2026-08-12
Tier 1
Harmony Protocol
Harmony confirmed it was working with exchanges to stop and freeze funds after reports of an unauthorized mint of roughly 4 billion ONE; the team said it was preparing a patch and evaluating rollback options, while public reporting said ONE fell sharply after the incident.
Global
Harmony Protocol team; exchanges asked to freeze funds
Layer 1 protocol / bridge and token supply security
high confidence
unauthorized token mintprotocol exploit responseexchange freeze requestrollback option under reviewtoken supply integrity failuremarket price shockbridge and validator security diligencecentralized intervention risk
Harmony is included as Tier 1 because the project publicly confirmed a direct adverse protocol response: exchange freeze coordination, patch work and rollback review following an alleged 4B ONE unauthorized mint.
Listing post-mortem use: Use as a direct comparable for listings or integrations exposed to emergency token-supply changes, exchange freeze requests, rollback governance, bridge history or sudden circulating-supply uncertainty.
Source
2026-08-12
Tier 2
tx / XRPL bridge
Fresh reporting said the tx/XRPL bridge was drained of about 198,715.88 XRP after bridge software treated fake deposits as real, enabling the attacker to withdraw real XRP reserves; reports said the bridge remained halted and the operator had filed a report with the FBI.
Global
tx bridge operator; FBI report referenced in media
Cross-chain bridge / XRPL interoperability
medium-high confidence
bridge accounting flawfake deposit recognitionreserve drainbridge haltcross-chain asset backing riskFBI report referencedTHORChain routing and Tornado Cash laundering reportedvalidator signing control weakness
The tx/XRPL bridge is included as Tier 2 because the exploit is named, quantified and operationally adverse, but direct primary-source documentation was not retrieved during this run.
Listing post-mortem use: Use as a bridge due-diligence comparable for projects relying on wrapped XRP, cross-chain reserve attestations, validator-controlled withdrawals or non-native asset listings.
Source
2026-08-12
Tier 1
Goliath Ventures Inc. / Christopher Delgado
The CFTC filed a federal complaint alleging Goliath Ventures and CEO Christopher Delgado ran an approximately $397M Ponzi scheme that fraudulently solicited public funds for crypto asset trading, including bitcoin and ether, while misappropriating all customer funds; the CFTC also noted Delgado pleaded guilty in a parallel criminal case and the SEC filed a related civil action on August 11, 2026.
United States
CFTC; SEC; U.S. Attorney's Office for the Middle District of Florida; U.S. District Court for the Middle District of Florida
Crypto asset trading / investment scheme / digital commodity fraud
high confidence
crypto Ponzi schemecustomer fund misappropriationfalse account statementsguaranteed-return claimsparallel criminal caseSEC civil actionCFTC restitution and penalty claimstrading and registration ban risk
Goliath Ventures is included as Tier 1 because the CFTC confirmed a filed federal complaint over an alleged crypto-asset Ponzi scheme with direct adverse legal consequences and parallel SEC/criminal proceedings.
Listing post-mortem use: Use as a fraud-control comparable when reviewing projects or listing applicants with managed-trading claims, guaranteed returns, off-chain account statements, opaque custody, founder criminal exposure or commingled investor funds.
Source
2026-08-12
Tier 1
Yepbit / Yepbit Exchange
ASIC warned consumers against Yepbit and Yepbit Exchange after receiving multiple investor reports of blocked withdrawals, said Yepbit falsely claimed ASIC had frozen customer funds during regulatory checks, took down several linked websites, and found the platform lacked both an Australian Financial Services Licence and AUSTRAC virtual-asset-service registration.
Australia
Australian Securities and Investments Commission (ASIC); AUSTRAC registration framework referenced
Crypto exchange / online trading platform / retail investment scam infrastructure
medium-high confidence
blocked withdrawalsregulator impersonation or false regulator-freeze claimwebsite takedownunlicensed financial servicesmissing AUSTRAC VASP registrationretail investor scam riskrefund deflection tacticsAustralia crypto licensing risk
Yepbit is included as Tier 1 because ASIC reportedly took direct website-disruption and investor-warning action tied to withdrawal complaints, false regulator-freeze explanations and missing Australian authorisations.
Listing post-mortem use: Use as a due-diligence comparable for exchanges or brokers with Australian user access, unclear licensing, blocked withdrawals, regulator impersonation claims, or domain/network churn after warnings.
Source
2026-08-12
Tier 3
Designated contract markets offering prediction-market/event-contract incentive programs
The CFTC Division of Market Oversight issued an advisory warning that an increasing number of incentive-program filings by DCMs, particularly event-contract products, contain procedural or substantive deficiencies that can impair staff review of notice, terms and core-principle compliance.
United States
CFTC Division of Market Oversight
Prediction markets / market-maker incentives / event-contract compliance
high confidence
deficient rule filingsincentive-program compliance riskmarket-maker rebate scrutinywash-trading riskpre-arranged trading riskevent-contract surveillance gapDCM core-principle compliancesector-level early warning
The CFTC advisory is included as Tier 3 because it is a useful sector-wide early warning for prediction-market market-integrity risk, but it does not name a final enforcement target or impose a direct sanction.
Listing post-mortem use: Use as early-warning context when a listed project relies on prediction-market liquidity, market-maker rebates, incentive farming, event-contract integrations or unexplained volume spikes around rewards programs.
Source
2026-08-11
Tier 2
Polymarket short-duration crypto markets
Fresh reporting summarized research finding 821 accounts that made about $8.2M from likely manipulation of Polymarket five-minute BTC settlement windows by moving Binance spot prices in the final seconds before single-snapshot settlement; Polymarket replaced instant snapshots with TWAP settlement on August 7, 2026.
Global / United States
Stanford University and Singapore Management University researchers; Polymarket; Chainlink Data Streams referenced in reporting
Prediction markets / crypto derivatives / oracle settlement design
medium-high confidence
market manipulationsingle-snapshot settlement riskoracle design weaknessretail loss concentrationcross-venue price impactprediction-market surveillance gapTWAP remediationinstitutional diligence risk
Polymarket is included as Tier 2 because the signal is named, recent, quantified and structurally useful, but it is based on research and media reporting rather than a final regulator or court action.
Listing post-mortem use: Use as market-structure context when evaluating assets or venues exposed to thin settlement windows, manipulable reference prices, oracle design shortcuts or unexplained retail-loss clusters before a listing or venue integration.
Source
2026-08-11
Tier 2
Moonbeam; ICON; Moonriver; SuperRare; Sophon
Binance added GLMR, ICX, MOVR, RARE and SOPH to its Monitoring Tag list after periodic reviews, putting the assets under closer scrutiny and warning they can be delisted if they no longer meet listing criteria; reporting noted notable 24h price declines for MOVR, GLMR, RARE and ICX after the announcement.
Global
Binance listing review process
Exchange-listed tokens / Layer 1 and application tokens / NFT and infrastructure assets
medium-high confidence
possible delisting riskexchange monitoring tagliquidity risklisting-standard reviewproject migration and shutdown contexttoken volatilityholder disclosure riskcentralized venue access risk
The five-token Binance monitoring action is included as Tier 2 because it is a named, exchange-driven negative signal with clear listing-friction and liquidity-risk implications, but it is not yet a final delisting.
Listing post-mortem use: Use as direct exchange-listing-friction context when reviewing assets with prior monitoring tags, migration deadlines, chain wind-downs, low liquidity or unexplained post-review selloffs before listing or relisting decisions.
Source
2026-08-11
Tier 2
KalshiEX LLC
The CFTC exercised emergency authority after KalshiEX notified it of a market emergency triggered by New York Attorney General litigation seeking a temporary restraining order against Kalshi offering event contracts nationwide and more than $36B in damages; the CFTC ordered Kalshi to continue operating under CEA core principles.
United States / New York
CFTC; New York Attorney General; KalshiEX LLC
Prediction markets / event-contract derivatives / crypto-adjacent market structure
high confidence
state-federal jurisdiction conflictmarket emergency noticetemporary restraining order risklarge damages claimevent-contract legal classificationprediction-market continuity riskstate gaming-law challengeregulatory fragmentation
Kalshi is included as Tier 2 because the CFTC confirmed a market-emergency order tied to a named lawsuit seeking severe operational and damages consequences, even though the platform is crypto-adjacent rather than a token issuer.
Listing post-mortem use: Use as jurisdiction-radar context when reviewing prediction-market integrations, tokenized event-contract exposure, platform access controls or crypto projects whose liquidity depends on US event-contract legal stability.
Source
2026-08-10
Tier 1
BTCPay Server / LND deployments
BTCPay Server confirmed attackers exploited a critical vulnerability in versions prior to 2.4.2 that could allow unauthenticated remote access to LND .macaroon credential files, enabling control of LND nodes and movement of funds; the project said users were affected and funds were stolen, and version 2.4.2 temporarily removes public LND API access on Docker deployments.
Global
BTCPay Server project
Bitcoin payment infrastructure / Lightning node operations
high confidence
critical security vulnerabilityLND credential exposurestolen fundsremote unauthenticated attackerLightning node takeovermerchant payment infrastructuretemporary wallet connectivity restrictionemergency upgrade requirement
BTCPay Server is included as Tier 1 because the project officially confirmed exploitation, affected users, stolen funds, emergency upgrade requirements and a direct temporary restriction on public LND API access.
Listing post-mortem use: Use as infrastructure-risk context when reviewing projects or merchants that rely on self-hosted Lightning payment stacks, exposed LND APIs, hot-wallet flows or delayed security-patch operations.
Source
2026-08-10
Tier 2
Gannon Ken Van Dyke / Polymarket event contracts
A federal judge reportedly stayed the CFTC civil case against active-duty U.S. Army Special Forces master sergeant Gannon Ken Van Dyke while the related DOJ criminal case proceeds; authorities allege he used confidential government information to earn about $409,881 from 13 Venezuela-related Polymarket trades.
United States
U.S. District Court; CFTC; U.S. Department of Justice
Prediction markets / event-contract compliance / classified-information trading risk
medium-high confidence
prediction-market insider tradingclassified information misuse allegationCFTC civil enforcement stayedDOJ criminal prosecutionevent-contract legal classification disputeVPN access controlscrypto proceeds movementsurveillance and wallet-referral pressure
The Van Dyke matter is included as Tier 2 because the fresh court stay is a credible judicial development in a named prediction-market insider-trading case, but it does not resolve liability or impose a final platform-level sanction.
Listing post-mortem use: Use as prediction-market regulatory context when a project, asset or venue depends on event-contract liquidity, politically sensitive markets, offshore access controls or unresolved CFTC/DOJ classification theories.
Source
2026-08-09
Tier 1
Cryptolink Pty Ltd
AUSTRAC suspended Cryptolink's VASP registration for three months from Sunday 9 August 2026 and said the company is no longer allowed to operate its 96 cryptocurrency ATMs after reporting failures and unanswered information requests.
Australia
AUSTRAC
Crypto ATM / VASP / cash-to-crypto rails
high confidence
AML/CTF reporting failurethreshold transaction reportscrypto ATM shutdownVASP registration suspensioncash-to-crypto high-risk transactionsenforceable undertaking breach follow-upregulatory monitoring
Cryptolink is included as Tier 1 because AUSTRAC officially suspended its VASP registration and ordered its 96 crypto ATMs offline after threshold transaction reporting failures and non-response to a regulator information request.
Listing post-mortem use: Use as a cash-rail and venue-access warning when reviewing assets, issuers or market makers dependent on crypto ATM distribution, high-cash retail flow or Australian VASP partners with AML reporting weaknesses.
Source
2026-08-09
Tier 2
Coinsbuy
Multiple crypto media reports and security-monitoring references said wallets linked to Coinsbuy were drained of more than $7.9M across Ethereum and TRON around 13:00 UTC on August 9, with stolen funds routed through swap/exchange venues and partly converted into Monero; reports said ChangeNOW helped freeze a six-figure amount and Coinsbuy temporarily paused deposits and withdrawals.
Global
PeckShield monitoring; Specter on-chain analysis; Coinsbuy statements reported by media
Crypto payment processor / wallet security / cross-chain laundering
medium confidence
wallet draincross-chain theftMonero launderingexchange and swap routingtemporary deposits and withdrawals pausepartner-assisted fund freezepayment-processor custody riskon-chain forensic monitoring
Coinsbuy is included as Tier 2 because the incident is named, recent and structurally useful for wallet-security and laundering-path monitoring, but primary company or law-enforcement documentation was not directly available in this run.
Listing post-mortem use: Use as comparable context for projects whose liquidity, treasury operations, merchant-payment rails or market makers depend on small payment processors, instant-swap venues, TRON/ETH hot wallets or weak post-incident disclosure.
Source
2026-08-08
Tier 1
Bybit Technology Limited v. Democratic People's Republic of Korea, DPRK Reconnaissance General Bureau, Lazarus Group and John Doe defendants
Bybit announced a U.S. civil RICO lawsuit against DPRK-linked Lazarus actors and said it secured a preliminary injunction freezing identified stolen assets tied to the February 2025 Bybit hack, with about $30.5M frozen across more than 28 exchanges and custodians and about $48.4M recovered.
United States / DPRK / Global
U.S. District Court for the District of Columbia; Bybit; FBI cooperation cited by Bybit
Centralized exchange security / state-sponsored cybercrime / asset recovery
high confidence
state-sponsored cybercrimecourt-ordered asset freezeexchange cold-wallet hackLazarus laundering networkcross-exchange custody freezecivil RICO recovery litigationblockchain forensicsETH theft proceeds
Bybit is included as Tier 1 because the company announced a U.S. federal civil action against DPRK/Lazarus-linked defendants and a preliminary injunction freezing traceable stolen assets, corroborated by a CourtListener docket for Bybit Technology Limited v. Democratic People's Republic of Korea.
Listing post-mortem use: Use as a precedent for listing and venue-risk reviews where a token, exchange, custodian, bridge or OTC route is exposed to hacked-asset flows, Lazarus attribution, court-preservation orders or post-hack recovery claims.
Source
2026-08-07
Tier 1
Binance spot pairs QNT/BTC, RPL/USDC, SIGN/BNB and SKL/USDC
Binance scheduled removal of QNT/BTC, RPL/USDC, SIGN/BNB and SKL/USDC spot trading pairs on August 7, 2026 after a periodic liquidity and volume review.
Global
Binance
Exchange spot markets / liquidity review
high confidence
exchange delistingspot liquiditymarket-access frictiontrading-pair concentration
Binance pair-level delisting is a structured adverse market-access signal because it removes specific quote routes after liquidity and volume review without fully delisting the underlying assets.
Listing post-mortem use: Use as a liquidity-friction marker when reviewing tokens with shrinking quote-pair breadth, weak volume, or dependence on a small number of exchange routes.
Source
2026-08-07
Tier 1
Aban Tether
OFAC designated Iran-based digital asset exchange Aban Tether, stating it processed millions of dollars of transactions involving previously designated Iranian exchanges including Nobitex, Wallex, Bitpin and Ramzinex, and designated it for operating in the Iranian financial sector.
Iran / United States / Global
U.S. Treasury OFAC; IRS-CI
Iranian digital asset exchange / sanctions evasion / exchange counterparty risk
high confidence
OFAC SDN designationIran sanctions exposuredesignated exchange counterparty flowfinancial-sector sanctionsblocked-property reportingsecondary sanctions riskstablecoin transaction monitoring
Aban Tether is included as Tier 1 because OFAC officially designated the Iran-based exchange for operating in Iran financial-sector activity and for transactions involving already designated Iranian crypto exchanges.
Listing post-mortem use: Use as sanctions-network context when a listed asset, market maker, liquidity venue, or issuer treasury has exposure to Iranian exchange flows, stablecoin settlement routes, or counterparties later connected to OFAC-designated VASPs.
