Jul 30, 2026
An attacker exploited a publicly accessible vault function in Crypto DAO on July 28, draining $8.2 million in USDT from the protocol. Security firm Blockaid flagged the exploit involving the access-control bug.
According to Odaily, Sui monitoring indicated that GoraeProtocol will bring more than 50,000 electric vehicle charging stations on-chain, with each charging session to be settled on Sui and a verifiable record generated on WalrusProtocol.
Uniswap Labs announced Permissioned Pools, a new hook standard for Uniswap v4 that enables regulated trading of tokenized funds, equities, and other real-world assets through automated market makers with onchain compliance controls. The feature was developed in collaboration with Securitize, Superstate, and Dowgo.
Ring Protocol has integrated Orbs-powered infrastructure to support decentralized limit and TWAP orders across Ethereum, Base, Arbitrum, and BNB Chain, bringing advanced trading features typically found on centralized exchanges to decentralized platforms.
Cardano successfully activated its Van Rossem hard fork on July 18, 2026, upgrading to Protocol Version 11 in what marks the blockchain's first upgrade approved entirely through on-chain governance without Input Output (IOHK) control. The upgrade reduces smart contract execution costs and adds Plutus enhancements.
Major crypto companies including OKX, MetaMask, and Matter Labs have backed the creation of a specialized dispute resolution court designed to handle contractual disputes between AI agents as autonomous agent-to-agent transactions become more common.
Attackers exploited TOP token's governance system by gaining over 50% voting power with minimal token supply, using Aragon DAO to create, vote on, and execute a malicious proposal in a single transaction that minted tokens worth $1.58 million.
Chainlink has been integrated as the oracle infrastructure provider for multiple FIFA World Cup 2026 prediction market platforms, including ADI Predictstreet (official prediction market partner) and Myriad, to power real-time match outcome settlements and instant payouts.
Attackers exploited unverified smart contracts to drain $36.7 million from DeFi protocols across at least four incidents between January and May 2026, with the largest attack targeting Truebit in January.
Solana-based decentralized exchange Raydium confirmed a $1.34 million exploit affecting five deprecated liquidity pools from its legacy Automated Market Maker V3 program that had been inactive since 2021. The attack exploited insufficient LP mint validation in the outdated code.
Ambient Finance, an Ethereum-based DeFi protocol, suffered a security breach resulting in approximately $110,600 in losses. The attack was preceded by a suspicious 50 ETH transfer into a new smart contract before the exploit was executed.
Syscoin halted its bridge after an attacker exploited a validation issue to mint approximately 5 billion unauthorized SYS tokens on the network's UTXO chain. The project is tracing the unauthorized tokens and investigating the breach.
DeFi protocol losses from exploits fell from $2.62 billion in 2022 to $680.3 million in 2025, according to Immunefi, even as Chainalysis reports attackers are increasingly targeting unverified smart contracts, which accounted for $36.7 million in losses across four exploits in the past six months.
A developer known as Florent helped recover approximately 1,003 ETH (worth roughly $2 million) that had been trapped in a 2016 initial coin offering contract for nine years using a whitehat exploit.
Attackers exploited a vulnerable third-party SquidRouterModule contract to drain approximately $3.2 million from 86 Gnosis Safe wallets on Base and Ethereum networks in under two hours. The exploit targeted a third-party module rather than the core Safe protocol.
Sui-based liquid staking platform Volo Protocol was exploited for approximately $3.5 million from its WBTC, XAUm, and USDC vaults. The team has pledged to absorb losses and frozen affected assets while conducting an investigation.
Trump-backed World Liberty Financial's WLFI token plunged to record lows after Justin Sun publicly accused the project of hidden blacklist backdoor controls in its token contract. WLFI threatened legal action, calling Sun's claims 'FUD.'
Solana Foundation partnered with Asymmetric Research to launch STRIDE, a tiered security program offering 24/7 monitoring and incident response for DeFi protocols, following the $285 million Drift Protocol hack attributed to North Korean actors.
Security researcher Taylor Monahan has identified at least 40 decentralized finance platforms that she claims have been infiltrated by North Korean IT workers at some stage, representing a seven-year pattern of systematic infiltration of the DeFi ecosystem.
Solana-based perpetuals DEX Drift Protocol confirmed an active attack that drained between $280-285 million from the platform through unauthorized transaction approvals. The exploit targeted multiple Drift vaults and deposits/withdrawals have been suspended.
Federal prosecutors charged Jonathan Spalletta with exploiting smart contract vulnerabilities in Uranium Finance twice in April 2021, laundering funds through Tornado Cash and spending proceeds on collectibles including Pokémon cards and antique coins. He faces up to 30 years in prison.
DeFi protocol Balancer Labs is winding down its corporate operations following a $128 million exploit on November 3, 2025, which made the company a liability due to mounting legal exposure. The protocol is pivoting to a DAO-first governance structure.