CORE3

83 projects got exploited in Q2 2026. $755M gone because nobody could see risk in advance. Every one of those exploits was foreseeable: a missing control (key management, least-privilege, incident prevention) plus a market trusting the wrong evidence. Like a high-tier partner; a healthy TVL; an active timeline. People bought, deposited, allocated, and then got rekt. Not blaming them. All those signals describe a project's health. They tell you nothing about the risks that enable the exploit. And here's what changed: capital is no longer run by people; now, agents can route it too. Neither you nor a model can read every postmortem before allocating. So the market needs one number instead. That's the Probability of Loss: a 0-100 score computed from public data alone, built by reading historical failure patterns, a project's live parameters, and its likely attack paths. It just makes risk readable before you face the loss, not after. We released the CORE3 litepaper today: the what, the why, the how. Read it: core3.io/Litepaper_CORE…

Recently, @kucoincom turned 9, and the CORE3 team attended the celebration at @tomorrowland. During the event, we heard and started countless conversations, including with the KuCoin team, on what today matters in the digital assets market: risk management, openness, self-assessment, and accountability. Symbolically, KuCoin’s Probability of Loss on CORE3 shows “99” for security, contributing to an overall PoL of 5.42. This places the exchange #1 ranked by the lowest risk exposure on our platform. A few moments from the celebration below. CORE3. Risk, measured in public.

One coin to hold for 10 years, no switching. Your pick?

@cryptunez and the #29 project by risk resilence 🚀 or did we miss something? 🧐

Monad is now the #10 blockchain by TVL 📈

@Nikitont @Tangem @RedotPay @DptPay @PulsarMoneyApp @altitude @perena @koshmoney @FlexSuperApp @slashapp @BleapApp @hyperbeat @coca_card @ether_fi stands out here with the lowest Probability of Loss and the strongest risk resilience in the Security domain. Overall, the project ranks 6th among 1,400+ assessed projects

Neo Banking / Fee Cards I took into account Free tariffs, the cost of maintenance and commissions when using it. @Tangem Basic free / Card issue: $0 / Monthly fee: $0 / Transaction fee: $0 @RedotPay $10 (not free), 0% month. Top-up crypt 0-1%, spend ~1% + FX 1.2%, ATM 2%. @KASTxyz Standard free. Top-up stables 0%, USD 0%, FX 0.5–1.75%, ATM $3+2%. @ether_fi Core free. FX ~1% (0% USD/EUR), ATM 2%, top-up ~0.2%. @Plasma Lite free (virtual). Top-up stables 0%, FX ~2%. @useTria Virtual is now free (promo). Top-up 0%, FX ~1%. @gnosispay Free edition. 0% tx/FX, ATM free up to €200, then 2%. @Exa_App Free. FX 1.5%, gas 0%. @Bybit / Virtual free Wirth Issue: $0 / Year/month: $0 /Crypto conversion: 0.9% FX: 0.5–2% / ATM: free up to ~$100/month, then 2% @wirexapp Base free. FX 0%, ATM free up to the limit, then 2%. @raincards Often 0% annual (depends on the partner), FX up to 3%, conversion 0-1%. @xplaceapp Basic free. FX 1%, cashback 1%. @coca_card Starter free. FX 0%, ATM free up to $250, then 2%. @avici 4 free virtual, after $10. Tx 0%, FX 0% (Visa ~0.4–1%), ATM $0–1+0.65%. @hyperbeat Free cards. Deposit ~0.12%, cashback up to 5% (campaign), credit against portfolio. @BleapApp Full free. FX 0%, ATM free up to €400, then ~1.5–2%. @oobit Free. Tx 1% (min $0.25), FX up to 3%. @slashapp Free plan. FX card 1% (min. $0.4), transfers $1–25. @FlexSuperApp Creation free (next $3). FX $0.30+1%, funding free (except Tron). @koshmoney Virtual $10 / physical $100 + $10/год. USD 0%, FX 2%+$0.3, ATM $1+1%. @perena Redemption 0.05%, card fees @altitude Business virtual free (unlimited). Cashback 1–2% USDC @PulsarMoneyApp Early access. Funding 0%, same-currency 0%, cross-currency 1.35%. @DptPay Virtual $10 / physical $50. USD 0%, FX 0–2%, ATM 2%. which card should I choose?

