att

According to Jinshi reports, the Iranian Revolutionary Guard stated that a facility housing U.S. troops was destroyed in Iran's missile attack on Jordan's Prince Faisal Air Base.

The cross-chain bridge project Across posted that it encountered an attack on the Solana side, but user funds are safe, and all existing cross-chain transactions have been completed. Only the funds of the relay nodes operated by Risk Labs may be affected. Across has suspended deposits in the Solana direction, and other functions of the protocol are operating normally.The project team is tracking the related attack addresses with SEAL_911 (including one Solana address and two Ethereum addresses) and will release more details and a complete review later. They remind users to only pay attention to information released by this official account and to be wary of phishing links.

DeFi infrastructure company Enso disclosed in a report a type of malicious liquidity pool called "toxic pools," which manipulates trading simulations to return false optimal quotes to wallets and DEX aggregators, and alters logic during actual on-chain execution. Enso stated that the relevant malicious contracts can identify read-only simulation environments and return optimized prices, but once the trades are broadcasted on-chain, they execute at worse prices or result in transaction failures.A manipulated Curve pool processed over 129,000 exchanges, resulting in approximately $225,000 in inflated quotes, with over 37,000 transactions rolling back and consuming nearly $30,000 in gas fees. On Polygon, a malicious Uniswap v4 hook attracted routing systems with false exchange rates, subsequently triggering a 99.1% transaction failure rate. Enso stated that it has updated its execution protection product Enso Shield to detect false quotes in Ethereum and Polygon environments.

Programmer Stefan Thomas holds an IronKey encrypted USB drive containing the private keys for 7,002 bitcoins, which were earned as a reward for his 2011 educational video "What is Bitcoin?" Recently valued at approximately $111,000 each, this amounts to about $777 million.The IronKey device is set to permanently lock and delete its contents after 10 incorrect password attempts. Thomas has tried 8 times and has only 2 attempts left. The manufacturer Kingston stated that there are no backup passwords or alternative recovery methods aside from the original password set by the user. Thomas has sought assistance from the digital forensics company Naxo and security researcher Chris Tarnovsky, and he previously declined Unciphered due to having reached a verbal agreement with both teams. As of the end of 2025, the IronKey remains stored in a Swiss vault, with no confirmation of a successful recovery by mid-2026.

According to GMGN data, the top 5 tokens with net inflow of KOL in the past 24 hours are as follows:ANSEM (9cRC....ump): Net inflow of $20,000, 24-hour price change -3.9%, currently priced at $0.169.ACCOUNT (5rnh....t1r): Net inflow of $1,000, 24-hour price change 697.8%, currently priced at $0.0001.Raj (5kD2....ump): Net inflow of $551, 24-hour price change 569.8%, currently priced at $0.0001.HODL (Hh3o....ump): Net inflow of $456, 24-hour price change -6.9%, currently priced at $0.0009.DUMP (9bmv....HDa): Net inflow of $383, 24-hour price change -10.7%, currently priced at $0.0008.

According to TenArmorAlert monitoring, the BSC chain project "CrowdRingCircle" suffered a suspicious attack, resulting in a loss of approximately $201,400.

Bonzo Finance Labs stated on platform X that, in response to the oracle attack on July 11 that affected Bonzo Lend, the Bonzo Finance Foundation will provide full compensation based on the position status prior to the incident, with funds supported by the recovery mechanism promised by the Hedera Foundation.

According to Onchain Lens monitoring, the ResolvLabs attacker has transferred funds again after stealing approximately $25.9 million in March.In the past few hours, 580 ETH has been transferred, worth about $1,090,000, and is being routed through a mixer.

According to Jinshi reports, the White House stated that President Trump will not allow Iran to launch attacks in the Strait of Hormuz without facing consequences. The United States can strike Iran at any time and in any place.

The multi-asset perpetual contract platform Cascade's Discord administrator MAX stated in the channel that the Cascade CLS treasury is suspected to have encountered a security vulnerability, resulting in a loss of approximately $1.3 million. The platform has currently suspended all trading and withdrawals, and has invited SEAL 911 and other third-party security teams to investigate and address the issue.Cascade supports deposits via Arbitrum USDC or bank accounts and is currently still in an invitation-only private testing phase.

According to Jinshi reports, Kyiv, Ukraine was hit by a ballistic missile attack, with multiple explosions heard. The Air Force warned that more missiles are on the way.

Summer.fi announced that after the Lazy Summer protocol was attacked on July 6, the team assessed that there is no viable path to continue operations, and therefore will gradually cease operations. This attack directly resulted in a loss of approximately $6.1 million, and a significant portion of the team members' own assets were also stored in the attacked vault, further reducing the operational funds needed for reconstruction.The announcement indicates that the Summer.fi application will remain open until August 31, and the future direction of the Lazy Summer protocol will be determined by the Lazy Summer DAO. The current DAO is working to restore the withdrawal and redemption processes for each vault, including the two vaults that were previously affected.

The perpetual contract trading platform Ostium on Arbitrum is suspected to have been attacked, resulting in a loss of approximately 12 to 18 million USDC, accounting for about 35% of its over 34 million dollar treasury size.The attacker allegedly compromised the oracle signer’s private key, utilized the registered PriceUpkeep relayer to submit favorable prices for future times, and looped opening and closing positions to deplete the treasury funds. Currently, Ostium officials have not responded.

Blockchain security agency PeckShield stated that the previously monitored fund movements of the LayerZero Executor wallet are not a security incident but rather part of normal operational adjustments. PeckShield confirmed that user funds are currently not at risk.

According to BlockSec Phalcon monitoring, the BarnBridge SMART Yield (cUSDC) protocol was attacked on Ethereum, resulting in a loss of approximately $776,000, suspected to be a governance attack.The attacker first gained DAO governance rights, then upgraded the SmartYield/controller proxy to a malicious implementation contract, which subsequently called the _takeUnderlying privileged function of CompoundProvider, using the pre-existing USDC authorizations of 50 user accounts to transfer aggregated funds to the attacker through transferFees.

According to Jinshi reports, the Iranian military stated that it has deployed drones to attack the positions of U.S. F-18 fighter jets, personnel accommodations, and equipment warehouses at the Al Azraq base in Jordan, and indicated that it had previously conducted six rounds of strikes on U.S. regional bases.

According to GoPlus analysis, Lumi Finance on Arbitrum was attacked on July 13, resulting in a loss of approximately $270,000.The vulnerability originated from a logical flaw in the validateUserOp function of the Sodium smart account contract (ERC-4337) when calling _validateSignature to verify the signature—specifically, during the execution of isValidSignatureNow, the signer parameter was passed as the attacker's address. After an error occurred in the call to ECDSA.tryRecover, it did not revert but instead called the isValidSignature function in the attack contract and passed the verification. The attacker exploited this vulnerability to execute Token approve operations during the UserOperation verification period, obtaining approval rights for ERC20 tokens from multiple smart accounts without the payer's consent.

According to Jinshi reports, analyst Matthew Weller stated that the overall monthly inflation rate is expected to record negative growth for the first time in over a year, which will alleviate market concerns about the Federal Reserve's imminent interest rate hike.The reopening of the Strait of Hormuz has led to a significant drop in energy prices, while the impact of Trump's tariffs has largely been absorbed by the market. The federal funds futures market is currently pricing in a 35% probability of the Federal Reserve raising interest rates at this month's meeting.