Source
2026-08-06
Tier 3
EU crypto users migrating from unauthorised CASPs
European regulators reportedly observed fraudsters impersonating regulators and licensed crypto firms to steal assets from customers moving funds after the MiCA licensing transition deadline.
EU
ESMA; AMF; European national competent authorities
MiCA transition / consumer protection / scam infrastructure
medium confidence
impersonation scamMiCA transitionunauthorised CASP wind-downasset migrationconsumer protection
The MiCA transition created an early-warning scam surface: fraudsters can exploit legitimate provider exits and regulator registers to redirect customers to fake asset-transfer channels.
Listing post-mortem use: Use as jurisdiction-risk context when a token depends on EU retail distribution through smaller CASPs or faces customer-migration confusion after MiCA authorisation failures.
Source
2026-08-06
Tier 1
Coinbase LSETH-ETH, MINA-EUR, GRT-GBP, MASK-GBP, CHZ-USDT and CRO-USDT trading pairs
Coinbase Markets was reported to have moved five pairs to limit-only mode and to cease trading for LSETH-ETH, MINA-EUR, GRT-GBP, MASK-GBP, CHZ-USDT and CRO-USDT on August 6, 2026 to improve market health and concentrate liquidity.
Global / United States
Coinbase Markets
Centralized exchange spot market access / trading-pair liquidity
medium confidence
trading-pair delistingmarket-order restrictionliquidity concentrationfiat/stablecoin quote-pair lossexchange market-health reviewsecondary-market access friction
Coinbase pair removals are included as Tier 1 because trading on named pairs was reported to cease on a specific date with limit-only restrictions already applied, creating a direct adverse market-access consequence despite continued support for the assets.
Listing post-mortem use: Use as a pair-level market-access precedent when a token remains listed but loses specific fiat, stablecoin, or ETH quote routes after exchange market-health review.
Source
2026-08-05
Tier 1
Step App
Step App announced all services will wind down by August 21, 2026 and told users to unstake locked tokens and manage exchange positions; FITFI exchange access was already shrinking through KuCoin and Bithumb delisting deadlines.
Global
Step App; KuCoin; Bithumb
Move-to-earn / consumer crypto application
high confidence
project shutdownexchange delistingwithdrawal deadlineconsumer app wind-downtoken utility collapse
Step App became a confirmed adverse record after the project itself announced a full service shutdown and instructed users to unstake tokens and manage exchange positions before the deadline.
Listing post-mortem use: Use as a post-listing failure case for consumer reward tokens where active-user retention, app continuity, and exchange withdrawal deadlines define exit risk.
Source
2026-08-05
Tier 2
RedotPay / Binance Pay and Binance-affiliated entities
Binance-affiliated entities sued RedotPay and its founders, alleging RedotPay diverted roughly 470,000 Binance users and allowed Binance Pay funds to be used without segregation for prohibited RedotPay card top-ups, claiming about $472.8M in losses; RedotPay rejected the allegations.
Hong Kong / Singapore / Global
Hong Kong court filing reported by Bloomberg; Singapore hearing list context
Crypto payments / stablecoin cards / exchange payment rails
medium-high confidence
commercial lawsuitfunds segregation disputestablecoin card railspartner-channel diversionuser-base misappropriation allegationIPO readiness riskcross-border litigation
RedotPay is included as Tier 2 because the signal is a credible, named, cross-border lawsuit with clear funds-segregation and partner-channel risk vectors, but the allegations are contested and no final judicial consequence has been verified.
Listing post-mortem use: Use as a counterparty-risk analogue when reviewing crypto payment-card listings or investments that relied on exchange partnerships, partner user acquisition, or commingled stablecoin payment flows.
Source
2026-08-05
Tier 1
Shelbit Exchange / SHPS Shelbit / Shelbit General Trading LLC / Siavash Kayvanpour network
OFAC designated Shelbit-linked entities and operator Siavash Kayvanpour on August 7, 2026, alleging the network helped Iran-linked actors and IRGC-connected flows move digital assets through Shelbit Exchange; Treasury also cited VARA enforcement actions against Shelbit General Trading in January 2025 and July 2026 while the business remained active.
UAE / Iran / Global
U.S. Treasury OFAC; IRS-CI; Dubai VARA
Unlicensed exchange / sanctions evasion / offshore gambling crypto rails
high confidence
OFAC SDN designationIran sanctions exposureIRGC-linked digital asset flowsunlicensed exchange operationsAML/CFT control failureoffshore gambling proceedsblocked-property reportingdownstream exchange flow contaminationVARA enforcement history
Shelbit is upgraded to Tier 1 because OFAC officially designated Shelbit-linked entities and the Kayvanpour network, cited IRGC-linked digital-asset flows and VARA enforcement history, and created direct blocked-property and sanctions-compliance consequences.
Listing post-mortem use: Use as a Tier 1 AML/KYT precedent when reviewing listings or liquidity support that touched opaque offshore venues, gambling-affiliated flow sources, UAE-facing VASP entities, Iran-linked counterparties, or wallets later connected to OFAC-designated exchange networks.
Source
2026-08-05
Tier 1
Few and Far Limited / Taj Tarsha
The U.S. Department of Justice announced that Few and Far Limited founder Taj Tarsha was charged with fraud, creating a confirmed criminal-prosecution signal for an NFT startup and its founder-risk profile.
United States
U.S. Department of Justice / SDNY / FBI
NFT marketplace / startup fundraising / founder conduct
high confidence
founder fraud chargecriminal prosecutionNFT fundraising riskinvestor deceptiongovernance failurelaw-enforcement action
Few and Far is included as Tier 1 because the DOJ publicly announced a criminal fraud charge against its founder, giving the database a confirmed judicial adverse signal tied to NFT startup governance and founder due diligence.
Listing post-mortem use: Use as a founder-risk analogue when a listed NFT, marketplace, or early-stage token project later faces fraud allegations tied to fundraising, user traction, treasury use, or executive representations.
Source
2026-08-03
Tier 2
MOKE token and MokeLPManager
Crypto Times reported a suspected MOKE exploit on BNB Chain with an estimated $907,700 loss, involving PancakeSwap V2 liquidity pools, WBNB flows, LP token burns and the MokeLPManager contract; root cause remains unconfirmed.
BNB Chain / Global
TenArmor on-chain security alert / public blockchain data
DeFi / BNB Chain liquidity pools / meme-token infrastructure
medium confidence
suspected exploitliquidity-pool manipulationBNB Chain smart-contract riskPancakeSwap V2 LP exposureunclear root causethin-token incident response gap
MOKE is included as Tier 2 because it is a named token with a concrete chain, suspected exploit vector, estimated loss, implicated LP-manager contract and identifiable source trail, but there is no public project post-mortem or final technical attribution yet.
Listing post-mortem use: Use as a post-listing risk marker for tokens whose liquidity rests on lightly documented LP-manager contracts, thin PancakeSwap pools, or delayed incident disclosure after suspicious on-chain movement.
Source
2026-08-03
Tier 1
Across Protocol, Hashflow, PIVX, Vulcan Forged PYR, Vanar and Viction
Binance will delist ACX, HFT, PIVX, PYR, VANRY and VIC from spot trading on 2026-08-17, with futures, margin, loan, earn, pay, pool, convert and withdrawal deadlines staged through August and October.
Global
Binance
Centralized exchange listings / spot and derivatives market access
medium-high confidence
exchange delistingspot market access lossforced futures settlementmargin and loan closurewithdrawal deadline riskmonitoring tag escalationtoken migration support gap
Binance is included as a Tier 1 negative-intel row because the reported announcement creates direct adverse market-access consequences for six named tokens: futures settlement on August 7, service removals across multiple products, spot delisting on August 17, and withdrawal deadlines through October 17. The row is marked medium-high confidence because the accessible primary Binance page was not fully extractable during this run, while crypto.news cites the Binance announcement and provides a detailed timetable.
Listing post-mortem use: Use when reviewing tokens that moved from monitoring tags, project wind-down or migration uncertainty into full exchange removal, especially where derivatives settlement and withdrawal deadlines amplified post-listing liquidity loss.
Source
2026-08-03
Tier 1
Hashdex Bitcoin ETF (NYSE Arca: DEFI)
Hashdex announced it will close and liquidate the Hashdex Bitcoin ETF, stop accepting creation orders after August 17, 2026, delist shares from NYSE Arca after the last trading day, and pay a cash liquidating distribution around August 28 after selling remaining bitcoin holdings.
United States
Hashdex Asset Management Ltd. / NYSE Arca fund listing context
Crypto ETF / regulated fund products / listed Bitcoin exposure
high confidence
ETF liquidationfund delistingweak assets under managementtrading-liquidity pressureforced bitcoin liquidationcash distribution timing riskproduct-line rationalization
Hashdex Bitcoin ETF is included as Tier 1 because the sponsor itself confirmed a dated fund closure, creation-order stop, NYSE Arca delisting, remaining bitcoin liquidation and cash distribution timetable, creating direct adverse market-access consequences for the listed crypto fund product.
Listing post-mortem use: Use as a post-listing benchmark for ETF/ETP products whose listing thesis depended on sustained AUM, secondary-market liquidity, low operating-cost drag, and differentiated product positioning against larger issuers.
Source
2026-08-01
Tier 3
Unauthorised EU-facing crypto-asset service providers
ESMA highlighted expectations that unauthorised crypto-asset service providers must wind down activities in an orderly way and protect investors after the MiCA transitional period ended on 1 July 2026.
European Union
European Securities and Markets Authority (ESMA)
Crypto regulation / CASP licensing / EU market access
high confidence
unauthorised CASP market-access riskorderly wind-down obligationEU investor protection riskMiCA transition enforcement pressureexchange and wallet service continuity risklisting venue jurisdiction risk
ESMA is included as a Tier 3 watchlist row because its official public statement turns the post-MiCA transition gap into an explicit wind-down and investor-protection expectation for unauthorised CASPs. No single project is named, but the signal is useful for longitudinal EU market-access monitoring and listing post-mortems.
Listing post-mortem use: Use as jurisdiction radar when reviewing listings whose liquidity, user acquisition, custody access, or compliance narrative depended on European retail availability through unauthorised or unclear-status CASPs.
Source
2026-08-01
Tier 2
CoinEx
Crypto.news reported that WSJ/TRM-linked analysis traced more than $3.84 billion in Iran-linked flows through CoinEx since 2019, including activity connected to Central Bank of Iran wallets and North Korea-related Bybit-hack proceeds, while CoinEx denied knowingly facilitating sanctioned activity and said it strengthened sanctions controls.
United States / Iran / Hong Kong
US sanctions authorities and blockchain-forensics reporting cited by crypto.news
Centralized exchanges / sanctions compliance / AML transaction monitoring
medium-high confidence
Iran sanctions exposureoffshore exchange AML controlshigh-risk flow concentrationNorth Korea hack proceeds linkagereactive compliance remediationstablecoin freeze and seizure risk
CoinEx is included as a Tier 2 negative-intel row because the current crypto.news synthesis, citing WSJ/TRM-linked analysis, names the exchange, describes a $3.84B Iran-linked flow pattern, identifies sanctions and hack-proceeds vectors, and records CoinEx denial/remediation claims. It is not Tier 1 because no final enforcement action against CoinEx was verified in this run.
Listing post-mortem use: Use when reviewing listings or liquidity programs that relied on CoinEx access, offshore CEX market depth, lax-KYC routing, or counterparties later exposed to Iran/North Korea sanctions-flow allegations.
Source
2026-08-01
Tier 1
Virtual currency kiosk operators in Minnesota
Minnesota's new law bans virtual currency kiosks from operating in the state beginning August 1, 2026, requires public-facing kiosks to be removed by December 31, 2026, and requires affected kiosk-only operators to pay out customer money or virtual currency unless customers retain another access path.
US / Minnesota
Minnesota Legislature / Minnesota House of Representatives
Crypto ATMs / retail fiat on-ramps / scam infrastructure controls
high confidence
statewide crypto ATM banretail on-ramp shutdownpublic kiosk removal obligationcustomer payout obligationscam and elder-fraud controlsstate-level product restrictionphysical cash-to-crypto access loss
Minnesota is included as Tier 1 because an official legislative summary confirms a statewide virtual-currency kiosk ban effective August 1, 2026, with direct adverse consequences for operators: operation shutdown, public kiosk removal, and customer payout obligations. The row is sector-level rather than tied to a single token, but it is structured for retail on-ramp and scam-infrastructure monitoring.
Listing post-mortem use: Use when reviewing assets, wallet funnels, or retail-liquidity programs that depended on cash-to-crypto kiosk access, high-risk consumer acquisition, or physical on-ramp density in US state markets.
Source
2026-07-30
Tier 2
Coinkite COLDCARD hardware wallet firmware
Coinkite warned that COLDCARD seeds generated on Mk3 firmware 4.0.1 and later may be at risk, and that Mk4, Mk5, and Q seeds generated before fixed firmware releases had about 72 bits of entropy rather than the expected 128 bits.
Global
Coinkite official security advisory
Bitcoin self-custody / hardware wallets / key-management security
high confidence
weak seed entropyhardware wallet firmware flawuser fund migration riskBitcoin self-custody compromise risksupply-chain security due diligencecustody-infrastructure vendor risk
Coinkite is included because its official advisory confirms a seed-generation entropy flaw affecting COLDCARD Mk3 and some Mk4/Mk5/Q firmware states, with direct user-fund migration implications. Media reports and chain researchers associated the issue with large BTC drains, but the database row keeps the confirmed adverse signal anchored to the official advisory.
Listing post-mortem use: Use when reviewing wallet, custody, Bitcoin treasury, or security-tool listings where diligence relied on hardware-wallet reputation without firmware-version, entropy-generation, or user-migration risk checks.
Source
2026-07-29
Tier 2
Crypto DAO Pro token contract
Crypto Times reported that Blockaid flagged an access-control exploit in Crypto DAO's Pro token contract that transferred approximately $8.2M in USDT through a publicly callable vault function.
Global / BNB Chain
Blockaid / on-chain security monitors
BNB Chain DeFi / DAO token / vault contract security
medium confidence
access-control bugvault-drain exploitBNB Chain contract riskunaudited-contract riskstablecoin losson-chain incident response
Crypto DAO is included as Tier 2 because the exploit has a named protocol, chain, loss estimate, affected asset, and clear risk vector, but current verification is based on media citing security monitors rather than a project post-mortem.
Listing post-mortem use: Use when reviewing newly listed DAO or BNB Chain tokens where contract ownership, privileged vault functions, and audit status were underweighted before market access expanded.
Source
2026-07-29
Tier 2
LULA token on BNB Chain
Security monitors reportedly flagged a LULA reserve-manipulation attack using the recycle() function and a large flash loan, draining about $578.1K from a PancakeSwap V2 liquidity pool.
Global / BNB Chain
TenArmor / BlockSec Phalcon / CertiK security monitors
BNB Chain token / PancakeSwap liquidity / memecoin-style contract risk
medium confidence
reserve manipulationflash-loan exploitprivileged token functionPancakeSwap liquidity drainBNB Chain contract risklong-tail-token market integrity
LULA is included as Tier 2 because the incident has a named token, chain, estimated loss, exploit mechanism, and security-firm attribution, but no project-authored post-mortem was verified during this run.
Listing post-mortem use: Use when assessing long-tail token listings that had opaque tokenomics, privileged recycling functions, or PancakeSwap-dependent liquidity before broader venue access.
Source
2026-07-29
Tier 2
Lazy Summer Protocol vaults
A Lazy Summer governance RFC proposed removing every remaining Ark from all vaults across networks, leaving each vault as a buffer-only ERC-4626 withdrawal shell after a July 6 exploit and before the Summer.fi UI sunset scheduled for 31 August 2026.
Global
Lazy Summer DAO governance forum
DeFi yield vaults / DAO governance / multi-chain risk management
high confidence
post-exploit vault neutralizationwithdrawal-only product statestrategy offboardingDAO governance execution riskUI sunset riskmulti-chain vault exposure
Lazy Summer is included because its official governance forum records a concrete post-exploit plan to neutralize vaults into withdrawal-only shells across several networks.
