~$1.35M Lost: BarnBridge, DeFiTuna | BlockSec Weekly

This weekly report covers 2 security incidents from July 13 to July 19, 2026, with approximately $1.35M in total losses on Ethereum and Solana. DeFiTuna, a Solana lending protocol, lost ~$570K because the position health check treated a zero-value position as healthy regardless of outstanding debt; the attacker used controlled swap routing and a separate low-liquidity pool to trigger this defect. BarnBridge lost ~$776K after an attacker exploited the protocol's deprecated but still-active governance system on Ethereum to pass a malicious proposal and drain user-approved USDC.

Taint Analysis in Crypto: Poison, Haircut, and FIFO Explained

Taint analysis is how investigators trace stolen crypto across a blockchain. This guide walks through the three standard methods — Poison, Haircut, and FIFO — with a worked Ethereum example and honest limits, and shows how modern fund-tracing tools apply them at scale.

How Does KYA (Know Your Address) Work for DeFi Protocols?

How Phalcon Compliance's KYA screens wallet addresses for DeFi protocols in real time, catching sanctioned, mixer-linked, and hacker-attributed funds at entry and exit points without breaking the user experience.

What Is Address-Based AML Monitoring in Crypto? A Plain Guide

A plain guide to how address-based AML monitoring continuously screens blockchain wallets against sanctions lists and risk labels, how it differs from transaction monitoring, and why Phalcon Compliance runs both together in real time.

Know Your Transaction (KYT) in Crypto: What It Is and How It Differs from KYA and KYC

An explainer on how Phalcon Compliance's KYT screens each on-chain transfer for exposure and behavioral risk in real time, how it differs from KYA and KYC, and how it maps to FATF's real-time monitoring obligations for VASPs.

Money Laundering Meaning: How Crypto Is Used and How It's Caught

Crypto speeds up every stage of money laundering. The 2025 Bybit hack ($1.5B) and ICE exchange case ($12.47M) show how funds move fast, requiring real time screening tools like KYA and KYT to catch it before settlement.

Money Laundering Examples in Crypto: 3 Real Cases and What They Reveal

Three real cases reveal how crypto laundering works: Tornado Cash's 7,400 ETH mixing, LI.FI's 20-hop bridge attack, and 151 frozen USDT addresses. All leave full on-chain trails, detectable with the right tools.

Money Laundering in Simple Terms: What It Is and Why Crypto Makes It Easier

Explains money laundering's three stages in plain terms, citing 2025 cases like a $15B Bitcoin seizure and $1.26B USDT freeze, and introduces free tools like MetaSleuth to check suspicious addresses.

~$36M Lost: Summer.fi, Bonzo Lend & More | BlockSec Weekly

This weekly security report covers 3 notable incidents from July 6 to 12, 2026, with total losses of approximately $36.29M across Ethereum, Solana, and Hedera. The highlighted Summer.fi incident ($6.04M) demonstrates how an incompletely offboarded vault component still counted in total assets can be weaponized for share price inflation, and Bonzo Lend ($9.05M) was compromised through a BLS signature verification bypass in the Supra oracle. Both incidents include background, vulnerability details, step-by-step attack breakdown, and actionable security recommendations.

~$800K Lost: Hinkal Double-Spend | BlockSec Weekly

This weekly security report covers 1 notable incident from June 29 to July 5, 2026, with approximately $800K in total losses on Ethereum. The Hinkal shielded-pool protocol was drained through a double-spend attack that likely exploited a flaw in the legacy note format, allowing the attacker to derive multiple nullifiers from a single deposit. The report analyzes the probable circuit-level vulnerability, the attack flow, and broader implications for nullifier-based privacy protocols.

Trace AI: Track Stolen Crypto With an AI Agent | BlockSec

Coming soon — a consumer-facing on-chain investigation agent that turns a single conversation into a complete fund-tracing report.

Crypto Payment Security & Compliance: The Controls to Confirm Before Going Live

BlockSec and NOWPayments built a Crypto Payment Security & Compliance Checklist covering the controls every payment operator should confirm before going live.