Gnosis Pay Security Incident Recap: Vulnerability stemmed from a flaw in signature verification logic; fix completed.
Related
Kraken Parent Payward Joins Glasswing, Gets Access to Claude Mythos to Hunt Security Flaws
Payward is joining Project Glasswing, Anthropic’s program for giving vetted organizations access to its powerful cybersecurity AI.
PyShield: 40 major security incidents occurred in the crypto industry in June, resulting in losses of $75.87 million, a 7.13% decrease compared to the previous month.
According to BlockBeats, on July 1st, PeckShield statistics show that in June 2026, the crypto industry experienced 40 major security incidents, resulting in a total loss of approximately $75.87 million, a 7.13% decrease from $81.7 million in May. The Humanity Protocol attack was the largest security incident of the month, causing approximately $31 million in losses. Attackers transferred and laundered funds through multiple blockchains, including Bitcoin, Solana, Hyperliquid, and BNB Chain, and some of the funds were mixed with those involved in the KelpDAO attack, suggesting a possible connection between the attackers in both incidents. In addition, Aztec Bridge and Aztec Connect were attacked separately in the same month, resulting in a combined loss of approximately $4 million. Other major security incidents include: Syscoin Bridge ($10 million), MEV Bot ($7.5 million), Secret Network ($4.67 million), Polymarket users ($3 million), SecondFi ($2.4 million), TESSERA ($2.4 million), Taiko Bridge ($1.7 million), Token of Power ($1.58 million), Raydium ($1.34 million), and LABUBU/OLPC ($1.1 million).
Anthropic Admits Security Failures Behind Claude Hacking Incidents
After Claude models accessed real systems during cyber tests, Anthropic tightened its safeguards and warned that flawed training can encourage dangerous behavior.
Polygon Quietly Patched Security Flaws in Two Hard Forks Before Disclosing Them
The Austin and Kyoto hard forks, deployed quietly on the Bor and Heimdall clients before public disclosure, closed denial-of-service and consensus-hardening flaws that Polygon says were never exploited.
Crypto hacker losses decreased by 47% year-on-year in the first half of 2026, but the overall security situation has not improved.
According to Foresight News , citing Cointelegraph, total losses from cryptocurrency security incidents in the first half of 2026 amounted to approximately $1.32 billion, a 46.8% decrease year-over-year. However, CertiK warns that this figure is misleading. The data from the same period last year was severely distorted by the massive $1.4 billion theft from Bybit, the largest single hack in history. In reality, attackers are becoming more targeted and destructive. Specifically, phishing attacks resulted in $508.2 million in losses in the first quarter, while losses in the second quarter rose 59% quarter-over-quarter to $807.5 million. Over 70% of these losses came from the KelpDAO and Drift Protocol incidents, both believed to be the work of North Korean state-sponsored hackers. A report from TRM Labs during the same period also indicated that the number of attacks surged from 83 to 207 in the first half of the year, the highest on record, with smart contract vulnerability attacks accounting for 60%. CertiK also points out that private key and multi-signature wallet management remain the most vulnerable security areas that attackers can exploit. He recommends that protocol providers strengthen private key management from multiple levels, including hardware security, multi-signature governance, and geographically dispersed signers.
Security firm Coinspect reports that a wallet vulnerability dating back to 2018 resulted in the theft of $3.14 million last month, with Chinese users' assets at higher risk.
PANews reported on July 5th that security firm Coinspect Security published an article on the X platform stating that through analysis of crypto wallet seeds generated using insecure code since 2018, they discovered thousands of seeds that had been actually used. Last month alone, they found that these wallets had a total of $3.14 million stolen, most of which went unreported. Some funds were concentrated in a single address, exhibiting money laundering patterns. One affected address transferred $2 million out just hours after the alert was issued; it is unclear whether this was for theft. Coinspect warned that users who believe many of their assets remain at risk may be located in China.