Listing post-mortem use: Use for post-mortems on DeFi vault or yield-token listings where the product state changed from yield generation to withdrawal-only redemption after exploit remediation.
Source
2026-07-28
Tier 2
Altura Vault
Altura said a bank temporarily restricted the account holding funds intended for a fiat-to-USDT OTC conversion, delaying the final Vault redemption phase after the protocol had already begun an orderly wind-down.
GB / Global
Unidentified banking institution / Altura official statement
DeFi yield / RWA liquidation / stablecoin vault wind-down
high confidence
banking access lossredemption delayRWA liquidation dependencyOTC conversion dependencystablecoin vault wind-downcommunity-channel pause
Altura is included because an official project statement confirms a bank-account restriction that directly delayed user redemptions during a DeFi/RWA vault wind-down.
Listing post-mortem use: Use when reviewing RWA or stablecoin-vault listings whose liquidity promise relied on banked fiat rails, OTC conversion partners, or management-controlled off-chain liquidation steps.
Source
2026-07-27
Tier 3
Crypto platforms and issuers subject to U.S. state enforcement
New York Attorney General Letitia James urged Congress to strengthen crypto oversight, warning that the CLARITY Act could weaken state enforcement while NY crypto scam complaints tripled over three years and nearly $500M was reported to the office over five years.
US / New York
New York Attorney General
Crypto policy / consumer protection / state enforcement
high confidence
state enforcement riskconsumer scam complaintsfederal preemption concerncrypto legislation uncertaintyplatform oversight debatepolicy hearing signaljurisdictional risk shift
The NY AG warning is included as Tier 3 watchlist intelligence because it is official, current, and useful for jurisdiction-radar and longitudinal state-enforcement monitoring, but it is not a named enforcement action against a specific crypto project.
Listing post-mortem use: Use as jurisdictional context when reviewing U.S.-facing listings, consumer-token campaigns, or platform launches that relied on assumptions about federal preemption of state crypto enforcement.
Source
2026-07-26
Tier 1
BitMart exchange
BitMart announced an orderly cessation of operations, stopped new registrations, deposits, and orders on July 26 UTC, and secondary on-chain monitors reported withdrawal delays and reduced liquid wallet balances as users were instructed to remove assets before the platform shuts down.
Global / AU licensing context
BitMart / Nansen / Lookonchain / on-chain monitors
Centralized exchange / custody / market access / venue continuity
medium-high confidence
exchange wind-downwithdrawal delay riskdeposit and order haltwallet liquidity stresscustomer exit rushvenue-continuity riskrecent licensing-growth reversal
BitMart is included as Tier 1 because the exchange cessation is a confirmed direct adverse consequence affecting registrations, deposits, orders, trading timetable, and eventual platform closure. Withdrawal-stress details remain secondary and are treated as risk amplification, not as a proven insolvency finding.
Listing post-mortem use: Use when reviewing tokens whose exchange access, market-maker inventory, or retail liquidity depended on BitMart spot or futures markets, especially if withdrawal delays or wallet-liquidity stress affected post-listing exits.
Source
2026-07-26
Tier 1
AERGOUSDT perpetual contract on KuCoin Futures
KuCoin Futures announced scheduled delisting of the AERGOUSDT perpetual contract on July 28, 2026 UTC, with new-position restrictions before delisting.
Global
KuCoin Futures
Centralized exchange derivatives / token migration listing risk
medium-high confidence
exchange delistingperpetual futures liquidity contractionforced position managementmarket-access frictiontoken migration riskderivatives support contraction
KuCoin Futures surfaced an official announcement in search results stating that it will delist the AERGOUSDT perpetual contract at 07:00 UTC on July 28, 2026. The live page returned a regional access restriction during collection, so the row is classified with medium-high confidence from an official exchange search snippet and preserved as a confirmed exchange action for derivatives-listing risk tracking.
Listing post-mortem use: Use as a comparable when reviewing tokens whose post-listing support deteriorates around token swaps, ticker migrations, low-liquidity futures, or exchange product cleanups before spot delisting decisions.
Source
2026-07-26
Tier 1
WEMIX$ stablecoin system and WEMIX3.0 bridge infrastructure
WEMIX disclosed unauthorized WEMIX$ minting after contract control was compromised, with reports of about 5.22M WEMIX$ minted and 724,198 USDC.e moved while bridges, liquidity pools, PNIX DEX modules, NFT functions, and game-linked features were temporarily suspended.
Global / WEMIX3.0
WEMIX Foundation / ecosystem incident response
Layer-1 ecosystem / stablecoin module / bridges / game-chain infrastructure
high confidence
admin privilege compromiseunauthorized stablecoin mintingbridge suspensionliquidity-pool suspensioncross-chain laundering pathexchange freeze requestsgame-chain service restrictions
WEMIX is included as Tier 1 because the signal includes a project security update and direct adverse consequences: unauthorized minting, cross-chain movement of proceeds, suspension of bridges and pools, and restrictions across DEX, NFT, and game-linked infrastructure. The loss figure is smaller than many bridge exploits, but the control-plane blast radius is high.
Listing post-mortem use: Use when assessing assets whose liquidity and user activity depend on ecosystem stablecoins, bridge routing, game integrations, and admin-controlled service modules that can be frozen after contract compromise.
Source
2026-07-26
Tier 1
Storj Labs
Storj Labs announced voluntary Chapter 11 financial restructuring to resolve legacy liabilities while services continue, with media reporting the proceeding as case 5:26-bk-00512 and STORJ token selling pressure after the filing.
US
U.S. Bankruptcy Court for the Northern District of West Virginia / Storj Labs
Decentralized storage / public token / corporate restructuring
high confidence
Chapter 11 restructuringlegacy liabilitiestoken price drawdownservice-continuity riskcorporate solvency pressurecustomer/vendor uncertaintytoken-equity separation risk
Storj Labs is included as Tier 1 because a voluntary Chapter 11 filing is a confirmed judicial restructuring with direct adverse corporate and market consequences. The company states services are expected to continue, so the row should be used as solvency and governance risk rather than evidence of protocol shutdown.
Listing post-mortem use: Use when reviewing tokens where listed-asset performance depends on a corporate sponsor whose balance sheet, liabilities, or restructuring process can affect market confidence despite protocol continuity claims.
Source
2026-07-25
Tier 2
Triple-A hot wallet infrastructure
Security researchers reported that Triple-A-linked hot wallets were drained of roughly $9.3M-$9.7M across multiple chains, with stolen assets swapped, bridged, and consolidated into ETH on Ethereum.
SG / Global
PeckShield / Specter on-chain investigators
Crypto payments / merchant settlement / hot-wallet custody
high confidence
hot-wallet compromisemulti-chain asset drainpayments infrastructure riskmerchant settlement riskcross-chain laundering pathno official incident report foundpreliminary on-chain estimates
Crypto Times, CoinPedia, PeckShield-linked alerts, and Specter reporting indicate that Triple-A-linked hot wallets were drained across TRON, Ethereum, TON, Solana and other networks, then bridged and consolidated into an Ethereum wallet holding about 5,227 ETH. No Triple-A official incident report was found during the run, so this is classified as Tier 2 high-confidence security-firm-attributed negative intelligence.
Listing post-mortem use: Use when analyzing projects, exchanges, or merchant-payment tokens whose adoption story depends on payment gateway integrations, stablecoin settlement rails, or custodial hot-wallet operators with limited public controls.
Source
2026-07-24
Tier 2
Binance monitoring-tag review for Across Protocol, Lisk, and Stacks
Binance reportedly added ACX, LSK, and STX to its Monitoring Tag list, placing the assets under closer periodic review for volatility, liquidity, development activity, security, communication, tokenomics, and operational risk, with possible delisting if listing criteria are no longer met.
Global
Binance
Centralized exchange listing quality / token market structure
medium-high confidence
listing frictionmonitoring tagpotential delisting riskliquidity reviewdevelopment activity reviewtokenomics reviewmarket pressure
Binance ACX/LSK/STX monitoring is included as Tier 2 because it is a named exchange listing-friction signal with direct review consequences but no immediate trading suspension. Confidence is medium-high because the official Binance support notice was not directly retrieved during the run, though crypto.news reported specific criteria and effective date.
Listing post-mortem use: Use as a direct listing post-mortem input for tokens where Binance monitoring tags preceded liquidity drawdown, market-maker repricing, exchange concentration risk, or delisting decisions.
Source
2026-07-24
Tier 3
Crypto holders, custody operators, and wallet providers exposed to physical coercion
CertiK reported 52 verified crypto wrench-attack incidents in H1 2026, up 33.3% year over year, with recorded losses and ransom demands around $124.1M and Europe, especially France, concentrated in the visible dataset.
Global / Europe / FR
CertiK Intel3D
Physical security / custody / wallet controls
high confidence
physical coercionwrench attackhome invasionkidnappingransom demandprivate-key compromise under duressidentity-data leakagecustody-design risk
CertiK Intel3D reported that verified H1 2026 crypto wrench attacks rose to 52 incidents from 39 a year earlier, while recorded financial exposure increased to roughly $124.1M from about $10.5M. Because the signal is sector-level and not a project-specific enforcement or exploit, it is included as Tier 3 watchlist intelligence for custody and signer-risk monitoring.
Listing post-mortem use: Use as sector context when evaluating treasury-signing arrangements, founder-controlled wallets, wallet-provider controls, exchange data-leak exposure, and projects whose token treasury can be moved by a small number of identifiable people.
Source
2026-07-24
Tier 2
Lien Finance
SlowMist reported that Lien Finance lost roughly 542,144.63 USDC after attackers exploited bond-token exchange validation and pricing logic to mint unsupported assets and drain USDC liquidity.
Global / Ethereum
SlowMist / Defimon Alerts
Ethereum DeFi / structured bond tokens / OTC liquidity pools
high confidence
DeFi exploitbond-token validation flawunsupported synthetic asset mintingOTC pool pricing failurepermissionless bond registrationUSDC liquidity drainno official post-mortem found
Lien Finance is included as Tier 2 high-confidence negative intelligence because SlowMist identified a concrete 542,144.63 USDC loss tied to exchangeEquivalentBonds validation weaknesses, while Defimon Alerts described related OTC-pool pricing and permissionless bond-registration issues. It is not Tier 1 only because no direct Lien Finance official post-mortem or protocol action was verified during this run.
Listing post-mortem use: Use when reviewing listings or integrations for structured DeFi protocols that create synthetic bond-like assets and depend on internal pricing functions rather than deep external-market pricing.
Source
2026-07-24
Tier 1
Zilliqa native Ledger app and Upbit ZIL markets
Upbit placed ZIL under cautionary status for KRW and BTC markets while deposits and withdrawals remained suspended after Zilliqa disclosed a Ledger app nonce-generation flaw that can expose private keys after roughly five native transactions.
KR / Global
Upbit / Zilliqa
Layer-1 / hardware-wallet signing / centralized exchange market access
high confidence
exchange cautionary assetdeposit and withdrawal suspensionLedger app signing flawprivate-key recovery risknative transaction haltmarket-access reviewrecovery-plan uncertainty
Zilliqa/Upbit is included as a new Tier 1 row because it adds a distinct exchange-market consequence to the July 20 ZIL theft/transfer-halt row: Upbit placed ZIL under cautionary status across KRW and BTC markets while deposits and withdrawals remained suspended after Zilliqa disclosed the Ledger app signing flaw and native transaction halt.
Listing post-mortem use: Use when reviewing tokens whose exchange liquidity survived spot trading but settlement reliability, custody safety, and market-maker inventory movement were impaired by deposit-withdrawal suspensions and cautionary designations.
Source
2026-07-24
Tier 1
Bitkub Online Co. Ltd. / Bitkub Exchange
Thailand SEC filed a criminal complaint alleging Bitkub concealed or falsely reported a 2021 cyberattack that caused roughly THB 1.7B / $47M-$51M in losses, escalating a historical exchange hack into active regulatory and criminal process.
TH
Thailand Securities and Exchange Commission / Economic Crime Suppression Division
Centralized exchange / cybersecurity disclosure / VASP supervision
medium-high confidence
criminal complaintregulatory disclosure failureexchange cybersecurity incidentfalse reporting allegationcustomer asset lossmanagement accountabilityThailand VASP supervision
Multiple July 27 news wires reported that Thailand SEC filed a criminal complaint against Bitkub Online over alleged concealment or false reporting tied to a 2021 hack of roughly THB 1.7B / $47M-$51M. The official SEC domain was blocked during collection, so confidence is capped at medium-high, but the named regulator, exchange, alleged loss, jurisdiction, and criminal-referral consequence are sufficient for Tier 1 regulatory negative intelligence.
Listing post-mortem use: Use when reviewing Thai or APAC exchange listings where liquidity quality depended on a venue later accused of underreporting cyber losses or misrepresenting operational resilience.
Source
2026-07-24
Tier 2
Apple App Store / fake Sparrow Wallet applications
Three users filed a federal lawsuit alleging fake Sparrow Wallet apps distributed through Apple App Store captured seed phrases and caused about $1.835M in Bitcoin losses before Apple removed impersonating apps and terminated linked developer accounts.
US
U.S. District Court for the Northern District of California
Wallet distribution / scam infrastructure / app marketplace controls
high confidence
fake wallet appseed phrase theftapp marketplace vetting riskconsumer lawsuitBitcoin lossbrand impersonationdistribution-channel scam infrastructure
The Apple/Sparrow case is included as Tier 2 scam-infrastructure litigation because it has a named court, named platform, named impersonated wallet, alleged BTC loss amount, and a clear seed-phrase theft vector. Claims remain untested, but the distribution-control signal is useful for wallet and consumer-risk dossiers.
Listing post-mortem use: Use when analyzing projects whose retail adoption depends on wallet-app distribution, brand-protected download paths, or third-party marketplaces where impersonation can drain user assets after listing hype.
Source
2026-07-24
Tier 2
BitMEX / HDR Global Trading Limited
A proposed class action filed in SDNY alleges BitMEX and affiliates retained customer bitcoin collateral through unfair liquidations and insider trading, seeking return of 622.66 BTC as the exchange prepares to cease operations on September 23, 2026.
US / Global
U.S. District Court for the Southern District of New York / BitMEX
Centralized derivatives exchange / perpetual swaps / customer collateral
high confidence
class-action litigationcustomer collateral disputeforced liquidation allegationsinsider trading allegationsexchange shutdownwithdrawal deadline risklegacy derivatives venue risk
CourtListener shows a July 23, 2026 class-action complaint in BKX Services Inc. and David Namdar v. HDR Global Trading Limited et al. seeking recovery of bitcoin and alleging theft, fraud, and BitMEX exchange manipulation. CoinDesk and Benzinga reported that the plaintiffs claim 622.66 BTC in losses and that the case coincides with BitMEX preparing to cease operations on September 23, 2026, making this a Tier 2 legal and venue-continuity negative-intel row rather than a final judicial finding.
Listing post-mortem use: Use when reviewing assets whose liquidity quality, price discovery, or post-listing market structure depended on BitMEX derivatives markets, especially where forced liquidations, insurance-fund mechanics, or venue wind-down risk affected investor outcomes.
Source
2026-07-24
Tier 2
Binance / Changpeng Zhao / FTX Recovery Trust
Bloomberg Law reported that an FTX trust received permission to pursue Binance and Changpeng Zhao over alleged $1.76B fraudulent-transfer claims tied to a 2021 share repurchase, while some damages claims were dismissed.
US / Global
U.S. Bankruptcy Court / FTX Recovery Trust
Centralized exchange / bankruptcy litigation / exchange founder counterparty risk
medium-high confidence
bankruptcy litigationfraudulent transfer claimexchange founder litigationlegacy exchange transaction riskestate recovery actionreputational riskclaims not adjudicated
The FTX/Binance row is Tier 2 because it is a credible court-process signal with named parties, amount, legal theory, and partial claim survival, but it is not a final judgment or enforcement order. It is useful for exchange-risk dossiers and legacy listing post-mortems.
