Security

Offline promotion-driven crypto project ODY (Odysseus) collapsed to zero and allegedly exited on July 29, 2026. Before the collapse, it had more than 350,000 holder addresses, peak liquidity close to $18 million, and nearly $20 million in 24-hour trading volume, making it a relatively sizable project on BNB Chain. A review of the smart contract found it was not fully decentralized as marketed, retaining key controls including Mint issuance, governance privileges, a whitelist, and the ability to change tax rates. The project ultimately carried out large-scale minting and sold into the liquidity pool to cash out, draining USDT, according to the contract review.

An address deployed a token called $PIPEDOG, seeded 263 ETH in liquidity, and removed the liquidity after 10 minutes of trading to exit with 399 ETH, including 136 ETH from buyers. Four minutes later, the same token name and supply were redeployed with 263 ETH again, but this time the LP was locked and an additional LP position using the 136 ETH was placed 81% below market to avoid filling and help pass on-chain scanners. Within 19 hours, the LP generated 166 WETH in fees on the 263 WETH seeded, with 62% attributed to the locked funds, and fees continued to rise.

A Bitcoin flash crash occurred on Binance US on 2026-07-28. The exchange said the abnormal price move was caused by a “bug” in an internal trading algorithm that disrupted the order execution sequence. The incident hit liquidity in BTC spot and derivatives markets and set off knock-on leveraged liquidations. Binance US did not disclose the size of the drop or how long it lasted.

Real-time data show crypto exchange BitMart processed no Bitcoin (BTC) withdrawal requests in the past 24 hours. The status is described as a sudden abnormality rather than a routine maintenance notice, and there has been no official explanation. The disruption is said to affect users’ ability to withdraw assets and may fuel expectations of a run and fund transfers across platforms. The situation is currently only confirmed for BTC withdrawals, with no data provided for other major tokens.

A report says a structural logic defect inside U.S. Wall Street clearing infrastructure could affect $25 million in Bitcoin-related settlement. The issue is described as embedded in existing code or processes rather than a failure that has already occurred. The report says it could disrupt Bitcoin futures delivery, collateral valuation and cross-market arbitrage if triggered, while noting there is no evidence it has been exploited and no clearinghouse or remediation timeline was disclosed.

A hacker took over Robinhood co-founder Vlad Tenev’s X account and spent about 40 minutes promoting a fake $VLAD memecoin as the token for Robinhood Chain, triggering a rush of buying that briefly pushed its market cap to nearly $10M. On-chain analysts estimate the attacker profited by dumping 650–690 ETH, worth about $1.2M–$1.3M. Robinhood has not confirmed the amount. The incident occurred as Robinhood Chain surpassed $700M in assets and reached 300,000 daily users.

REVA (@r3vl_xyz) ran a pre-TGE campaign on Binance Wallet in August 2025 and followed with eight Booster rounds, prompting users to commit BNB and pay gas fees. As of July 2026, its official Twitter account has stopped posting, the team is reportedly unreachable, and the token has yet to launch, leaving participants with out-of-pocket costs. One participant estimated their combined BNB and gas expenses at about 20U. There has been no refund, compensation, or official response.

A well-known figure in the Solana ecosystem, Vlad, had an on-chain account compromised in a suspected hack, sparking panic across the community. Several Solana traders said on social media that they were eager to dump jimothy tokens along with other positions. jimothy is a Solana-based meme token with no record of listings on major exchanges. No loss amount, attack method, or on-chain evidence has been disclosed, and the incident was described as an individual security breach rather than a protocol or infrastructure failure.

On July 23, 2026, three major security incidents hit DeFi. An AFX-operated USDC custody bridge on Arbitrum was exploited for $24.15 million, prompting an emergency suspension of bridge operations. The Verus Ethereum Bridge was breached for $7.55 million in a repeat of the same failure mode seen since May, while B² Network’s $B2 staking contract upgrade authority was compromised for $3.86 million and staking has been paused pending security reviews.

Balance Coin (BLC), a newly launched Bitcoin-collateralized stablecoin designed to hold a $1 peg, was hit by an oracle attack after an attacker submitted a falsely low BTC price. The manipulated price triggered liquidations across vaults, allowing the attacker to seize the BTC collateral and cash out about $912,000. BLC fell more than 99%, bottoming at $0.00075 and leaving its market value at about $2,570.