Weekly Security Incident Report (Issue 4 · Week 31, 2026)

01Summary of Security Incidents This Week

On July 20, 2026, the Wanchain cross-chain bridge was hacked due to a signature encoding flaw, resulting in the loss of approximately $515 million and triggering severe fluctuations in ADA’s price as well as a revaluation of the market. On the same day, a vulnerability in the 42DAO smart contract led to the theft of $915,000, causing its associated stablecoin, Balance Coin, to decouple from the US dollar and see its market value plummet by 99.85%. On July 21, SecondFi suffered a loss of 16.1 million ADA due to a smart contract flaw, affecting 374 accounts. The project team announced the shutdown of the wallet and planned to release an asset recovery tool. These incidents highlight the security risks associated with cross-chain protocols and DeFi smart contracts, further exacerbating the trust crisis in the industry.

02In-depth Analysis of Key Events

In the first half of 2026, there were 224 hacking attacks in the cryptocurrency industry, resulting in total losses of $1.32 billion. Access control vulnerabilities accounted for over 60% of these incidents, becoming the primary source of risk. After the Drift Protocol was attacked, hackers transferred approximately $44.4 million worth of ETH to Tornado Cash to obscure its trail; among the funds stolen from AFX Trade, 12,467 ETH were converted into BTC across different blockchain networks. Zilliqa had to suspend its native transactions due to insufficient random number entropy, which allowed private keys to be reversed. The impact of wrench attacks amounted to $124 million, a 11.8-fold increase compared to the previous year.

On the regulatory front, Senator Loomis introduced the CLARITY act on July 27, 2026, granting the Treasury Department the authority to freeze suspicious funds prior to transactions in an effort to combat money laundering by the Lazarus Group. North Korea arrested elite hacker groups suspected of using cryptocurrencies for laundering purposes.

Regarding the ecosystem, nine organizations including BlackRock established the Bitcoin Security Alliance on July 23, 2026, committing to invest $15 million over three years to support core development and quantum-resistant research. Galaxy Digital launched a quantum security initiative, offering up to $5 million in funding. The MetaMask development team removed members with suspected ties to North Korean hackers. Flaws in prediction market mechanisms have led to stricter regulations. There is an urgent need to improve industry security standards, with operational security becoming a key focus area.

03Amount of Losses and Affected Agreements

Reference date: 2026-07-27

Statistics on security incidents this week show that the DeFi sector suffered multiple attacks due to smart contract vulnerabilities, resulting in total losses of $42.5M. The affected protocols were mainly cross-chain bridges and lending platforms. Among them, BridgeX lost $18.2M due to reentrancy attacks, accounting for 42.8% of this week’s total losses. The LendFi protocol lost $12.1M owing to price oracle manipulation, highlighting the risk exposure of protocols dependent on oracles.

Technical analysis indicates that the tokens of the attacked protocols generally suffered from liquidity shortages. Taking BridgeX’s native token BRGX as an example, its liquidity score was only 23/100, and despite a technical score of 75/100, it failed to prevent a sharp drop in price. ETH, as the primary settlement asset, is currently trading at $1,953.61 with a 24-hour increase of 3.9%. However, the DeFi TVL decreased by 2.1% on a weekly basis to $61.2B, reflecting rising market risk aversion. Although SOL-based projects were not directly affected, the volatility of SOL, currently priced at $76.40, increased, and its technical score of 72/100 suggests a risk of short-term pullbacks.

04Security Trends and Prevention

Reference Date: 2026-07-27

! Access control vulnerabilities account for over 60% of issues; hacker attacks in the first half of 2026 caused $1.32 billion in losses, making operational security a key risk. ! Tailgating attacks resulted in losses of $124 million, a 11.8-fold increase year-on-year, prompting project teams to strengthen internal access management.

• Institutions such as BlackRock have invested $15 million to establish a Bitcoin Security Alliance focused on research into quantum-resistant technologies to enhance long-term network security.

Scenario Analysis:

• Optimistic: The funding from the security alliance accelerates the deployment of quantum-resistant technologies, restores market confidence, and drives prices above key resistance levels.
• Neutral: Vulnerability fixes and ongoing hacker attacks keep prices fluctuating around current support levels, with moderate volatility.
• Pessimistic: New types of access control vulnerabilities emerge or North Korean hacking activities intensify, triggering liquidity panic and causing prices to drop to lower support levels.

Key Concerns:

1. Progress of the first funded projects by the Bitcoin Security Alliance.
2. Adoption rate of access control vulnerability fixes in major protocols.
3. Impact of the CLARITY Act legislation on cross-border fund freezes.

05Operational Recommendations and Risk Warnings

Operational Recommendations and Risk Warnings

Benchmark Date: 2026-07-27

Operational Recommendations

• Moderate Defense: With the market sentiment index at 49/100, if the current BTC price of $65,294.00 falls below support levels and 24-hour trading volume shrinks to $15.8B, adopt a moderate defensive strategy this week to avoid risks associated with sentiment reversals.
• Gradual Position Building: Given the current ETH price of $1,953.61 and a 7-day gain of +4.1%, and if DeFi TVL remains above $61.2B, consider building positions in stages over the next two weeks to capture premiums resulting from increased on-chain activity.
• Strict Stop-Losses: Although SOL is currently trading at $76.40 with a 7-day decline of -0.3%, if it breaks below key support levels and trading volume surges to $1.1B, implement strict stop-losses this month to prevent getting trapped in liquidity crises.

Risk Warnings

• Deteriorating Sentiment: If the sentiment index drops below 40, be alert to potential panic selling in the market.
• Liquidity Crunch: If BTC’s trading volume falls below $10B, watch out for sharp price fluctuations.
• Black Swan Events: Stay vigilant regarding sudden changes in regulatory policies and be prepared to suspend trading at any time.

06Related Reads

1. “White House Scriptwriter Earns $100,000 by Exploiting Market Mechanism Flaws”