Listing post-mortem use: Use when analyzing tokens or venues whose market quality was shaped by inter-exchange deals, founder-controlled settlements, or bankruptcy-estate clawback risk after counterparty collapse.
Source
2026-07-23
Tier 1
AFX Trade bridge infrastructure
AFX Trade was drained of roughly 24.15M USDC after an attacker compromised validator signing keys for a bridge operated by the protocol; Offchain Labs said Arbitrum native bridge infrastructure was not exploited.
Global / Arbitrum
AFX Trade / Blockaid / Offchain Labs
Perpetual DEX / cross-chain bridge / Arbitrum protocol infrastructure
high confidence
bridge exploitvalidator signing key compromisehot-key quorum failureUSDC treasury drainthird-party Arbitrum protocol riskTVL depletionoff-chain operational security
AFX Trade is included as Tier 1 because security firm Blockaid and CoinDesk reported a confirmed 24.15M USDC drain from AFX-operated bridge infrastructure, with Offchain Labs clarifying that Arbitrum native bridge infrastructure was not breached. The direct adverse consequence was a near-total protocol TVL drain and attacker conversion of stolen USDC into roughly 12,467 ETH.
Listing post-mortem use: Use when reviewing listings whose liquidity, CEX market-making, or collateral settlement relied on third-party bridge reserves controlled by validator hot keys or small multisig/quorum structures.
Source
2026-07-23
Tier 1
BitMEX exchange
BitMEX announced that the exchange will close on 23 September 2026 at 04:00 UTC, stopped new registrations immediately, and urged users to close positions and withdraw assets before closure.
Global / Seychelles corporate context
BitMEX / HDR Global Trading Limited
Centralized exchange / derivatives / custody / venue continuity
high confidence
exchange closurevenue-continuity riskderivatives market-access lossforced position managementwithdrawal deadline riskexchange consolidationBMEX utility impairment
BitMEX is included as a Tier 1 negative-intel record because the exchange itself confirmed a dated closure, immediate halt to new registrations, and an orderly wind-down path affecting positions, withdrawals, and venue access.
Listing post-mortem use: Use as a post-listing liquidity warning when reviewing tokens that relied on legacy offshore derivatives venues, BMEX-linked incentives, or fragile perpetual-market depth.
Source
2026-07-23
Tier 1
B² Network token staking contract
B² Network said an attacker gained unauthorized access to the upgrade authority of its token staking contract; on-chain trackers reported roughly 3.86M in B2-related value drained, sold, bridged, and moved through cross-chain routes.
Global / BNB Chain / Bitcoin scaling ecosystem
B² Network / PeckShield / Lookonchain
Bitcoin scaling network / staking contract / BNB Chain token liquidity
medium-high confidence
upgrade authority compromisestaking contract exploitadmin key riskB2 token drainBNB Chain liquidity sell pressurecross-chain laundering pathcompensation obligation
B² Network is included as Tier 1 because CoinDesk reported that B² itself said an attacker gained unauthorized access to the staking contract upgrade authority, after which Lookonchain traced roughly 3.86M in B2-related value sold and moved cross-chain. The row is high enough confidence for public tracking, though capped at medium-high pending a full project post-mortem.
Listing post-mortem use: Use for post-listing reviews of tokens where staking contracts, proxy upgrade keys, or admin-controlled distribution contracts create market-impacting exploit paths independent of core network security.
Source
2026-07-23
Tier 2
Solido Money
Solido Money reported that two exploit waves generated 293.7M SUPRA in net proceeds by abusing an oracle misassignment and insufficient risk limits, with about 84% of proceeds traced to centralized exchange infrastructure and exchange assistance requested.
Global / Supra ecosystem
Solido Money forensic report / centralized exchange infrastructure
DeFi lending / oracle pricing / exchange laundering response
medium-high confidence
oracle misassignmentDeFi exploitinsufficient risk limitssynthetic asset mintingcentralized exchange tracingrecovery dependencyforensic report
Solido Money is included as Tier 2 because the July 28 forensic coverage adds a structured exploit-and-recovery record with named protocol, asset, mechanism, proceeds, exchange-tracing path, and recovery dependency. It is not Tier 1 here because the run did not verify a direct protocol halt or official primary report URL.
Listing post-mortem use: Use when reviewing DeFi listings where oracle assignment, collateral haircuts, risk limits, and exchange-side recovery cooperation determine whether an exploit becomes a market-wide token-liquidity event.
Source
2026-07-23
Tier 1
Verus Ethereum Bridge
Blockaid detected a second Verus Ethereum Bridge exploit that drained roughly 7.54M in assets through the same bridge contract, entry path, and apparent bug class involved in the May 2026 breach.
Global / Ethereum / Verus
Blockaid / Verus ecosystem security monitoring
Cross-chain bridge / Bitcoin and Ethereum-linked asset reserves
high confidence
repeat bridge exploitunbacked Ethereum-side payoutsimport path validation failuresame bug class recurrencebridge reserve drainremediation failurecross-chain asset custody risk
Verus Ethereum Bridge is included as Tier 1 because Blockaid reported a fresh 7.54M reserve drain on July 23, with crypto.news noting the attack used the same bridge contract, entry path, and apparent bug class as the May 2026 Verus exploit already in the database. This is a high-value repeat adverse consequence rather than a mere follow-up.
Listing post-mortem use: Use as a repeat-failure comparable where a project suffered a prior exploit, recovered or redeposited assets, then experienced a second drain before a durable technical fix was proven.
Source
2026-07-22
Tier 2
42DAO / Balance Protocol
Security firms reported that 42DAO-linked Balance Coin suffered an oracle-manipulation exploit that drained roughly $912K-$915K and caused BLC to lose more than 99% of its dollar peg.
Global / BNB Chain
PeckShield / SlowMist / TenArmor
Algorithmic stablecoin / DeFi lending and liquidation infrastructure
high confidence
oracle manipulationstablecoin depegunauthorized liquidationMaker-style fork without safeguardsBNB Chain liquidity drainmissing price deviation checksno public recovery plan
42DAO/BLC is included as a Tier 2 high-confidence negative-intel row because PeckShield and SlowMist reported a roughly $912K-$915K exploit tied to BTCB oracle manipulation, while BLC depegged by more than 99%. The event has direct market consequence and named security-firm attribution, but no 42DAO official post-mortem or recovery plan was found during this run.
Listing post-mortem use: Use when reviewing listings of algorithmic stablecoins, Maker-style forks, or collateralized debt protocols whose token value depends on oracle update controls, liquidation delays, and DEX liquidity depth.
Source
2026-07-22
Tier 1
35 BitMEX derivatives contracts scheduled for early settlement
BitMEX announced early settlement and delisting of 35 derivatives contracts at 12:00 UTC on 30 July 2026 due to insufficient trading interest and the decision to close the exchange.
Global
BitMEX
Centralized exchange derivatives / perpetual futures / product rationalization
high confidence
exchange delistingearly settlementperpetual futures liquidity contractionmarket-access frictionderivatives support contractionexchange closure spillover
The 35-contract BitMEX delisting is a separate row-level signal because it identifies affected assets, a scheduled early-settlement mechanism, and a direct market-access consequence before the full exchange closure date.
Listing post-mortem use: Use as a comparable when reviewing tokens with post-listing derivatives support that disappeared because trading interest was too low or the venue itself entered wind-down.
Source
2026-07-22
Tier 3
South-East Asia scam and criminal financial infrastructure
UNODC said South-East Asia criminal groups have consolidated into an interconnected tech-driven criminal economy, with scam losses across East Asia, South-East Asia, Australia, and New Zealand estimated at USD 88.3B-114.1B in 2025 and law enforcement needing specialized crypto tracing, seizure, and recovery capacity.
South-East Asia / East Asia / Australia / New Zealand
UNODC
AML / scam infrastructure / crypto proceeds tracing
high confidence
scam infrastructurecrypto proceeds tracingmoney launderingforced criminalitycross-border settlement railsancillary service providersregional governance risk
UNODC is included as a Tier 3 sector-risk row because its July 22 report provides an official regional early-warning signal: scam losses across East Asia, South-East Asia, Australia, and New Zealand reached an estimated USD 88.3B-114.1B in 2025, and the agency explicitly highlighted the need to identify, seize, and recover funds in the new crypto context.
Listing post-mortem use: Use as jurisdiction radar when reviewing post-listing liquidity patterns, suspicious inflows, market-maker routes, OTC distribution, and stablecoin payment rails connected to Southeast Asia scam or cyber-fraud typologies.
Source
2026-07-21
Tier 1
Wanchain Cardano-BNB Chain bridge / Midnight
Wanchain said its Cardano-BNB Chain bridge was unavailable after an incident involving NIGHT withdrawals from the Cardano bridge contract; BlockSec Phalcon reported roughly 515M NIGHT drained from the bridge treasury, with an initial root-cause theory around non-injective signed-message encoding in the TreasuryCheck validator.
Global
Wanchain / BlockSec Phalcon / Midnight Foundation
Cross-chain bridge / Cardano ecosystem / token custody
high confidence
bridge exploittoken treasury drainsignature reusevalidator message-encoding flawCardano-BNB bridgeDEX sell pressurethird-party bridge dependency
Wanchain/Midnight is a Tier 1 negative-intel row because the bridge operator confirmed an incident and made the Wanchain Bridge unavailable while independent security analysis reported a roughly 515M NIGHT treasury drain. Crypto.news and Crypto Times both cited BlockSec's technical finding that raw-concatenated variable-length fields may have enabled signature reuse, while Midnight framed the issue as isolated to third-party bridge infrastructure rather than the core network.
Listing post-mortem use: Use as a comparable for listings where token float, CEX liquidity, or market-maker routing depends on wrapped assets backed by bridge treasury contracts and off-chain or threshold-signature validation.
Source
2026-07-20
Tier 1
Polymarket
French gambling-regulator coverage reported that ANJ ordered internet service providers to block Polymarket access from French territory, alleging illegal gambling-law exposure and warning that advertising unauthorized betting or gambling sites is a criminal offense.
FR
Autorite Nationale des Jeux
Prediction markets / crypto gambling interface
medium confidence
jurisdiction access blockgambling lawprediction marketsgeo-restriction failureadvertising restrictionmarket manipulation concern
Polymarket is included as a Tier 1 adverse access signal because reported French ANJ action imposes a direct market-access block and advertising-risk consequence in a major EU jurisdiction.
Listing post-mortem use: Use as a comparable for tokens or platforms whose growth depends on prediction-market volumes in jurisdictions that may classify activity as unauthorized gambling rather than financial-market infrastructure.
Source
2026-07-20
Tier 1
Zilliqa / unnamed exchange partner
Zilliqa disclosed that ZIL was stolen from a cold wallet involving one exchange partner, opened an active investigation, and asked exchanges to temporarily pause ZIL deposits and withdrawals while it verified the root cause and scope.
Global
Zilliqa
Layer-1 / exchange custody / token transfer controls
high confidence
cold-wallet theftexchange partner custodydeposit and withdrawal suspensionlegacy wallet signing issueliquidity interruptionincident disclosure gap
Zilliqa is a Tier 1 negative-intel row because the project itself confirmed stolen ZIL from an exchange-partner cold wallet and took a direct adverse action by asking exchanges to pause deposits and withdrawals. A later project update, reported by Crypto Times, said the early investigation had found no evidence that exchange wallet management caused the incident and pointed instead to a technical issue affecting transaction signing in a specific set of legacy ZIL1 wallets.
Listing post-mortem use: Use when reviewing listings where exchange custody, legacy wallet compatibility, or project-led emergency transfer halts later affected token liquidity, settlement reliability, and market-maker inventory movement.
Source
2026-07-19
Tier 1
Allbridge Core Solana stablecoin bridge
Allbridge Core disclosed a security incident, paused the protocol as a precaution, told affected-pool LPs to withdraw, and asked arbitrageurs who benefited from the pool imbalance to return funds for LP compensation; contemporaneous on-chain reporting estimated roughly $1.65M lost through Solana flash-loan price manipulation.
Global
Allbridge Core
Cross-chain bridge / stablecoin liquidity
high confidence
bridge exploitflash-loan price manipulationprotocol haltLP lossSolana DeFistablecoin pool imbalance
Allbridge Core is a Tier 1 negative-intel row because the protocol itself confirmed a security incident, paused operations, advised LP withdrawals, and opened an LP-compensation return path after a pool imbalance tied to an estimated $1.65M exploit.
Listing post-mortem use: Use as a comparable for bridge tokens or Solana DeFi assets where market makers rely on native-liquidity bridge routes and where repeat exploit vectors undermine post-listing liquidity assumptions.
Source
2026-07-19
Tier 2
Dunamu / Upbit
Multiple reports said South Korea's Financial Supervisory Service sent Dunamu an inspection opinion letter around July 18-19, formally starting a sanctions process tied to the November 2025 Upbit Solana hot-wallet breach that drained about KRW 44.5B, including customer assets.
KR
Financial Supervisory Service
Centralized exchange / VASP cybersecurity
medium confidence
cybersecurity controlshot-wallet custodyVASP supervisionsanctions processcustomer asset protectionKorea exchange regulation
Dunamu/Upbit is included as Tier 2 because the reported FSS inspection opinion letter names the exchange operator, jurisdiction, prior hack vector, loss scale, and regulatory process, but no final sanction level is public yet.
Listing post-mortem use: Use as Korea jurisdiction context when evaluating exchange concentration, custody-control failures, and post-hack regulatory overhang for assets dependent on Upbit liquidity.
Source
2026-07-17
Tier 1
Across Protocol Solana bridge deployment and Risk Labs relayer
Across Protocol disclosed an attack on its Solana deployment, disabled Solana deposits as a containment measure, said user funds and in-flight bridge transfers were safe, and identified the potentially affected exposure as Risk Labs relayer capital while investigation and post-mortem remained pending.
Global / Solana / Ethereum
Across Protocol / Risk Labs / SEAL 911
Cross-chain bridge / intent-based settlement / Solana integration
medium-high confidence
bridge attackSolana integration riskrelayer capital exposuretemporary deposit disablementintent-based settlement riskcross-chain attacker address tracingpending post-mortem
Crypto Times reported that Across Protocol disclosed an attack on its Solana deployment at about 05:30 UTC on July 17, 2026. The team said user funds were safe, all bridge transactions completed, and the only potentially lost funds belonged to the Risk Labs-operated relayer, while Solana deposits were disabled and SEAL 911 tracing began across one Solana and two EVM attacker addresses. The row is Tier 1 because the protocol confirmed a security attack and direct operational restriction, even though the immediate financial exposure appears confined to relayer capital rather than user balances.
Listing post-mortem use: Use when reviewing cross-chain listings, bridge integrations, or intent-based transfer products where a perfect historic security record masked new-chain integration risk, relayer capital exposure, or temporary deposit restrictions.
Source
2026-07-17
Tier 1
DeFiTuna lending pools
DeFiTuna disclosed that an attacker exploited its Solana lending pools and drained about $580,000, leaving a matching deficit in the protocol's USDC lending pool while recovery and root-cause investigation remained open.
Global / Solana
DeFiTuna / Solana DeFi security monitoring
Solana DeFi / lending pools / leveraged liquidity
medium-high confidence
lending pool exploitUSDC pool deficitSolana DeFi exposureleveraged liquidity protocol riskuser-fund recovery uncertaintypatched attack vector pending post-mortem
Crypto Briefing reported that DeFiTuna, a Solana-based AMM and lending protocol supporting leveraged positions, disclosed a July 16 exploit that drained about $580,000 from its lending pools and left the USDC pool with a matching deficit. The team reportedly identified and mitigated the attack vector, but recovery mechanics and user compensation remained unresolved at publication. The row is Tier 1 because it describes a confirmed protocol exploit with direct adverse consequence for a named asset pool.
