This Week’s Verdict

The interesting money this week did not move on price, it moved on code that should never have shipped: a Supra oracle that trusted a fabricated update, and two package registries serving malware to anyone who typed npm install. Everyone else spent the week arguing about whether Bitcoin is in the second half of a bear market. Meanwhile the supply chain quietly turned into the attack surface, again.

The Breaches

Bonzo Lend, a lending protocol on Hedera, lost roughly $9 million when an attacker inflated the value of SAUCE collateral and borrowed against it. The root cause was not Bonzo’s contracts but Supra’s on-chain oracle verifier, which accepted a manipulated price update as legitimate. A second wallet borrowed another ~$1 million through the same flaw, then self-identified as a white hat and said it would return the funds. The protocol shed 77% of its total value locked as everyone else did the sensible thing and left. When your solvency depends on a third party’s verifier logic, that verifier is your smart contract whether you audited it or not.

Separately, a long-time Solana holder had 181,000 SOL (about $14.2 million) drained, per ZachXBT. The funds were sold, bridged to Ethereum, and converted into roughly 7,918 ETH, the standard laundering choreography. Billed as the largest single-individual crypto theft on record, though the more useful lesson is the boring one: bridged-and-swapped means the window to freeze anything closed before the news did.

Vulnerabilities Worth Your Attention

• The jscrambler npm package (8.14.0) was compromised and shipped a Rust infostealer via a preinstall hook, with builds for Windows, macOS, and Linux. Socket flagged it six minutes after publication, which is fast, and still not fast enough if your CI pulled it in that window.
• Injective Labs’ GitHub was compromised and used to push a malicious @injectivelabs/sdk-ts@1.20.21 to npm, with fake telemetry that exfiltrated wallet private keys and seed phrases. Two crypto-adjacent supply chain hits in one week is not a coincidence, it is a pattern.
• Ledger’s Donjon team demonstrated a laser fault attack on Tangem cards that resets the wallet password by bypassing a recovery-state check in firmware. The cards cannot be patched. Tangem calls the everyday-user risk “virtually non-existent,” which is true right up until someone has physical access and a lab bench.
• AI found an Ethereum consensus bug that could take validators offline, but humans had to write the proof-of-concept. Useful reminder that the machine finds the smell; a person still has to open the drain.
• Ghostcommit hides prompt injection inside PNG files, slipping past AI code reviewers CodeRabbit and Bugbot (which never open images), then convincing a coding agent to dump a repo’s .env secrets into code. As the industry bolts AI agents onto everything, the attack surface follows.

Threat Actors & Campaigns

No named nation-state crew claimed this week’s crypto thefts, but the tradecraft speaks for itself. The jscrambler and Injective Labs compromises follow the now-familiar developer-targeting playbook: poison a trusted package, wait for the install hook, harvest keys. This is the same category of attack that has kept DPRK-aligned actors funded, whether or not attribution lands here.

Elsewhere, O-UNC-066 (tracked by Okta) is running voice-phishing that pushes Microsoft 365 users into enrolling attacker-controlled Entra passkeys for data extortion, a reminder that passkeys move the weak link to enrollment, not eliminate it. China-linked Silver Fox deployed a new Rust RAT, MODBEACON, using gRPC streaming for encrypted C2. And on the enforcement side, a Ryuk ransomware operator pleaded guilty in the US facing 15 years, while a jailed launderer was charged with moving $290,000 in court-forfeited crypto from a Kraken account while behind bars. The crypto never sleeps, even when its custodian is incarcerated.

The Bigger Picture

The board shifted on regulation and custody more than on price. Circle won final OCC approval for a national trust bank (First National Digital Currency Bank), eventually to hold USDC reserves under direct federal supervision; the stock popped over 10%. A CBDC ban became US law via the 21st Century ROAD to Housing Act, which Trump declined to sign but did not veto, blocking a Fed digital dollar through 2030.

On flows, US spot Bitcoin ETFs just closed their worst month on record with roughly $4.5 billion of June outflows, and combined BTC/ETH ETFs snapped an eight-week outflow streak with a modest $282 million inflow, recovering about 3% of the $9.46 billion bled over the prior two months. More telling: Bitcoin exchange reserves sit near a seven-year low, and coins leaving the ETF wrapper are not landing on Coinbase or Binance, they are moving to self-custody. Binance’s co-CEO says 70% of EU withdrawals post-MiCA went to self-custody rather than licensed platforms. A custody-preference signal, and given this week’s EU DAC8 registry concerns (France’s tax-clerk-to-kidnapping-gang leak being the cautionary tale), you can see why people prefer keys they hold. Which brings us back to the top of the issue: keys you hold are keys you can also lose to a laser, a poisoned package, or a bad oracle. Pick your counterparty risk carefully, because you never actually escape it.

Resources

• https://www.coindesk.com/web3/2026/07/11/lending-protocol-bonzo-loses-77-of-value-locked-as-usd9-million-oracle-exploit-rattles-hedera
• https://www.reddit.com/r/CryptoCurrency/comments/1uti7ci/biggest_hack_from_an_individual_in_crypto_history/
• https://thehackernews.com/2026/07/compromised-jscrambler-8140-npm-release.html
• https://thehackernews.com/2026/07/injective-labs-github-compromise-pushes.html
• https://thehackernews.com/2026/07/laser-attack-resets-tangem-wallet.html
• Incident trackers (reference standard): Rekt leaderboard · SlowMist Hacked