-based reviews from H2 2026 to H1 2027.
Sony Bank wins conditional OCC nod for Connectia Trust USD stablecoin bank
Sony Bank's Connectia Trust NA — a $40M NY trust chartered to issue a USD-pegged stablecoin — cleared OCC conditional approval on July 7. Operations targeted for 2027 after final sign-off.
Optimism activates Karst on 10 Superchain mainnets, ships L2CM and kona fault proofs
Karst (Upgrade 19) activated July 8 16:00 UTC across op, ink, zora, mode, lisk, metal, unichain, soneium, ethernity, tbn. Adds L2CM, promotes kona-client, ports five Osaka EIPs. op-geth EoS.
Summer.fi drained of $6M as attacker donates stale-priced Silo token into Lazy Summer vault
Summer.fi's Lazy Summer vaults lose $6.04M in an ERC-4626 donation attack. Root cause: a Silo Varlamore USDC vault token stale-priced since November's Stream Finance collapse. Vaults paused.
Ripple upgrades Luxembourg CASP to full MiCA authorisation, unlocks 30 EEA markets
Luxembourg's CSSF upgrades Ripple Markets Luxembourg to full MiCA CASP status on July 6, 2026 — Ripple can passport crypto services into the EEA. RLUSD EMT approval still pending.
Secret Network proposes SCRT migration from Cosmos to Arbitrum, Sept 1 snapshot
SCRT Labs proposes moving native SCRT off Cosmos to Arbitrum via a Sept 1 snapshot. Inflation drops 9%→5%; sSCRT, bridged and IBC balances excluded. Vote pending.
BonkDAO treasury drained of ~$20M in BONK via BIP-76 'Sowellian' governance attack
BonkDAO confirmed a ~$20M treasury drain on July 6, 2026 after malicious proposal BIP-76 'Sowellian BonkDAO' passed on its own governance platform. Upbit and Kraken paused BONK.
Summer.fi loses $6M as attacker manipulates FleetCommander totalAssets()
A flash-loaned donation to Summer.fi's Ark inflated FleetCommander.totalAssets() and let an attacker redeem $70.9M from a $64.8M deposit. Lazy Summer vaults paused; funds are moving to Tornado Cash.
VALR launches 200+ Hyperliquid perps, a first for a regulated CEX
VALR, Africa's largest regulated exchange, ships 200+ cross-asset perps on July 6 by natively integrating Hyperliquid's L1 — the first CEX to route perp order flow to an on-chain DEX.
Aptos patched a Move VM stale-cache bug Hexens says risked ~$70B in cross-chain value
Security firm Hexens disclosed a stale-cache type-confusion in the Aptos Move VM in late February. Aptos patched within days; no funds lost. Coverage went public on July 4.
MetaMask ships Money Account on Monad with 4% APY on mUSD via Morpho
Consensys launched MetaMask Money Account on June 30 on Monad, paying up to 4% variable APY on mUSD routed through Morpho vaults curated by Steakhouse Financial, with Mastercard spending.
Hinkal drained for ~$820K on Ethereum after proofless-deposit bug bypasses ZK verification
An attacker skipped Hinkal's zk verification with a 'Proofless Deposit', drained ~$820K in USDC on Ethereum, and laundered 410 ETH via Tornado Cash plus 44.7 ETH bridged to Bitcoin over THORChain.
SEC opens 60-day comment on novel ETF rules, targeting crypto and event-contract funds
SEC Release 33-11426, published to the Federal Register on July 2, poses 27 questions on crypto and event-contract ETFs. Comments on File S7-2026-24 due 60 days after publication.
Ethena unlocks 40.63M ENA on July 2, with 171.88M cliff due July 5
The Foundation's monthly 40.63M ENA release hits July 2. Three days later a 171.88M cliff — 2.82% of circulating supply — arrives from the Core Contributors and Investors buckets.
OFAC lists 134 ISIS-K crypto wallets; Tether freezes 131 TRON
OFAC added 134 wallets tied to ISIS-K to the SDN list on July 1: 131 TRON, 3 Monero. Tether froze the TRON balances within hours; the Monero side stays out of reach.
Robinhood Chain launches on Arbitrum Orbit with Chainlink day one
Robinhood launched its Ethereum L2 on July 1 on Arbitrum Orbit with Chainlink CCIP and Data Streams live day one, Uniswap and Pleiades AMMs, and 24/7 stock tokens in 120+ countries.
Solana turns on onchain governance: 100k SOL to open, 67% to pass
Solana activated Solana Governance Proposals: 100,000 SOL staked to open, 15% of active stake to advance, two-thirds supermajority to pass — with staker sovereignty for delegators.