Listing post-mortem use: Use for post-mortems where a Solana DeFi or yield product showed unresolved pool deficits, opaque recovery commitments, or leveraged-liquidity mechanics that made user balances dependent on protocol accounting controls.
Source
2026-07-17
Tier 3
Virtual asset service providers and stablecoin issuers
FATF's 2026 virtual-assets targeted update, as reported by AML Intelligence, warned that organised crime groups are exploiting regulatory implementation gaps, offshore VASPs, DeFi exposure, and stablecoins, including proprietary stablecoins designed to resist freezing and seizure.
Global / FATF network
Financial Action Task Force
AML/KYT / stablecoins / offshore VASPs / DeFi
medium-high confidence
AML implementation gapTravel Rule enforcement lagoffshore VASP supervision riskstablecoin seizure resistancesanctions evasionscam-compound money launderingDPRK cyber theft exposureAI-enabled fraud typologies
AML Intelligence reported that FATF's seventh targeted update on virtual assets and VASPs found progress in legal adoption of Travel Rule frameworks but persistent gaps in practical supervision and enforcement. The report highlighted organised-crime-linked scam centers, DPRK-related cyber theft, sanctions evasion, offshore VASPs, DeFi exposure, and growing illicit use of stablecoins, including proprietary stablecoins designed to resist freezing and seizure. The row is Tier 3 because it is a sector-level early warning and jurisdiction-radar signal rather than a named enforcement action.
Listing post-mortem use: Use as background for listings or integrations where issuer reserves, stablecoin rails, offshore VASP partnerships, or DeFi access points later became relevant to sanctions, fraud-flow, Travel Rule, or asset-freeze failures.
Source
2026-07-17
Tier 2
Cycurion, Inc. (Cycurion Crypto subsidiary)
Cycurion announced that Nasdaq issued a delisting determination after CYCU traded below the $1.00 minimum bid requirement for 31 consecutive business days and was ineligible for the ordinary compliance period because of a prior reverse split; the company planned to appeal before the July 17 deadline.
United States
Nasdaq Hearings Panel / Nasdaq Listing Qualifications
Public crypto treasury companies / cybersecurity issuer / exchange listing compliance
high confidence
Nasdaq minimum bid deficiencydelisting determinationreverse-split compliance limitationcrypto treasury issuer market-structure riskpublic-market listing frictionappeal outcome uncertainty
Cycurion disclosed that Nasdaq issued a delisting determination dated July 10, 2026 because CYCU failed the $1.00 minimum bid rule for 31 consecutive business days from May 26 through July 9 and was not eligible for the usual 180-day compliance period after a 1-for-30 reverse split in October 2025. The company said it would request a Nasdaq Hearings Panel review by July 17, staying suspension while the appeal is pending. The row is Tier 2 because the adverse consequence is confirmed, but the crypto link is treasury-adjacent rather than a direct token, protocol, or VASP action.
Listing post-mortem use: Use when reviewing listings or treasury-pivot narratives where public issuer compliance stress, reverse splits, minimum-bid failures, or crypto treasury announcements masked deteriorating equity market quality.
Source
2026-07-16
Tier 1
Cascade Liquidity Strategy vault
Cascade reportedly suffered a CLS vault exploit that drained about 1.34M USDC from locked user pre-allocation funds and bridged proceeds across Arbitrum, Solana, and Ethereum.
Global / Arbitrum
Cascade / PeckShield
DeFi perpetuals / prelaunch liquidity vault / RWA trading infrastructure
medium-high confidence
vault exploitlocked user fundsprelaunch liquidity strategycross-chain laundering pathUSDC-to-DAI conversionArbitrum-to-Solana bridge movementRWA perps launch risk
Crypto Times reported that Cascade, a Polychain- and Variant-backed perpetuals platform, acknowledged an exploit affecting its Cascade Liquidity Strategy vault. PeckShield said about 1.34M USDC was drained from user funds, moved from Arbitrum to Solana, then bridged to Ethereum via Relay Protocol after conversion into DAI. The row is Tier 1 because it describes a concrete protocol exploit with direct user-fund loss and traceable laundering path, with confidence capped at medium-high because the primary protocol post was not directly retrievable during this run.
Listing post-mortem use: Use when reviewing RWA/perpetual listings that relied on invite-only pre-allocation campaigns, locked liquidity strategies, or cross-chain fund routing before full public launch.
Source
2026-07-16
Tier 1
Knaken Cryptohandel B.V. and Stichting Knaken Payments
Rotterdam District Court declared Knaken Cryptohandel B.V. and its client-payments foundation bankrupt after prosecutors said about EUR 7 million in customer assets was missing, customers were locked out of the trading platform, and Knaken lacked enough assets to fully repay customers.
Netherlands / European Union
Rotterdam District Court / Dutch Public Prosecution Service / FIOD / AFM signal context
Centralized exchange / crypto custody / MiCA authorization and insolvency
high confidence
exchange bankruptcycustomer fund shortfallblocked account accesscriminal investigationcustody segregation uncertaintyFIOD seizure contextMiCA authorization gaptrustee-controlled wind-down
Rotterdam District Court published that Knaken Cryptohandel B.V. was declared bankrupt on the Public Prosecution Service request. Prosecutors said a criminal investigation had begun because about EUR 7 million in customer balances was missing; the court found customers had been blocked from accessing the trading platform, were not sufficiently informed, and could not determine their legal position. The court held that Knaken lacked enough assets to fully pay customers, appointed C.F.W.A. Hamm as trustee, and moved the wind-down outside Knaken control. The row is Tier 1 because it is an official judicial insolvency action with direct customer-access and custody consequences.
Listing post-mortem use: Use for CEX and custody post-mortems where customer balances appeared as platform ledger entries but became dependent on bankruptcy trustees, custody-foundation records, wallet reconciliation, and MiCA-style safeguarding controls after access was blocked.
Source
2026-07-15
Tier 3
NOXA.fun memecoin launchpad on Robinhood Chain
KuCoin and BingX news items reported that NOXA.fun kept new token launches disabled after copycat tokens, bot-driven bulk launches, infrastructure limits, and token-spam pressure overwhelmed the launchpad; the replacement ENS interface focuses on browsing historical launches and creator-fee claims rather than new issuance.
Global / Robinhood Chain
NOXA.fun / Robinhood Chain ecosystem
Memecoin launchpads / token issuance infrastructure
medium confidence
token-spam pressurebot-driven launchescopycat-token proliferationlaunchpad product restrictioninfrastructure downtimememecoin market-quality risk
On July 15, 2026, KuCoin coverage of Robinhood Chain memecoin activity reported that NOXA.fun had suspended new token issuance after copycat tokens and bot-driven bulk launches became severe. A BingX-captured NOXA interface update separately said the ENS-accessible interface was live for historical token browsing and creator-fee claims while new launches remained disabled due to infrastructure limits and token spam. This is Tier 3 because it is a sector-watch signal rather than a regulator, exchange delisting, or confirmed exploit.
Listing post-mortem use: Useful for post-mortems where a newly listed memecoin shows suspicious early concentration, copycat branding, launchpad-origin spam, or venue-quality deterioration tied to a permissive launch infrastructure.
Source
2026-07-15
Tier 1
Ostium OLP vault on Arbitrum
Ostium paused all trading after an oracle signer-key compromise reportedly enabled future-dated price reports and drained approximately $11.86M-$18M USDC from the OLP liquidity vault.
Global / Arbitrum
Ostium / Blockaid / Arbitrum security researchers
DeFi perpetuals / RWA onchain trading / oracle infrastructure
high confidence
oracle signer key compromiseDeFi perpetuals vault draintrading haltRWA perps liquidity disruptionfuture-dated price reportsArbitrum protocol exposurefrozen trader positions
Blockaid reported that an attacker used a compromised Ostium oracle signer key and a registered PriceUpKeep forwarder to submit future-dated authorized price reports, producing artificial trading profits and draining the OLP vault on Arbitrum. Ostium publicly said it was aware of an OLP vault issue, paused all trading, and later said trader funds and open positions were preserved but frozen while the team investigated with security experts. Loss estimates vary between roughly $11.86M and $18M USDC, making this a Tier 1 protocol action with direct adverse consequence.
Listing post-mortem use: Use for post-mortems on RWA/perpetual venues where institutional backing, audits, or market-maker partnerships masked oracle-signer and vault-settlement concentration risk.
Source
2026-07-14
Tier 3
Pre-MiCA crypto-asset service providers operating in Europe
Multiple reports said only around 17-20% of more than 1,200 pre-MiCA crypto firms secured CASP authorisation before the July 1, 2026 transition cutoff, leaving a large tail of firms potentially unable to continue compliant EU service.
EU
EU MiCA / national competent authorities
Crypto-asset service providers / exchange and wallet access
medium confidence
licensing gapMiCA transitionmarket-access attritionCASP authorizationEU retail accessoffshore-app leakage
Finance Magnates and other industry sources reported a large post-MiCA transition gap, with roughly 80% of previously registered European crypto firms failing to secure CASP authorisation before the July 1, 2026 cutoff. This is classified as Tier 3 because it is a jurisdiction-level early-warning signal rather than a named enforcement action, but it is valuable for longitudinal monitoring of EU exchange access, venue consolidation, and listing-risk post-mortems.
Listing post-mortem use: Useful for weekly listing reviews where a token claims EU liquidity or distribution but the venue stack may be non-compliant, migrating customers, or losing access after MiCA transition deadlines.
Source
2026-07-14
Tier 1
BitMEX illiquid spot pairs scheduled for delisting
BitMEX announced it will delist nine spot pairs at 12:00 UTC on July 16, 2026, citing insufficient trading interest; all trading will cease and open orders will be canceled at settlement.
Global
BitMEX
Centralized exchange spot markets / listing liquidity
high confidence
exchange delistinginsufficient trading interestspot liquidity deteriorationopen-order cancellationmarket-access losslisting maintenance failure
BitMEX published an official July 2026 delisting notice saying UNI_USDT, APE_USDT, ATOM_USDT, AXS_USDT, BONK_USDT, LINK_USDT, POL_USDT, S_USDT, and TRX_USDT spot pairs will be delisted on July 16, 2026 because of insufficient trading interest. This is a Tier 1 exchange action because it has a direct adverse market-access consequence, a defined settlement time, and automatic open-order cancellation.
Listing post-mortem use: Use to test whether listing reviews distinguish token-level quality from pair-level venue liquidity, and whether low-interest pairs are monitored before exchange delisting forces order cancellation.
Source
2026-07-14
Tier 1
Lumi Finance / Sodium smart accounts on Arbitrum
Lumi Finance reportedly lost roughly $270,000 after a Sodium ERC-4337 smart-account validation flaw let an attacker-controlled paymaster obtain token allowances and batch-drain affected user accounts on Arbitrum.
Global
Blockaid / SlowMist / Lumi Finance ecosystem
Account abstraction / DeFi stablecoin and game-economy infrastructure
medium-high confidence
smart-account validation side effectsERC-4337 account abstractionunauthorized token approvalsuser wallet drainmalicious paymasterArbitrum DeFi exposurepermission revocation urgency
Crypto Times reported that Blockaid and SlowMist traced a roughly $270,000 Lumi Finance drain on Arbitrum to Sodium smart accounts performing token approvals as a side effect of ERC-4337 UserOperation validation. The attacker allegedly used a malicious paymaster/spender path, swept newly approved assets including LUA, LUAUSD and stablecoins, swapped proceeds to ETH, and transferred them to an attacker wallet. The event is Tier 1 because it is a concrete protocol-adjacent exploit with direct user-asset loss, though confidence remains medium-high until Lumi publishes its own full incident report.
Listing post-mortem use: Use for post-mortems on DeFi/game-economy tokens where protocol TVL looks small but user-side smart accounts hold larger at-risk balances, and where ERC-4337 validation assumptions were not part of listing due diligence.
Source
2026-07-14
Tier 1
Kalshi Michigan sports event contracts
Media reports said a Michigan state court temporarily barred Kalshi from offering sports event contracts to Michigan residents, while the CFTC stayed Kalshi's emergency-rule application to unwind or cancel affected Michigan trades, creating a direct conflict over venue access and settlement obligations.
United States / Michigan
CFTC; Ingham County Circuit Court; Michigan state authorities
Prediction markets / event-contract exchanges
high confidence
state-federal regulatory conflictsports event-contract restrictiontrade-cancellation disputevenue-access risksettlement obligation uncertaintyprediction-market compliance
On July 14, 2026, multiple outlets reported that a Michigan court order restricted Kalshi sports event contracts for Michigan residents and that the CFTC moved to stop Kalshi from canceling or unwinding affected trades under an emergency-rule filing. The row is Tier 1 because it reflects named judicial/regulatory action with direct adverse access and settlement consequences, even though the source used for this run is reputable media rather than the underlying court docket.
Listing post-mortem use: Useful when reviewing prediction-market tokens, event-contract venue integrations, or market-maker exposure to products where state access controls can force cancellation, refund, or settlement conflict.
Source
2026-07-13
Tier 2
SCATMAN token promoted through compromised SpaceXAI and Starlink X accounts
Multiple crypto media reports, citing Lookonchain on-chain tracing, said compromised SpaceXAI and Starlink X accounts were used to promote SCATMAN before attacker-linked wallets dumped roughly $125,000-$135,000 worth of ETH proceeds.
Global
N/A
Meme coin / social-account scam infrastructure
medium confidence
account compromiserug pullsocial engineeringmeme coinon-chain scamRobinhood Chain
SCATMAN is included as a Tier 2 negative-intel record because it links named compromised accounts, a named token, attacker wallet monetization, and a repeatable social-account rug-pull pattern, despite the absence of an official SpaceX or Starlink statement during this run.
Listing post-mortem use: Useful for post-mortems where a token experienced an early viral spike after high-profile social amplification and then collapsed after insider or attacker wallets exited.
Source
2026-07-13
Tier 2
High-volume USDT trading through Thai platforms
The Bank of Thailand and Thai SEC reportedly initiated deep audits into high-volume USDT trades structured to conceal ownership or bypass onshore remittance channels, with suspicious findings referred to the SEC for disciplinary or statutory action.
TH
Bank of Thailand; Securities and Exchange Commission Thailand
Stablecoin trading / fiat on-off ramps
medium-high confidence
AMLstablecoin flowshidden ownershipremittance bypassforeign seller activityplatform surveillance
Thailand high-volume USDT audit is included as a Tier 2 negative-intel record because it names authorities, asset, conduct vector, jurisdiction, and a concrete regulatory escalation path, while remaining short of a final enforcement order.
Listing post-mortem use: Useful for listing reviews where Thai liquidity appears strong but depends on opaque USDT seller flows, remittance arbitrage, or accounts later escalated to SEC/AMLO review.
Source
2026-07-11
Tier 1
Bonzo Lend on Hedera
Bonzo Finance Labs said Bonzo Lend was paused after an attacker used a manipulated SAUCE price accepted by a third-party Supra oracle verifier to borrow approximately $9.05 million of assets far beyond posted collateral.
Global
Bonzo Finance Labs / Bonzo Finance Foundation / Hedera / Supra
DeFi lending / oracle infrastructure / Hedera ecosystem
high confidence
oracle verification exploitDeFi lending pool pausethird-party oracle dependencymanipulated collateral valuationborrowed-asset extractionTVL impairmentliquidity-provider withdrawal uncertaintyHedera ecosystem contagion monitoringwhite-hat recovery dependency
Bonzo Finance Labs, in coordination with the Bonzo Finance Foundation, published a July 11, 2026 incident report saying Bonzo Lend on Hedera was paused after a third-party oracle-provider exploit. The report says an attacker submitted a manipulated SAUCE price at about 00:51 UTC, the Supra oracle verifier accepted a zero-signature-style proof it should have rejected, and the attacker then borrowed assets far beyond the few dollars of SAUCE collateral posted. Bonzo states the headline malicious extraction was approximately $9.05 million, while a separate roughly $1.0 million white-hat borrowing item is being treated as recovery context.
