SolidityScan

🚀 Big news! SolidityScan is now integrated with @soneium, bringing seamless smart contract security to your fingertips. Easily access security scores, gain real-time insights into vulnerabilities, and explore full threat reports — directly from verified contracts on Soneium.

Allbridge Core reported a security incident and paused the protocol. LPs in affected pools were urged to withdraw, and the team asked any arbitrage takers to return funds for LP compensation. #DeFi #Security

Security watch: a claim is circulating that a late BIP-110 upgrade could contain a consensus flaw that might lead to a hidden chain split between node versions. Unverified—await technical confirmation and guidance from maintainers. #Bitcoin #Security

Audit report: dashboard.credshields.com/r/647457d1-ae1…

✅ Audit Complete. We've successfully completed a smart contract audit on @CarbonfiHQ. CarbonFi provides transparent and verifiable infrastructure for global carbon markets, combining AI driven verification with decentralized settlement to enable trusted climate finance at scale. Website: carbonfi.io

Kaspersky reports “OkoBot” malware targeting crypto users via ClickFix-style social engineering and trojanized GitHub apps. It can steal wallet files, browser data & credentials, inject extensions, and capture wallet app windows. #CyberSecurity #Crypto

Trusted Volumes incident update: a wallet linked to the exploit returned 1,122 ETH, per a report citing Etherscan. The same report says the original drain was ~$5.9M and the attacker kept ~“$2M bounty” (unverified characterization). #DeFi #Security

Solana DeFi protocol DeFiTuna reports its lending pools were exploited, draining ~$580K and leaving a ~$580K deficit in the USDC lending pool. Team says the attack vector is mitigated; investigation + recovery efforts ongoing. #DeFi #Security

Ostium reports a security incident affecting its public OLP vault. Incident window: 14:18–14:23 UTC (Jul 15). Team says it contained the issue quickly and coordinated pausing trading contracts within the hour. #DeFi #Security

Chi Protocol incident (Ethereum): attacker reportedly bought depegged $USC cheaply and burned it to redeem reserve collateral at a hardcoded $1 valuation. Estimated loss: ~$8.5K; reserves reported as nearly drained. #DeFi #Security

TenArmorAlert flagged a suspected on-chain price manipulation attack on BSC involving a “VECAndETH” contract, with reported losses of ~$109.6K. #DeFi #BSC

Arbitrum alert: Blockaid & SlowMist report a Lumi Finance user-drain (~$264k–$270k). Cause: ERC-4337 smart-account validation side effects enabled unintended ERC-20 approvals; an attacker-controlled paymaster/spender then swept funds. #DeFi #Security

PinGo reports a reward-contract hack via an authorization verification flaw. Attacker allegedly claimed 840,000 PINGO tokens. Team says incident is contained, assets migrated, contract upgraded, and claims reopened. #Web3Security #DeFi

Bonzo Lend (Hedera) reports an exploit tied to a third‑party oracle (Supra) verification failure, enabling a manipulated SAUCE price update and ~$9.05M in over-borrowing. #DeFi #Security

Bonzo Lend (Hedera) reports an oracle verification exploit (Supra) let an attacker push a manipulated $SAUCE price and borrow ~ $9.05M in assets with minimal collateral. Protocol is paused while investigation/recovery continues. #DeFi #Security

Bonzo Lend (Hedera) reported an oracle-driven exploit involving SAUCE collateral price manipulation. Bonzo estimates ~$9M impact after inflated SAUCE pricing enabled outsized borrows (USDC + wrapped HBAR). #DeFi #Security

Security research: Ledger Donjon disclosed a laser fault injection technique that can reset Tangem card wallet passwords, enabling wallet takeover if an attacker has physical possession of a card. Risk is high impact but requires specialized lab equipment. #Security #HardwareWallet

BonkDAO says a “malicious governance proposal” drained an estimated ~$20M worth of $BONK from the DAO treasury on Solana. They’ve notified law enforcement and are coordinating with exchanges/bridges + the Solana Foundation for response & recovery. #Solana #DeFiSecurity

Security alerts report an ongoing exploit on Summer.fi (Summer Finance) with ~ $6M drained. Analysts allege flash-loan + share/accounting manipulation; funds reportedly swapped to DAI and moved to an attacker address. #DeFi #Security

SlowMist reports SecondFi (formerly Yoroi) suffered an exploit tied to web wallet generation, exposing private keys at the address level. ~16M ADA (~$2.4M) reportedly drained from 374 wallets across 3 attacks. #Web3Security #Cardano

Polymarket says a 3rd-party vendor compromise injected a malicious script into its frontend for some users, leading to ~US$3M in PUSD drained. They say it’s contained, the dependency was removed, and impacted users will be refunded. #Web3Security #CryptoSecurity