Edel Finance halts V1 after wGOOGLx wrapping bug drains $403K to Tornado Cash
A flash-loan-assisted exchange-rate manipulation between GOOGLx and wGOOGLx on Edel's xStock lending market inflated collateral 78×, opening ~$403K of bad debt routed through Tornado Cash.
FCA finalises UK crypto rulebook on June 30, drops stablecoin capital floor to 1%
FCA publishes final UK crypto rules June 30, 2026. Applications open Sept 30, close Feb 28, 2027; regime live October 2027; stablecoin capital floor cut from 2% to 1%.
Strategy authorizes up to $1.25B in BTC sales as Saylor formalizes capital pivot
Strategy's June 29 8-K introduces a Digital Credit Capital Framework with $2B in buybacks, a $2.55B USD reserve floor, a 12% STRC dividend, and up to $1.25B in bitcoin sales.
Tornado Cash DAO flagged for malicious proposal swapping lookalike addresses; ~$23M TORN at stake
Researchers flagged a June 25 Tornado Cash governance proposal that swaps the DAO treasury address for a lookalike — ~$23M in TORN and relayer balances at risk.
Loopring shuts down its zk-rollup DEX, citing absent VM and failed adoption
Loopring took its zk-rollup DEX relayer offline on June 28, 2026, ending the first production zkRollup on Ethereum. A whitelist-only smart contract upgrade returns L2 balances to L1.
Polymarket frontend vendor compromise drains ~$3.1M in PUSD from 11+ user wallets
A poisoned JS dependency on Polymarket's frontend drained ~$3.1M in PUSD from 11+ wallets on June 25, swapped into ~1,893 ETH. Contracts untouched; refunds promised.
ZachXBT flags AscendEX: stalled withdrawals, hot wallets thin on ETH, USDT, SOL
On June 26 the on-chain investigator said the BitMax-era exchange's known hot wallets on Arkham and TRM lack large-cap reserves. AscendEX has not responded.
GnosisDAO passes GIP-151, opens GNO treasury redemption
Snapshot closed GIP-151 on June 27 above 215% of quorum, authorising pro-rata redemption of GNO for the DAO's liquid treasury — over the cofounders' opposition.
80 Catholic leaders ask Thune, Schumer to revisit CLARITY Act Section 604
Alliance to End Human Trafficking and Catholic Charities deliver a letter signed by ~82 leaders urging Senate leadership to revisit the developer carve-out in CLARITY Act Section 604.
Singapore MAS adds Hyperliquid to Investor Alert List
On June 26, MAS placed Hyperliquid on its IAL — a consumer warning, not a ban or enforcement action. Hyperliquid says it never claimed MAS authorization and runs as permissionless infrastructure.
Base mainnet stalls after block 47,806,542, hours before Beryl activation
A consensus bug sequenced an invalid block, halting Base's single sequencer for ~2 hours. Sequencing restored by 17:51 UTC; Beryl mainnet upgrade still set for 18:00 UTC.
BitGo cuts 15% of staff, pivots to AI infrastructure and stablecoins
BitGo CEO Mike Belshe announced on June 25, 2026 a ~15% headcount cut — about 90 jobs — and a refocus on security, trading, stablecoins, settlement and AI-powered infrastructure.
Cardano boots first Ouroboros Leios public testnet under the name Musashi Dojo
IOG launched the Musashi Dojo testnet for Ouroboros Leios on June 23, 2026. The CIP-0164 protocol targets 30–65x current mainnet throughput on a Praos overlay.
Ethereum Foundation cuts 54 jobs and 40% of 2026 budget in restructure
The Ethereum Foundation laid off 54 staff (~20%) and slashed its 2026 budget 40% on June 23, reorganizing into five layer-clusters under a 5% endowment-spend target by 2030.
SecondFi suspends services after wallet-keygen flaw drains 16M ADA
SecondFi disclosed a key-generation bug in its web wallet on June 23, draining ~16M ADA from 178 users; SlowMist puts total exposure at up to 129M ADA.
US Senate passes 21st Century ROAD to Housing Act, 85-5, with CBDC ban through 2030
The Senate folded a four-year CBDC prohibition into a bipartisan housing bill on June 22; stablecoins are exempt. The bill now returns to the House before Trump's signature.
Bank of England drops £20k stablecoin holding cap, sets £40bn per-issuer ceiling
BoE policy statement on sterling-denominated systemic stablecoins removes individual holding caps, adds a temporary £40bn cap per issuer, raises gilt share of backing to 70%. Feedback by 22 Sept.
Kleros founder Lesaege proposes 10% Ethereum validator revenue redirect
A June 21 ethresear.ch post by Clément Lesaege would let Ethereum validators vote to redirect 0–10% of staking rewards — ~50–70k ETH a year — to ecosystem funding via a splitter contract.
Taiko halts L2 block production after bridge proof-verification exploit
Taiko's chain state verification was compromised on June 22; proposers stopped producing blocks, the ERC20 Vault on Ethereum was drained for an estimated $1.7M, and all bridges are flagged unsafe.