Listing post-mortem use: Use to test whether Bonzo, Hedera ecosystem tokens, or comparable DeFi lending listings reviewed oracle-provider verifier design, zero-signature and subgroup checks, third-party feed concentration, pause authority, recovery communications, liquidity-provider withdrawal paths, and TVL sensitivity to upstream infrastructure failures.
Source
2026-07-11
Tier 2
Ill Bloom vulnerable wallet-generation cohort
Coinspect's Ill Bloom disclosure says weak recovery-phrase generation created actively exploited wallet addresses; confirmed on-chain evidence dates to May 27, 2026 and affected users are instructed to migrate funds to newly generated wallets.
Global
Coinspect / Ill Bloom disclosure
Self-custody wallet security / seed phrase generation
high confidence
weak randomnessinsecure recovery phrase generationactive wallet drainmulti-chain address exposureunknown affected wallet softwarestaged disclosureseed phrase compromiseself-custody tooling riskwallet-vendor notification dependency
Coinspect's Ill Bloom site discloses an actively exploited wallet-generation vulnerability tied to weak recovery phrases. The site says the first confirmed on-chain evidence it identified dates to May 27, 2026, affected users should treat matching recovery phrases as compromised, and safe remediation requires creating a new wallet with a new phrase before migrating funds. The disclosure does not publicly name every vulnerable wallet app because public addresses do not prove which software generated them.
Listing post-mortem use: Use as sector context when reviewing projects with heavy self-custody distribution, wallet-partner integrations, airdrops to externally generated addresses, and post-incident claims that user drains were unrelated to protocol contracts.
Source
2026-07-11
Tier 1
Humanity (H) trading support on Coinone
Coinone reportedly announced that it will delist Humanity (H) on August 10, 2026 after the project failed to resolve watchlist issues tied to a June 9 issuer-managed wallet security incident that caused user losses.
South Korea
Coinone
Centralized exchange spot listing / identity protocol token
medium confidence
exchange delistingsecurity incident follow-throughissuer-managed wallet compromiseunresolved watchlist designationuser-loss incidentSouth Korea listing-review pressurewithdrawal-deadline monitoringpost-exploit venue support contraction
CryptoNews.net reported that South Korean exchange Coinone will delist Humanity (H) on August 10, 2026, citing an official Coinone notice. The reported basis is an unresolved June 9 security incident in an issuer-managed wallet that caused user losses and led to watchlist review. The official notice was not directly retrievable during this run, so the row is source-traced as medium-confidence secondary reporting.
Listing post-mortem use: Use to test whether Humanity listing reviews monitored issuer-managed wallet security, Korean exchange watchlist notices, incident-remediation evidence, user-loss exposure, withdrawal deadlines, and whether one venue's delisting accelerated broader exchange support contraction.
Source
2026-07-10
Tier 1
ACH, CKB, BIO, and XTZ margin services on KuCoin
KuCoin announced it will delist margin trading services for ACH, CKB, BIO, and XTZ, closing margin trading, lending, borrowing, affected transfer functions and loan repayment services on staged UTC deadlines from July 13 to July 16, 2026.
Global
KuCoin
Centralized exchange margin / lending / borrowing support
high confidence
margin service delistinglending and borrowing closureforced position closureopen-order cancellationloan repayment suspensionmargin grid bot shutdownsharp-price-fluctuation early-action risklisting support monitoring
KuCoin is removing margin services for ACH, CKB, BIO, and XTZ. The notice instructs users to cancel orders, close positions, repay loans, and move tokens out of margin accounts; it also warns that open orders may be canceled, positions liquidated, margin grid bots shut down automatically, and early delisting may occur under sharp price fluctuation.
Listing post-mortem use: Use to test whether listing reviews over-weighted spot availability while missing margin-borrow liquidity fragility, bot-dependent flow, debt-ratio stress, and exchange service-removal deadlines for ACH, CKB, BIO, or XTZ.
Source
2026-07-08
Tier 1
Cross The Ages (CTA) on KuCoin
KuCoin placed Cross The Ages under Special Treatment delisting, scheduled trading-bot removal and spot delisting on July 9, kept deposits closed, and set a withdrawal-service closure deadline of August 10, 2026.
Global
KuCoin
Centralized exchange spot listing / game-token market access
high confidence
special treatment delistingspot market delistingtrading-bot shutdowndeposit closurewithdrawal deadlineproject-related withdrawal failure riskgame-token listing support contractionuser loss warning
KuCoin published a July 8, 2026 Special Treatment notice saying Cross The Ages (CTA) will be delisted. Trading bots for CTA are removed at 08:00 UTC on July 9, the project is delisted at 10:00 UTC on July 9, deposits remain closed, and withdrawals close on August 10. The notice also warns that KuCoin may close withdrawals if project-related issues prevent transfers and will not cover user losses.
Listing post-mortem use: Use to test whether CTA listing reviews captured KuCoin Special Treatment triggers, exchange bot dependency, closed-deposit status, withdrawal-deadline communication, on-chain transfer reliability and user-loss disclaimers before the delisting window.
Source
2026-07-08
Tier 3
Rivalz Network (RIZ) deposit service on KuCoin
KuCoin temporarily suspended Rivalz Network (RIZ) deposit service for essential maintenance and said it would not notify users through a further restoration announcement.
Global
KuCoin
Centralized exchange wallet infrastructure / AI-network token deposit support
high confidence
deposit suspensionwallet maintenancerestoration notice unavailableAI-network token transfer-route frictionmarket-maker inventory mobility risklisting support monitoring
KuCoin published a July 8, 2026 notice saying it had suspended the deposit service for Rivalz Network (RIZ) due to essential maintenance. The notice does not cite an exploit, delisting, or trading halt, but the deposit route is unavailable and KuCoin says users will not receive a further restoration announcement, making this a Tier 3 operational watchlist row.
Listing post-mortem use: Use to test whether RIZ or comparable AI-network token listing reviews had redundant deposit routes, wallet-maintenance monitoring, market-maker inventory plans, and restoration verification when a venue says no further notice will be issued.
Source
2026-07-07
Tier 3
BONK deposit and withdrawal services on KuCoin
KuCoin temporarily suspended BONK deposit and withdrawal services for essential maintenance and said it would not publish a further restoration announcement.
Global
KuCoin
Centralized exchange wallet infrastructure / meme-token transfer support
high confidence
deposit suspensionwithdrawal suspensionwallet maintenancerestoration notice unavailablememe-token transfer-route frictionmarket-maker inventory mobility risklisting support monitoring
KuCoin published a July 7, 2026 official notice saying it had suspended BONK deposit and withdrawal services due to essential maintenance. The notice did not cite a trading halt, exploit, or delisting, but it directly restricts user transfer access and says users will not receive a further restoration announcement, making it a Tier 3 operational negative-intel watchlist row.
Listing post-mortem use: Use to test whether BONK or comparable meme-token listing reviews had redundant exchange transfer routes, wallet-maintenance monitoring, market-maker inventory mobility plans, and restoration checks when the venue says no further announcement will be issued.
Source
2026-07-06
Tier 1
Binance margin and loan products for TST and IOTX
Binance announced margin and loan delisting for TST and IOTX, including borrowing suspension, automatic loan closure, position settlement, order cancellation, and possible liquidation or forced sale of remaining margin balances.
Global
Binance
Centralized exchange margin and crypto loan support
high confidence
margin delistingcrypto loan closureborrowing suspensionautomatic settlementpending order cancellationportfolio margin liquidationcollateral forced salemarket-access frictionlisting support monitoring
Binance published a July 6, 2026 notice saying Margin and Loan will delist TST and IOTX on July 10 at 10:00 UTC. Borrowing is suspended from July 7; affected loan positions are closed, margin pairs removed, isolated orders canceled, cross-margin liabilities repaid through collateral handling, and remaining portfolio-margin balances can be liquidated into USDT.
Listing post-mortem use: Use to test whether TST/IOTX listing reviews separated spot access from margin, loan, collateral and portfolio-margin support, and whether post-listing monitoring captured borrow suspension, forced settlement, and collateral forced-sale risk before product removal.
Source
2026-07-05
Tier 3
ESUSDT futures on MEXC
MEXC updated ESUSDT futures funding-rate limits from 3% to 5% and warned that funding rates may be further adjusted in extreme market conditions.
Global
MEXC
Centralized exchange derivatives / funding-rate risk controls
medium confidence
funding-rate limit changederivatives carry-cost volatilityextreme market condition warningperpetual futures risk controlmarket-maker funding exposureleveraged position monitoringlisting support monitoring
MEXC's July 5, 2026 official announcement index showed an ESUSDT futures funding-rate limit update effective at 18:55 UTC, moving the upper and lower limits from 3% to 5%. Because this is not a delisting or enforcement action, it is treated as a Tier 3 derivatives watchlist signal for funding-volatility and market-maker stress.
Listing post-mortem use: Use to test whether ES listing and market-maker reviews tracked funding-rate cap changes, carry-cost stress, extreme-market warnings, and dependency on a single high-volatility perpetual venue.
Source
2026-07-05
Tier 3
Gate TR WEN and CAT token rebranding
Gate TR temporarily suspended deposits, withdrawals, and trading services for WEN and CAT from 2026-07-05 03:00 UTC during a token-name rebranding process, with post-change review before relisting under the new names.
Turkey
Gate TR
Centralized exchange spot / token identity and rebrand operations
high confidence
temporary trading suspensiondeposit suspensionwithdrawal suspensiontoken rebrand operationasset identity changepost-change listing reviewregional venue access frictionlisting support monitoring
Gate TR published a July 3 notice that WEN and CAT would be renamed to WENSOL and SIMONSCAT, and that deposits, withdrawals, WEN/USDT trading and CAT/TRY trading would be temporarily suspended from July 5, 2026 at 03:00 UTC. Because the notice says the tokens will be reviewed again before listing under new names, this is a Tier 3 operational listing-support watchlist signal.
Listing post-mortem use: Use to test whether WEN/CAT or comparable meme-token listings had clear rebrand handling, ticker continuity controls, user communication, temporary trading-pause planning, and regional exchange relisting verification.
Source
2026-07-04
Tier 3
HYPER withdrawals on Bitget via Binance Smart Chain
Bitget suspended HYPER withdrawals on Binance Smart Chain from 2026-07-04 09:19 UTC+8 due to wallet maintenance, with reopening date to be announced separately.
Global
Bitget
Centralized exchange wallet infrastructure / network-specific withdrawal support
high confidence
withdrawal suspensionnetwork-specific support interruptionwallet maintenancereopening time uncertainBinance Smart Chain transfer-route frictionmarket-maker exit-route frictionlisting support monitoring
Bitget published a July 4, 2026 notice suspending HYPER withdrawals on Binance Smart Chain because of wallet maintenance. The exchange did not provide a reopening time, making this a Tier 3 operational watchlist signal rather than a confirmed exploit, enforcement action, or delisting.
Listing post-mortem use: Use to check whether HYPER listing and market-making plans had redundant transfer routes, withdrawal-restoration monitoring, and contingency plans for network-specific exchange wallet maintenance.
Source
2026-07-04
Tier 2
THE, GWEI and VANRY futures on MEXC
MEXC reduced maximum leverage for THE futures from 125x to 50x for futures trading and 75x to 50x for copy trade, and reduced GWEI and VANRY futures leverage from 50x to 20x, with restrictions on increasing positions and warnings that some orders or copy trades above the new limit will not execute.
Global
MEXC
Centralized exchange derivatives / leverage and copy-trading risk controls
high confidence
maximum leverage reductionderivatives product restrictioncopy-trading leverage restrictionposition increase blocked above new limittrigger order execution riskmarket-maker leverage constraintvolatility risk control signallisting support monitoring
MEXC published official July 4, 2026 notices reducing maximum leverage for THE, GWEI and VANRY futures. THE moved from 125x to 50x for futures and 75x to 50x for copy trade, while GWEI and VANRY moved from 50x to 20x. The notices warn users to adjust positions and orders, making this a high-confidence Tier 2 derivatives risk-control signal.
Listing post-mortem use: Use to test whether THE, GWEI or VANRY listing and market-making reviews model leverage cap cuts, copy-trading dependence, order invalidation risk, and market-maker inventory constraints separately from outright delisting.
Source
2026-07-03
Tier 1
Bitget spot markets for A47, HPP, NODE, FRAX, OG, DUSK, LUMIA and NFP
Bitget announced an eight-pair July 10 spot delisting after periodic review, with deposits already suspended, pending-order cancellation, unified-account removal, bot/copy-trading removal, OG margin liquidation workflow, and OG/DUSK Simple Earn delisting.
Global
Bitget
Centralized exchange spot, bots, copy trading, margin and Earn support
high confidence
centralized exchange delistingdeposit suspensionopen-order cancellationunified-account removalspot bot removalcopy-trading removalmargin liquidationEarn product delistingwithdrawal deadlinelisting support monitoring
Bitget published a July 3, 2026 official notice scheduling delisting of A47/USDT, HPP/USDT, NODE/USDT, FRAX/USDT, OG/USDT, DUSK/USDT, LUMIA/USDT and NFP/USDT on July 10. The notice says deposits are already suspended, withdrawals remain open until October 10, spot orders will be canceled, affected pairs will be removed from unified account trading, bots, copy trading, Convert, and selected Earn/margin products, with OG margin positions subject to automatic closeout and liability liquidation.
Listing post-mortem use: Use to test whether listing reviews captured weak trading volume/liquidity, team responsiveness, community activity, smart-contract stability, product breadth dependence, bot/copy-trading exposure, margin liabilities, and user-withdrawal deadlines before Bitget removed support.
Source
2026-07-02
Tier 1
ME3 listing on MEXC
MEXC said it would cancel the ME3 listing after discussions with the project team, closed ME3 deposits, warned users not to deposit to avoid asset losses, and expected to support ME3 withdrawals for 30 days.
Global
MEXC
Centralized exchange spot listing / launch-campaign execution
medium confidence
listing cancellationdeposit closureasset-loss warningwithdrawal windowproject-team coordination issueexchange rejection signallaunch campaign disruptionlisting support monitoring
MEXC said it would cancel the ME3 listing following discussions with the project team. The notice says ME3 deposits have been closed, warns users not to deposit to avoid asset losses, and expects to support ME3 withdrawals for 30 days, making it a confirmed Tier 1 listing-cancellation signal with medium confidence on event-date attribution.
Listing post-mortem use: Use to evaluate whether ME3 or comparable pre-listing reviews captured project-team execution risk, exchange cancellation triggers, deposit cutoffs, user asset-loss warnings, withdrawal windows, and campaign-reward liabilities.
Source
2026-07-02
Tier 1
NFPUSDT Perpetual Futures on MEXC
MEXC delisted the NFPUSDT perpetual futures pair on 2026-07-02 at 08:00 UTC, with fair-price position closure, open-order cancellation, and Demo/Futures Grid removal where applicable.
Global
MEXC
Centralized exchange derivatives / single-asset perpetual futures support
high confidence
perpetual futures delistingforced position closureopen-order cancellationfutures grid shutdownderivatives liquidity contractionsingle-asset venue support reductionmarket-maker strategy interruptionlisting support monitoring
MEXC listed a July 2, 2026 delisting for the NFPUSDT perpetual futures pair at 08:00 UTC. The action closes positions at fair price, cancels open orders, and removes affected Demo/Futures Grid support where applicable, making it a confirmed Tier 1 exchange-action signal.
Listing post-mortem use: Use to test whether NFP listings relied on MEXC perpetual liquidity, futures grid flow, or derivatives market-maker routes that were disrupted by forced closure.