Here’s how we assessed Safe’s resilience to potential risks, based on publicly available data and patterns observed across historical Web3 incidents. Take a look and let us know if we missed anything, the goal is to make sure the assessment reflects the most complete picture possible

✅ New quarterly record of ~130M tx ✅ Safenet is live with 54.8M SAFE staked ✅ 6.48B in stablecoins As @safe and secure as ever.

@AMLBotHQ @AcrossProtocol @cascade_xyz While it is positive that the hacker ultimately returned the funds, this does not eliminate the need for robust security measures

Another attacker chose to return stolen funds instead of laundering them @AcrossProtocol exploiter sent back ~1,730 ETH (~$3.3M) to a multisig controlled by Across Protocol, keeping 225 ETH (~$430K) as a bounty This comes shortly after the @cascade_xyz attacker did the same with their exploit proceeds. Good news for the industry

An agent can be fully audited yet still allocate capital recklessly or manage risk effectively while remaining dependent on a single, fragile oracle. CORE3 contributed its evidence-based risk methodology and independently assessed agents to @owneydotapp alongside @CODESPECT, and @hackenclub to build the first Trust and Security framework for Agentic DeFi Yield across Security, Risk, and Robustness to make failure paths measurable 🔽

@ethereuminsti @ethereum Congrats, a lot of those projects have really good risk score, they`d certaintly add value to the Ethereum Institutional 🏆

1/ We’re excited to announce the close of @ethereuminsti's initial ecosystem funding round and supporter coalition, with broad participation and support from individuals and entities focused on driving institutional adoption of @ethereum. Our ecosystem funding round is anchored by @BitMNR, @Sharplink, Ethereum co‑founders @ethereumJoseph , and @MihaiAlisie, alongside a larger group of individuals and crypto‑native institutions.

@top7ico @flow_blockchain @zksync @0G_labs @tezos @Somnia_Network @celestia @Polkadot @WalrusProtocol @berachain @beracains Also, when looking at their financial data, we found very limited publicly available information for most of the projects. According to our methodology, this lack of verifiable data affects their risk posture and may result in a higher Probability of Loss

Rich in Capital, Poor in Revenue Ten infrastructure projects raised $6.89B between them. Yesterday, all ten combined earned $1,119. • #EOS - $0 • @flow_blockchain - $4 • @zksync - $270 • @0G_labs - $3 • @tezos - $29 • @Somnia_Network - $400 • @celestia - $58 • @Polkadot - $0 • @berachain - $30 • @WalrusProtocol - $325 EOS is the extreme case: $4.2B for exactly zero revenue on the day. Polkadot also earned nothing. Flow turned $746M into $4. The revenue that does exist is concentrated in the smallest raises. Somnia, Walrus and ZKsync account for 89% of the day's total, and Somnia alone out-earned EOS, Flow and ZKsync combined, three projects that took in $5.4B between them. Money raised tells you nothing about money made. At this rate the group needs roughly 16,900 years to return its capital. One day is a noisy sample and infra was never sold on day-one revenue - the pitch was that usage would follow. But the old fallback is gone: when revenue ran dry, projects used to lean on their token. That safety net disappeared this cycle, and it's exactly what's been closing protocols all year.

Congrats on the partnership! Not a bad trio in terms of Probability of Loss, although there is still room for strengthening risk resilience for each of you. Check out core3.io, our assessments are based on publicly verifiable data, so if you notice anything we've missed, we'd love your feedback and will gladly review it

Trust Wallet now supports Tron via @WalletConnect. Connect to your favourite @TronDAO dApps directly from your self-custodial Trust Wallet. The entire Tron ecosystem, at your fingertips.

NORTH KOREA JUST GOT HACKED BY NORTH KOREA. Former military hackers breached the Central Bank of the DPRK and the Foreign Trade Bank, pushed the money into crypto wallets, then cashed out through Chinese brokers in tiny transfers to stay invisible. Arrested at a Pyongyang safe house on July 12. This is the same state that stole billions of crypto the last few years. It could not defend its own money from the people it trained. Nobody is safe.

Shoutout to the early buyers who held through everything.