Jaredfromsubway.eth MEV bot drained for $7.5M in counter-MEV trap
Attacker farmed approvals from Ethereum's largest sandwich bot using 66 fake WETH/USDC/USDT tokens, then swept ~1,474 WETH, 2.87M USDC and 2M USDT in a single sweep tx.
Namada MASP drained for ~$600K via IBC; stale indexer hid the loss
Attacker forged IBC transfers against Namada's shielded pool, swept liquid assets cross-chain and left staked holdings behind. A stale indexer kept showing balances while live RPC reported zero.
Axelar shuts Secret IBC route after $4.67M forged-packet drain
Forged-packet attack on Secret's ICS-20 contract minted unbacked wrapped tokens, then redeemed them via the legitimate Axelar IBC channel. Caught June 17 when an escrow accounting check failed.
Base Beryl hardfork hits Sepolia, mainnet activation set for June 25
Beryl ships a native B20 token precompile, cuts L1 withdrawal delay from 7 to 5 days, and lands Reth V2 with ~50% lower disk and +33% throughput. Sepolia live June 18, mainnet June 25.
CFTC closes Celsius case with lifetime trading and registration ban on Mashinsky
On June 18, the CFTC entered a consent order in SDNY permanently banning Alex Mashinsky from trading and CFTC registration. No additional monetary penalty.
Cardano's van Rossem hard fork hits mainnet vote, first via Voltaire governance
The Protocol Version 11 hard-fork action was submitted to the Cardano chain on June 16, 2026. Earliest possible enactment: June 28.
Aztec Connect's deprecated RollupProcessorV3 drained for $2.19M via ZK proof boundary mismatch
On June 14, an attacker exploited a numRealTxs vs decoded_slots gap in Aztec Connect's immutable rollup contract and drained 909 ETH, 270,513 DAI and 167.89 wstETH.
Ethereum Glamsterdam enters final devnet phase, all EIPs in one bundle
Glamsterdam-devnet-5 and -6 are now running with every planned EIP — ePBS, BALs, gas repricing. Foundation engineers describe it as the last phase before testnet hardening.
Backpack and Sunrise debut SPCX on Solana on day of SpaceX IPO
Backpack Securities and Sunrise launched SPCX on Solana on June 12, the day SpaceX priced at $135 on Nasdaq. The token is 1:1-backed and redeemable into shares via ACATS.
Japan's Lower House passes FIEA crypto bill: 20% flat tax, ETF path opens
On June 11, Japan's House of Representatives passed the FIEA amendment reclassifying crypto as financial instruments. Flat 20% tax (vs 55%), insider-trading ban, spot ETF path. Upper House next.
Raydium loses $1.34M as forged LP mint drains 5 legacy AMM V3 pools
An attacker minted a counterfeit LP token, called withdraw on Raydium's deprecated AMM V3 program, and drained 150,177 RAY, 5,603 SOL and 893,700 USDC from 5 Serum-era pools.
NEAR opens voting for protocol version 84 — Wasmtime runtime on mainnet
Validator voting for NEAR protocol version 84 opened June 10, 2026, 00:00 UTC. nearcore v2.12.0 switches the contract runtime to Wasmtime and enables Wasm bulk memory ops.
Stellar publishes Quantum Preparedness Plan, ML-DSA to Soroban 2026
Stellar publishes a three-stage Quantum Preparedness Plan. Stage 1 (2026) ships ML-DSA-44/65 verification as Soroban host functions, then quantum-safe contract accounts.
Aragon DAO governance takeover drains $1.58M from Token of Power
An attacker bought >50% of a 16,384-supply MiniMeToken, used a no-timelock Aragon Voting app to mint 10B TOP in a single tx, and swapped them for 944.2 WETH from a Balancer V1 pool.
Humanity Protocol drained ~$36M after multisig keys traced to employee laptop
Coordinated Ethereum + BSC attack on Humanity Protocol's Hyperlane bridge: 141.2M H drained, 200M minted on BSC, ~$36M stolen. Team blames a compromised employee laptop; H down ~86%.
Cardano IO Research 32.9M ADA vote closes today, trailing 86.7% no
Input Output Global's 32.9M ADA Cardano Vision 2026 research ask is on track to fail its DRep vote today, June 8, with 86.72% no — Hoskinson says IOG will not resubmit.
Yuga Labs whitehats 68 NFTs out of a live Flooring Protocol exploit
Yuga's blockchain lead 0xQuit and researcher Coffee pulled 29 BAYC, 2 CryptoPunks and 37 other blue-chips out of Flooring before an attacker could redeem them through the fpToken bug.