Source
2026-07-01
Tier 1
AscendEX centralized exchange operations
AscendEX reportedly ceased all business operations effective July 1, stopped account opening, deposits, trading, staking and lending, and moved withdrawals into manual review from July 6 with no guarantee on timing or amount.
Global / EU
AscendEX / MiCA authorization context
Centralized exchange operations / custody and withdrawal access
medium confidence
centralized exchange shutdownwithdrawal manual reviewwithdrawal-delay riskcustody-access impairmentMiCA authorization gapliquidity-reserve concernuser asset recovery riskfounder silencelisting venue counterparty risk
KuCoin News republished BitPush reporting that AscendEX ceased operations effective July 1, 2026, citing market conditions, MiCA authorization issues and broader regulatory, financial and operational factors. The report quotes the exchange statement that withdrawals may be delayed or may not be processed during manual review, and says on-chain monitoring showed limited liquid assets, making this a Tier 1 centralized-exchange custody and withdrawal-access negative-intel row.
Listing post-mortem use: Use as a venue-risk post-mortem benchmark for listings that relied on AscendEX liquidity, custody or market-maker routes; test whether exchange due diligence monitored authorization status, reserve depth, withdrawal queues, hot-wallet liquidity, incident history and founder/team responsiveness.
Source
2026-07-01
Tier 3
IN deposits on Bitget via Ethereum
Bitget suspended IN deposits on the Ethereum network from 2026-07-01 11:52 UTC+8 due to wallet maintenance, with the reopening date to be announced separately.
Global
Bitget
Centralized exchange wallet infrastructure / network-specific deposit support
high confidence
deposit suspensionnetwork-specific support interruptionwallet maintenancereopening time uncertainEthereum transfer-route frictionmarket-maker funding-route frictionlisting support monitoring
Bitget published a July 1, 2026 notice suspending IN deposits over Ethereum from 11:52 UTC+8 because of wallet maintenance. The reopening date was left for a later announcement, making it a Tier 3 venue-access watchlist signal.
Listing post-mortem use: Use to test whether IN listing reviews captured network-specific deposit reliability, exchange restoration monitoring, Ethereum route redundancy, and market-maker funding contingency plans.
Source
2026-07-01
Tier 2
Bitget rToken withdrawals
Bitget temporarily suspended rToken withdrawals from 17:00 July 1, 2026 UTC+8 while trading remained available, citing dividend, stock-split, reverse-split, and corporate-action processing consistency.
Global
Bitget
Centralized exchange RWA / tokenized equity withdrawal infrastructure
high confidence
withdrawal suspensiontokenized equity settlement frictioncorporate-action processing riskRWA custody and circulation gapresumption time uncertainon-chain integration pendinglisting support monitoring
Bitget published a July 1, 2026 notice temporarily suspending rToken withdrawals from 17:00 UTC+8 while leaving rToken trading open. The exchange linked the pause to corporate-action processing and pending on-chain/wallet integration work, making it a high-confidence Tier 2 RWA withdrawal-friction signal rather than a final enforcement action.
Listing post-mortem use: Use to evaluate whether tokenized-equity listings model dividends, stock splits, reverse splits, wallet integration readiness, withdrawal continuity, and user-exit limitations separately from trading availability.
Source
2026-07-01
Tier 3
KuCoin Story (IP) rename to Data Network (DATA) and Streamr DATA ticker migration
KuCoin support for Story (IP) renaming to Data Network (DATA) requires Streamr DATA to be renamed DATAOLD and temporarily pauses Streamr DATA withdrawals from 10:00 on July 1, 2026 until the ticker update is complete.
Global
KuCoin
Centralized exchange token migration / ticker rename operations
high confidence
ticker collisionwithdrawal pausetoken rename support frictionasset identity confusionmigration operations riskuser-exit timing risklisting support monitoring
KuCoin announced support for renaming Story (IP) to Data Network (DATA) and said the existing Streamr DATA ticker would move to DATAOLD before July 2, 2026. Streamr DATA withdrawals are paused from 10:00 on July 1 until the ticker update completes, making this a Tier 3 token-migration operations signal.
Listing post-mortem use: Use to evaluate whether token migration reviews captured ticker collisions, legacy asset withdrawal pauses, user confusion, exchange implementation timing, and market-data continuity.
Source
2026-07-01
Tier 1
STRAX, NOCK, RNBW and NAT USDT-M Perpetual Futures on MEXC
MEXC delisted STRAX, NOCK, RNBW and NAT USDT-M perpetual futures on 2026-07-01 at 07:00 UTC, with fair-price position closure, open-order cancellation, and Demo/Futures Grid removal where applicable.
Global
MEXC
Centralized exchange derivatives / multi-asset perpetual futures support
high confidence
perpetual futures delistingforced position closureopen-order cancellationfutures grid shutdownderivatives liquidity contractionmulti-asset venue support reductionmarket-maker strategy interruptionlisting support monitoring
MEXC listed a July 1, 2026 delisting for STRAX, NOCK, RNBW and NAT USDT-M perpetual futures at 07:00 UTC. The action closes positions at fair price, cancels open orders, and removes affected Demo/Futures Grid support where applicable, making it a confirmed Tier 1 exchange-action signal.
Listing post-mortem use: Use to test whether STRAX, NOCK, RNBW, or NAT listings relied on MEXC perpetual liquidity, grid strategies, or market-maker inventory channels that were impaired by forced settlement.
Source
2026-06-30
Tier 3
USDT withdrawals on Bitget via Morph Network
Bitget suspended USDT withdrawals over the Morph network from 2026-06-30 12:30 UTC+8 due to wallet maintenance, then published a same-day reopening notice at 2026-06-30 07:05 UTC.
Global
Bitget
Centralized exchange wallet infrastructure / network-specific stablecoin withdrawal support
high confidence
withdrawal suspensionnetwork-specific support interruptionwallet maintenancesame-day restorationMorph transfer-route frictionstablecoin settlement frictionlisting support monitoring
Bitget published a June 30, 2026 notice suspending USDT withdrawals over Morph Network from 12:30 UTC+8 for wallet maintenance, followed by a same-day reopening notice. The short interruption is a Tier 3 operational watchlist signal rather than a protocol-level adverse event.
Listing post-mortem use: Use to test whether Morph-connected listings and stablecoin settlement plans included redundant withdrawal routes, incident-duration tracking, and same-day restoration validation.
Source
2026-06-30
Tier 1
ALEO, PITCH, POND and GITLAWB USDT-M Perpetual Futures on MEXC
MEXC delisted ALEO, PITCH, POND and GITLAWB USDT-M perpetual futures on 2026-06-30 at 07:00 UTC, with fair-price position closure, open-order cancellation, and Demo/Futures Grid removal where applicable.
Global
MEXC
Centralized exchange derivatives / multi-asset perpetual futures support
high confidence
perpetual futures delistingforced position closureopen-order cancellationfutures grid shutdownderivatives liquidity contractionmulti-asset venue support reductionmarket-maker strategy interruptionlisting support monitoring
MEXC listed a June 30, 2026 delisting for ALEO, PITCH, POND and GITLAWB USDT-M perpetual futures at 07:00 UTC. The action closes positions at fair price, cancels open orders, and removes affected Demo/Futures Grid support where applicable, making it a confirmed Tier 1 exchange-action signal.
Listing post-mortem use: Use to test whether ALEO, PITCH, POND or GITLAWB listings depended on MEXC perpetual liquidity, grid strategies, or market-maker inventory routes that were impaired by forced settlement.
Source
2026-06-30
Tier 1
NAKA/USDC spot trading pair on MEXC
MEXC announced that, based on recent assessments, it would delist the NAKA/USDC spot trading pair on 2026-06-30 at 10:00 UTC and automatically cancel all open orders for the affected pair.
Global
MEXC
Centralized exchange spot market / pair-level liquidity support
high confidence
spot pair delistingopen-order cancellationquote-currency route removalUSDC liquidity contractionpair-level venue support reductionmarket-depth fragmentationlisting support monitoring
MEXC listed NAKA/USDC for spot-pair delisting on June 30, 2026 at 10:00 UTC after recent assessments, with open orders automatically canceled. This is a confirmed Tier 1 exchange-action signal for pair-level liquidity contraction.
Listing post-mortem use: Use to evaluate whether NAKA listings had adequate quote-currency diversity, USDC market depth, open-order cancellation handling, and fallback liquidity routes after pair-level delisting.
Source
2026-06-29
Tier 3
STAYNEX deposit service on KuCoin
KuCoin temporarily closed the deposit service for STAYNEX (STAY) due to essential maintenance and stated it would not issue a further restoration announcement.
Global
KuCoin
Centralized exchange wallet infrastructure / deposit support
high confidence
deposit suspensionwallet maintenancerestoration disclosure limitedvenue access frictionmarket-maker funding-route frictionlisting support monitoring
KuCoin published a June 29, 2026 notice temporarily closing STAYNEX (STAY) deposits due to essential maintenance. The exchange said further restoration developments would not be announced separately, making this a Tier 3 venue-access watchlist signal.
Listing post-mortem use: Use to test whether STAY exchange-support reviews captured deposit-route continuity, restoration-notice gaps, market-maker funding constraints, and fallback venue coverage.
Source
2026-06-28
Tier 3
ACT withdrawals on Bitget via Solana
Bitget suspended ACT withdrawals over the Solana network from 2026-06-28 10:27 UTC+8 due to wallet maintenance, with reopening date to be announced separately.
Global
Bitget
Centralized exchange wallet infrastructure / network-specific withdrawal support
high confidence
withdrawal suspensionnetwork-specific support interruptionwallet maintenancereopening time uncertainSolana transfer-route frictionAI-agent token venue-access frictionlisting support monitoring
Bitget published a June 28, 2026 notice suspending ACT withdrawals over Solana from 10:27 UTC+8 because of wallet maintenance. The notice gives no fixed reopening time. Combined with ACT appearing in Binance Monitoring Tag coverage earlier in June, this is a Tier 3 listing-support watchlist signal.
Listing post-mortem use: Use to test whether ACT listing reviews captured monitoring-tag escalation, network-specific withdrawal reliability, AI-agent token volatility, market-maker settlement routes, and venue-restoration monitoring.
Source
2026-06-28
Tier 1
IPUSDT and IPUSDC Perpetual Futures on MEXC
MEXC delisted IPUSDT and IPUSDC perpetual futures on 2026-06-28 at 08:00 UTC, closing positions at fair price, canceling open orders, and removing affected Demo and Futures Grid trading support where applicable.
Global
MEXC
Centralized exchange derivatives / token migration derivatives support
high confidence
perpetual futures delistingforced position closureopen-order cancellationfutures grid shutdownderivatives liquidity contractiontoken migration support frictionmarket-maker strategy interruptionmulti-venue IP derivatives contraction
MEXC listed a June 28, 2026 delisting for IPUSDT and IPUSDC perpetual futures at 08:00 UTC, with fair-price position closure, open-order cancellation, and Demo/Futures Grid removal where applicable. KuCoin, Flipster, and XT also showed IP perpetual-delisting notices around the same date, making this a confirmed Tier 1 exchange-action signal for IP derivatives support contraction.
Listing post-mortem use: Use to test whether IP listings captured token migration timing, derivatives venue concentration, forced settlement exposure, grid-bot risk, market-maker contingency plans, and multi-venue derivatives support contraction.
Source
2026-06-27
Tier 3
EZSWAP withdrawals on Bitget via Manta Network
Bitget suspended EZSWAP withdrawals over the Manta Network from 2026-06-28 01:50 UTC+8 due to wallet maintenance, with reopening date to be announced separately.
Global
Bitget
Centralized exchange wallet infrastructure / network-specific withdrawal support
high confidence
withdrawal suspensionnetwork-specific support interruptionwallet maintenancereopening time uncertainManta Network transfer-route frictionmarket-maker settlement frictionlisting support monitoring
Bitget published a June 27, 2026 notice suspending EZSWAP withdrawals over Manta Network from June 28, 2026 at 01:50 UTC+8 because of wallet maintenance. The reopening date was left to a later announcement, making it a structured venue-access watchlist signal.
Listing post-mortem use: Use to test whether EZSWAP or Manta-connected listings had redundant withdrawal routes, exchange-specific restoration monitoring, and market-maker settlement contingency plans.
Source
2026-06-27
Tier 3
Beldex deposit and withdrawal services on KuCoin
KuCoin announced that Beldex deposit and withdrawal services were temporarily closed due to essential maintenance, without a restoration notice commitment.
Global
KuCoin
Centralized exchange wallet infrastructure / privacy-coin access
high confidence
deposit suspensionwithdrawal suspensionessential maintenancerestoration notice uncertaintyprivacy-coin venue-access frictionexchange wallet infrastructure riskmarket-maker settlement friction
KuCoin published a June 27, 2026 notice saying it had temporarily closed Beldex deposit and withdrawal services due to essential maintenance and would not issue a further announcement when services are restored. This is an exchange-access watchlist signal rather than a final delisting or enforcement action.
Listing post-mortem use: Use to test whether BDX or comparable privacy-asset reviews tracked venue-specific wallet maintenance, restoration disclosure, withdrawal continuity, and market-maker transfer alternatives.
Source
2026-06-22
Tier 1
WOJAKUSDT Perpetual Futures on MEXC
MEXC announced the WOJAKUSDT Perpetual Futures pair would be delisted on 2026-06-22 at 07:00 UTC, with positions closed at fair price, open orders canceled, and futures grid trading removed for the affected pair.
Global
MEXC
Centralized exchange derivatives / memecoin perpetual futures
high confidence
perpetual futures delistingforced position closureopen-order cancellationfutures grid shutdownderivatives liquidity contractionmemecoin venue-access frictionmarket-maker strategy interruption
MEXC's delisting notice states that WOJAKUSDT perpetual futures would be removed on June 22, 2026 at 07:00 UTC, with open positions closed at fair price, open orders canceled, and Demo/Futures Grid Trading also delisted where applicable. This is a confirmed Tier 1 exchange action because it directly closes derivatives access and user positions.
Listing post-mortem use: Use to test whether WOJAK or comparable memecoin listings had concentration in one derivatives venue, grid-bot exposure, market-maker contingency plans, and adequate user notice before forced perpetual closure.
Source
2026-06-22
Tier 1
Taiko L1 Bridge and ERC20Vault
Taiko confirmed a compromise of its chain-state verification mechanism, warned that all bridges deployed on Taiko could no longer rely on prior security assumptions, advised users to withdraw bridge funds, and later confirmed the L1 Bridge and ERC20Vault were paused with withdrawals fully stopped.
Global
Taiko
Layer 2 / bridge infrastructure / cross-chain asset custody
high confidence
bridge exploitchain-state verification compromisewithdrawals stoppedbridge pausecross-chain proof validationcentralized-exchange deposit suspension requestsecurity council responseL2 finality and settlement risk
Taiko published a June 22, 2026 security notice confirming a compromise of its chain-state verification mechanism and warning that bridge security assumptions could no longer be relied upon. A follow-up official update said the exploit was contained, the L1 Bridge and ERC20Vault were paused, and withdrawals through them were fully stopped, making this a confirmed Tier 1 protocol action with direct asset-access consequences.
Listing post-mortem use: Use to test whether TAIKO listings and bridge-dependent assets captured chain-state verification risk, emergency pause authority, exchange deposit-suspension playbooks, withdrawal continuity, and incident disclosure speed.
Source
2026-06-21
Tier 3
ACE withdrawals on Bitget via Binance Smart Chain
Bitget suspended ACE withdrawals over the Binance Smart Chain network from 2026-06-21 08:17 UTC+8 due to wallet maintenance, with reopening date to be announced separately.
Global
Bitget
Centralized exchange wallet infrastructure / network-specific withdrawal support
high confidence
withdrawal suspensionnetwork-specific support interruptionwallet maintenancereopening time uncertainexchange transfer-route frictionmarket-maker settlement frictionlisting support monitoring
Bitget published a June 21, 2026 official support notice suspending ACE withdrawals over Binance Smart Chain from 08:17 UTC+8 because of wallet maintenance. The exchange did not provide a fixed reopening time, making the item a structured Tier 3 venue-access watchlist signal rather than a confirmed enforcement or delisting event.