Our data shows a bit different situation. @kucoincom, @bitget, and @MEXC currently lead our ranking, with the lowest Probability of Loss among 193 assessed exchanges. @binance ranks 8th, with a calculated Probability of Loss of 23.55/100. @Gate, on the other hand, scores well from a security standpoint. However, we found no publicly available information to assess its solvency and transparency. As a result, its Probability of Loss is 51.88/100. This doesn't necessarily indicate higher risk itself, but rather reflects the lack of publicly verifiable information in these areas, reducing confidence in the overall risk assessment. Disclaimer: PoL is calculated using publicly verifiable information. Some metrics rely on data that isn't always publicly available, so exchanges can submit additional evidence to ensure their assessment reflects the most complete picture.

Before the end of 2026, I believe one of these exchanges is going to blow up next: Binance Bitget KuCoin Gate io MEXC And it will probably be the black swan whales are waiting for as the final act of this bear market. If I had to choose the most likely one right now, I would say KuCoin. It pleaded guilty in the US and agreed to pay more than $297M in penalties. Its public reserves are much smaller than Binance, Gate io or Bitget. Its reserve margin is also tighter, with 111% BTC coverage in its latest Proof of Reserves. Then add its heavy dependence on altcoins, retail traders and low-quality listings. MEXC would be my second choice. Its declared reserve ratios look much stronger than KuCoin’s, so the main concern is not the numbers they publish. The concern is trust. There have been repeated complaints about frozen accounts, proof-of-funds requests, aggressive risk controls and withdrawals being restricted. There are also questions around how real some of its reported volume is. None of that proves it is insolvent. But exchanges do not always collapse because someone finds the hole first. Sometimes they collapse because enough people become scared that there might be one. Gate io is somewhere in the middle. It reports more than $8B in reserves and a 115% reserve ratio, which looks better than KuCoin. But it is extremely exposed to long-tail altcoins and illiquid assets. If the altcoin market continues dying, that model becomes much harder to sustain. Bitget currently looks like the safest one on the list. Its latest Proof of Reserves showed 123% coverage, and there are fewer serious legal or withdrawal-related warning signs around it. Then there is Binance. Binance is probably not the most likely to collapse. It has the deepest liquidity, the largest visible reserves and the strongest position in the market. But if Binance ever goes down, nothing else on this list would come close to the damage. It would affect stablecoins, altcoins, market makers, funds, projects, derivatives and the entire confidence structure of crypto. Again, this is not me saying one of them is definitely insolvent. But save this post. Don’t say nobody warned you.

@0xTakeProfits Wow, congrats🏆

Tron DAO 🤝 Nexus Data Labs

@stacy_muur They have every reason to trade on it. Based on our assessment, @monad is among the lower-risk cohort of projects, with a Probability of Loss of 29/100, indicating strong risk resilience

Who (and where) exactly are these active traders on Monad? I haven’t seen anyone mention or use the chain since its TGE.

@wallet Assessed Probability of Loss based on previous incidents

No wallet is complete without ________.

@Duckling_nft @okx Hope staying unexploited becomes the norm, not the exception

@Core3io @okx A sign of legitimacy 👀

I 🖤 CRYPTO

@Defi_Warhol @AFX_XYZ @DriftFDN @Treasure_DAO @modenetwork @EclipseFND @Ostium @ResolvLabs @trustedvolumes @VerusCoin We analyzed historical Web3 security incidents, identified the factors that led to exploits and the measures that help prevent them, and calculated the future Probability of Loss for today's projects

More than 60 crypto projects have been sunset in 2026 so far. Here's a Tier List of projects likely to shut down next: S Tier (Critical Risk) @AFX_XYZ @DriftFDN @Treasure_DAO @modenetwork @EclipseFND A Tier (High Risk) @Ostium @ResolvLabs @trustedvolumes @VerusCoin @zetablockchain @MantaNetwork @taikoxyz @LooksRare B Tier (Medium Risk) @syscoin @MetisL2 @blast @BuildOnBeam @Somnia_Network @initia @fuel_network @Humanityprot C Tier (Lower Risk) @Ronin_Network @osmosiszone @MultiversX @flow_blockchain @Celo @berachain D Tier (Likely to Survive) @AbstractChain @soneium @zksync @SagaAILabs @tezos @Scroll_ZKP Do you agree?