IoTeX activates v2.4.0 Yap hard fork tonight, pulls in four Pectra EIPs
IoTeX mainnet hard-forks at block 48,985,561 (~23:52 UTC on June 7). v2.4.0 'Yap' ships EIP-7702 account abstraction, EIP-7623 calldata repricing, EIP-2935 and EIP-2537.
Arbitrum Foundation goes back to the DAO for a $43.5M 2027 budget
The Foundation proposes a $43.5M 2027 operating budget — $16M stablecoins/RWA, 1,740 ETH and 230M ARB — drawn from the DAO treasury. On-chain vote opens June 8.
Mastercard opens card settlement to stablecoins across eight chains
Mastercard's June 3 update lets issuers settle card flows on-chain in USDC, PYUSD, USDG, USDP, RLUSD and SoFiUSD across Ethereum, Solana, XRPL and five others.
Zcash patches Orchard soundness bug with NU6.2 emergency hard fork
An under-constrained Orchard circuit could have minted undetectable counterfeit ZEC. Zcash froze the pool with a June 2 soft fork, then re-enabled it via NU6.2 the next day.
Gnosis Pay halted after Zodiac Delay Module exploit; Gnosis to cover losses
Gnosis co-founder Martin Köppelmann confirms an active exploit on Gnosis Pay tied to Zodiac Delay Modifier v1.1.0 and Roles Modifier v2; Gnosis pledges to cover all user losses.
SEC draft strategic plan FY26-FY30 adds digital assets objective
The June 2 draft (File DSP-3) makes digital assets and DLT a standalone SEC objective for fiscal years 2026-2030; comments due July 2.
Whitehat unlocks 1,003 ETH stuck in 2016 HongCoin ICO contract
Researcher 0xFlorent_ found an integer-overflow path in the HongCoin admin function and unlocked 1,003.62 ETH (~$2M) trapped in the 2016 ICO refund contract for nine years.
SEC grants Paxos PSSC temporary clearing-agency registration
Paxos Securities Settlement Company, LLC won temporary SEC registration as a clearing agency under Section 17A — the first blockchain-native firm to clear and settle US securities.
Cardano DRep vote rejects 7.8M ADA Summit treasury draw at 65.21%
Cardano's on-chain treasury vote for the Foundation's Singapore summit closed May 29 with 65.21% DRep stake yes, 1.46 points below the 66.67% supermajority.
Circle freezes Zama's cUSDC wrapper for $12.6M on TRO from federal court
A U.S. federal TRO in Newton AC/DC Fund v. Ermilov forced Circle to blacklist Zama's cUSDC contract at 01:08 UTC on May 30, 2026, locking 12.6M USDC.
Gravity Bridge halted after $5.4M drain on suspected key compromise
Cosmos-Ethereum Gravity Bridge lost ~$5.4M on May 30. Peckshield and on-chain analyst Specter call it a signing key compromise. Team halted validators; attacker holds ~2,102 ETH.
Zcash Zebra 4.5.0 patches P2SH sigop bug that risked chain split
Zcash Foundation ships Zebra 4.5.0 plus a 4.5.1 hotfix, closing 15 advisories including a critical P2SH disabled-opcode sigop undercount that could split the chain.
DTCC connects tokenization service to Stellar for Russell 1000 and Treasuries
DTC will tokenize Russell 1000 equities, ETFs and US Treasuries on Stellar under its SEC no-action letter. First production trades targeted for July, broader rollout October.
Leap Wallet sunsets May 28, four-year Cosmos default-wallet run ends
Leap Wallet shuts down all products on May 28, 2026 — browser extension, mobile apps, Compass, Swapfast and the Leap Cosmos Hub validator. ATOM stakers need to redelegate before the unbonding window.
Ethereum Foundation ships Kohaku Railgun SDK alpha-22 with ERC-4337 relaying
The Kohaku privacy SDK landed @kohaku-eth/railgun v0.0.1-alpha.22 on May 26 — brotli compression, ERC-4337 mempool relaying operational. Tornado Cash and Privacy Pools modules still in dev.
Cardano DReps pass Leios scaling proposal with 84%, releasing ₳27.7M
Cardano's delegated reps approved Input Output's Leios funding on May 24 with about 84% turnout, unlocking ₳27.7M from the treasury. Testnet targets June 23.
Bybit cold wallet drained for ~$1.5B; Lazarus signatures on-chain
Bybit's primary ETH cold wallet lost about 401,000 ETH on Feb 21, 2025 via a Safe{Wallet} UI manipulation. Arkham and the FBI attribute the attack to Lazarus.
Ethereum activates Pectra at epoch 364032 — EIP-7702 ships
Pectra went live on Ethereum mainnet on May 7, 2025. Eleven EIPs ship together; EIP-7702 gives EOAs temporary contract code, EIP-7251 raises the validator effective-balance cap to 2048 ETH.