Listing post-mortem use: Use to test whether ACE or comparable listings had redundant withdrawal routes, clear market-maker settlement procedures, restoration-time disclosure, and monitoring for repeated exchange wallet-maintenance interruptions.
Source
2026-06-19
Tier 1
Binance QKC deposit/withdrawal support via BNB Smart Chain
Binance announced it will cease support for QuarkChain (QKC) deposits and withdrawals via BNB Smart Chain from 2026-06-26 08:00 UTC; deposits sent through that network after the cutoff will not be credited and may lead to asset loss.
Global
Binance
Centralized exchange wallet infrastructure / token network support
high confidence
deposit route removalwithdrawal route removalnetwork support cessationasset loss warningBNB Smart Chain support contractionexchange wallet infrastructure riskuser transfer-route confusionlisting support friction
Binance published a June 19, 2026 official notice saying it will stop supporting QKC deposits and withdrawals via BNB Smart Chain from June 26, 2026. The notice warns that deposits sent through the affected route after the cutoff will not be credited and may cause asset loss, while other Binance-supported networks remain available.
Listing post-mortem use: Use to test whether QKC or comparable listings tracked network-specific deposit and withdrawal support, cutoff notices, asset-loss warnings, transfer-route redundancy, and market-maker wallet-route dependencies.
Source
2026-06-19
Tier 1
KuCoin XION to VERONA rename across trading bots, deposits, withdrawals, spot pairs, and WebSocket services
KuCoin support for the XION-to-VERONA rename includes XION/USDT trading-bot delisting, XION deposit and withdrawal closure, XION/USDT and XION/USDC spot trading suspension, and a stated PRO and Classic WebSocket disruption window during the migration.
Global
KuCoin
Centralized exchange token migration / spot trading / deposit-withdrawal support
high confidence
token rename migrationtrading-bot shutdowndeposit closurewithdrawal closurespot trading suspensionpending order cancellation guidancewebsocket disruption riskticker-selection risk after migrationexchange product support contraction
KuCoin published a June 19, 2026 notice supporting the rename of Xion (XION) to Verona (VERONA) at a 1:1 ratio. The exchange said XION/USDT trading bots would be delisted at 10:00 UTC on June 20, XION deposits and withdrawals would close at 08:00 UTC on June 21, XION/USDT and XION/USDC spot trading would be suspended at 10:00 UTC on June 21, and PRO and Classic WebSocket services may experience temporary disconnections, data loss, or delays from 08:00 to 10:00 UTC on June 22.
Listing post-mortem use: Use to test whether XION/VERONA listing reviews captured rename timing, trading-bot shutdowns, spot suspension, deposit/withdrawal closure, pending-order cancellation guidance, WebSocket/data-feed risk, and post-migration ticker-selection errors.
Source
2026-06-18
Tier 3
ACT, BLUR, PIVX and QKC on Binance Monitoring Tag list
Binance extended its Monitoring Tag to ACT, BLUR, PIVX and QKC, stating tagged tokens exhibit higher volatility and risks, require recurring user risk acknowledgement, and are at risk of no longer meeting listing criteria.
Global
Binance
Centralized exchange listing risk / monitored tokens
high confidence
monitoring tagdelisting watchlisthigher volatilitylisting criteria riskliquidity reviewteam responsiveness reviewnetwork safety reviewuser risk-quiz friction
Binance published a June 18, 2026 notice extending the Monitoring Tag to ACT, BLUR, PIVX and QKC. The exchange said tagged tokens carry higher volatility and risk, may fail future listing criteria, and require users to pass a recurring quiz and accept terms before trading on Binance Spot or Margin.
Listing post-mortem use: Use to compare whether prior listing reviews anticipated monitoring-tag escalation factors: liquidity, development activity, network stability, public communication, responsiveness to exchange diligence, and unethical or negligent conduct indicators.
Source
2026-06-18
Tier 1
Celsius Network and Alexander Mashinsky
CFTC announced a federal consent order resolving its enforcement action against Celsius founder Alexander Mashinsky, imposing permanent anti-fraud injunctions plus permanent trading and registration bans.
US
Commodity Futures Trading Commission; U.S. District Court for the Southern District of New York
CeFi lending / digital asset yield products
high confidence
regulatory enforcementfraud injunctiontrading banregistration banCeFi yield misrepresentationcustomer asset safety claimsbankruptcy-linked customer harmfounder conduct risk
The CFTC said the Southern District of New York entered a consent order resolving its 2023 action against Celsius founder Alexander Mashinsky. The order permanently enjoins him from anti-fraud violations and imposes permanent trading and registration bans; the release also recaps allegations that Celsius misrepresented the safety, profitability, and regulatory compliance of a digital asset lending platform that received about USD 20 billion in customer funds before bankruptcy.
Listing post-mortem use: Use as a benchmark for reviewing token listings or yield products tied to founder representations, customer asset custody, promised rewards, reserve transparency, and bankruptcy contagion after platform failure.
Source
2026-06-17
Tier 1
Binance BTTC and TRX deposit/withdrawal support via BNB Smart Chain
Binance announced it will cease support for BitTorrent (BTTC) and TRON (TRX) deposits and withdrawals via BNB Smart Chain from 2026-06-24 08:00 UTC; deposits sent through those routes after the cutoff will not be credited and may lead to asset loss.
Global
Binance
Centralized exchange wallet infrastructure / token network support
high confidence
deposit route removalwithdrawal route removalnetwork support cessationasset loss warningBNB Smart Chain support contractionexchange wallet infrastructure riskuser transfer-route confusionlisting support friction
Binance published a June 17, 2026 official notice saying it will stop supporting BTTC and TRX deposits and withdrawals via BNB Smart Chain from June 24, 2026, and warned that deposits sent over those routes after the cutoff will not be credited and may cause asset loss.
Listing post-mortem use: Use to test whether listing and post-listing reviews tracked network-specific deposit and withdrawal support, cutoff timing, user asset-loss warnings, cross-chain route redundancy, and market-maker transfer-path dependencies.
Source
2026-06-14
Tier 1
KuCoin Earn flexible savings products for MNDE and DATA
KuCoin Earn scheduled MNDE and DATA flexible savings delisting for June 14, 2026, with user principal and earnings automatically transferred to Funding Accounts after delisting or fixed-term lock expiry.
Global
KuCoin Earn
Centralized exchange earn products / yield product restrictions
high confidence
earn product delistingyield product restrictionautomatic redemption transferexchange product support losslong-tail asset support degradationuser reinvestment disruption
KuCoin Earn confirmed MNDE and DATA flexible savings delisting effective June 14, making this a confirmed exchange product-access restriction with direct user-account consequences.
Listing post-mortem use: Use to evaluate whether post-listing reviews tracked shrinking exchange product surfaces, automatic user asset transfers, earn demand dependence, and clustering of yield-product delistings.
Source
2026-06-14
Tier 3
SIREN deposit service on KuCoin
KuCoin temporarily closed the deposit service for SIREN due to essential maintenance and said users would not receive a further restoration announcement.
Global
KuCoin
Centralized exchange operations / AI-agent token deposit infrastructure
high confidence
deposit suspensiontoken inflow restrictionexchange operational maintenanceunclear restoration noticelisting support frictionAI-agent token venue risk
KuCoin confirmed a same-day SIREN deposit suspension for essential maintenance, creating a low-severity but structured negative signal for exchange access and listing-support continuity.
Listing post-mortem use: Use to test whether SIREN listing reviews tracked deposit-path outages, maintenance explanations without restoration notices, recent price/volume stress, and exchange operational dependency.
Source
2026-06-14
Tier 1
KuCoin TON to GRAM rename across trading bots, deposits, withdrawals, and spot pairs
KuCoin support for the TON-to-GRAM rename includes trading-bot delistings, TON deposit and withdrawal closure, TON/USDT and TON/USDC spot trading suspension, and a 1:1 conversion workflow with follow-up announcements pending.
Global
KuCoin
Centralized exchange token migration / spot trading / deposit-withdrawal support
high confidence
token rename migrationdeposit closurewithdrawal closurespot trading suspensiontrading-bot shutdownpending order cancellationmigration completion dependencyexchange product support contraction
KuCoin confirmed the effective June 14 TON-to-GRAM spot and deposit-withdrawal suspension steps, adding a distinct exchange-access row to the existing TON/GRAM support-contraction cluster.
Listing post-mortem use: Use to test whether TON/GRAM reviews captured cross-venue migration timing, bot shutdowns, spot suspension, deposit/withdrawal closure, order-cancellation guidance, and ticker-selection risks after conversion.
Source
2026-06-14
Tier 3
USDD ERC20 and Switchboard Protocol deposit services on KuCoin
KuCoin temporarily closed deposit services for USDD on Ethereum ERC20 and Switchboard Protocol due to essential maintenance, with no further restoration announcement planned.
Global
KuCoin
Centralized exchange operations / stablecoin and oracle-network deposit infrastructure
high confidence
deposit suspensionstablecoin inflow restrictionoracle token deposit frictionEthereum ERC20 support interruptionunclear restoration noticeexchange wallet maintenance
KuCoin reported a same-day maintenance-driven deposit suspension affecting USDD on Ethereum ERC20 and Switchboard Protocol, making it a structured exchange-access friction signal.
Listing post-mortem use: Use in post-mortems to check whether stablecoin/oracle listings maintained redundant deposit routes and whether venue notices disclosed restoration timing clearly enough for users and market makers.
Source
2026-06-13
Tier 3
STGUSDT perpetual contract on KuCoin Futures
KuCoin Futures changed STGUSDT perpetual funding intervals from every eight hours to every one hour, increasing funding cadence during a period of futures-risk warning and potential volatility.
Global
KuCoin Futures
Centralized exchange derivatives / perpetual contracts
high confidence
funding interval compressionperpetual market stressderivatives volatility riskliquidation cadence riskmarket-maker monitoringexchange risk-parameter change
KuCoin Futures compressed STGUSDT funding intervals from eight hours to one hour, creating an early-warning derivatives risk signal rather than a final delisting or enforcement action.
Listing post-mortem use: Use to test whether listing and market-making reviews tracked funding interval changes, derivatives exposure, forced-liquidation sensitivity, and venue-specific risk-parameter shifts.
Source
2026-06-12
Tier 1
Humanity Protocol $H token on Ethereum and BNB Smart Chain
Humanity Protocol published Quantstamp findings that stolen director keys enabled unauthorized $H movement and minting across Ethereum and BNB Smart Chain; the attack crashed open-market $H price by about 89%, left attacker addresses holding more than USD 21 million in ETH proceeds, and will lead the project to abandon the compromised BSC deployment.
Global / KR / BNB Chain / Ethereum
Humanity Protocol / Quantstamp incident response
Identity protocol / token bridge security / BNB Chain deployment risk
high confidence
admin key compromisetargeted phishing impersonating exchange counterpartyremote-access malwarebridge control compromiseunauthorized token mintingDEX sell pressure89 percent token price crashoperational wallet drainBSC deployment abandonmentDPRK-linked intrusion indicatorsexchange-partner recovery dependency
Humanity Protocol published a June 12, 2026 incident summary prepared by Quantstamp for the June 8 $H compromise. The report says an attacker phished a director with a Bithumb-themed email, installed remote-access malware, stole keys, moved about 141.18 million $H on Ethereum, minted about 100 million unauthorized $H on BNB Smart Chain, sold tokens on Uniswap and PancakeSwap over roughly eight hours, crashed the open-market $H price by about 89%, and left known attacker addresses with more than USD 21 million in ETH proceeds while BSC proceeds were still being tallied.
Listing post-mortem use: Use in listing post-mortems to test whether diligence covered director-device security, exchange-counterparty phishing controls, multisig signer segregation, bridge/proxy upgrade permissions, chain-specific abandonment plans, approval-revocation guidance, and exchange coordination after unauthorized minting.
Source
2026-06-11
Tier 1
OKX TON to GRAM migration across margin, futures, spot, earn, and loan products
OKX announced a TON-to-GRAM migration that immediately ceased TON borrowing and schedules margin, perpetual futures, expiry perps, spot pairs, Convert, Copy trading, Trading bots, Simple Earn, and Flexible Loan support changes, with pending orders canceled and some loan positions subject to forced repayment or collateral discount changes.
Global
OKX
Centralized exchange token migration / margin / derivatives / spot support
high confidence
exchange token migrationborrowing feature cessationmargin trading suspensionperpetual futures delistingspot trading pair delistingpending order cancellationforced loan repayment riskcollateral discount resetearn product automatic redemptionmigration completion dependency
OKX published a June 11, 2026 notice supporting TON migration to GRAM at 1:1. The notice says TON borrowing ceased at 10:30 UTC on June 11, margin trading will be suspended on June 15, TON perps and X-Perps will be delisted on June 16, spot pairs will be delisted on June 16, related services will be suspended, Simple Earn orders will be redeemed, and Flexible Loan users may face forced repayment or a collateral discount reset to zero if they do not adjust before delisting.
Listing post-mortem use: Use in listing and migration post-mortems to test whether exchange support plans cover margin debt, collateral haircuts, derivatives settlement, bot shutdowns, earn redemption, order cancellation, and delays between old-token delisting and new-token relisting.
Source
2026-06-10
Tier 3
USDC-Aptos network withdrawal service on Bitget
Bitget suspended USDC-Aptos network withdrawals for wallet maintenance, with reopening date to be announced separately.
Global
Bitget
Centralized exchange operations / stablecoin network withdrawal infrastructure
high confidence
withdrawal suspensionstablecoin exit-path disruptionnetwork-specific wallet maintenanceunclear restoration timingexchange operational friction
Bitget announced on June 10 that it would suspend the withdrawal function for USDC on the Aptos network starting at 12:50 UTC+8 due to wallet maintenance. The reopening date was not specified and would be announced separately.
Listing post-mortem use: Use as a comparable for post-listing stablecoin network support, exit-route availability, and exchange wallet-maintenance responsiveness.
Source
2026-06-10
Tier 1
Raydium legacy AMM V3 liquidity pools
Raydium acknowledged an exploit involving unauthorized removal of liquidity from deprecated legacy AMM V3 pools, with about $1.34 million in RAY, SOL, and USDC affected and treasury reimbursement promised.
Global
Raydium / protocol security investigators
DeFi security / Solana DEX liquidity infrastructure
high confidence
protocol exploitdeprecated contract exposureLP mint validation flawunauthorized liquidity removaltreasury reimbursementTornado Cash laundering tracelegacy infrastructure riskSolana DEX liquidity risk
Raydium-linked statements reported by crypto.news, Decrypt, and Protos describe a June 10 exploit against deprecated legacy AMM V3 pools. The attacker used an LP mint validation flaw to remove roughly $1.34 million in RAY, SOL, and USDC; Raydium said active users and current pools were unaffected and that treasury funds would reimburse impacted legacy-pool exposure.
Listing post-mortem use: Use in DEX and Solana ecosystem post-mortems to test whether listing diligence covered deprecated programs, inaccessible UI pools, LP mint validation logic, treasury reimbursement capacity, and mixer-linked recovery/escalation workflows.
Source
2026-06-09
Tier 3
Legend of Arcadia deposit service on KuCoin
KuCoin temporarily closed the deposit service for Legend of Arcadia (ARCA) due to essential maintenance and said restoration would not receive a further announcement.
Global
KuCoin
Centralized exchange operations / game token deposit infrastructure
high confidence
deposit suspensionexchange operational maintenancetoken inflow restrictionunclear restoration noticelisting support friction
KuCoin published a June 9 notice saying it had suspended the deposit service for Legend of Arcadia (ARCA) due to essential maintenance. The notice apologized for inconvenience and said users would not receive a further announcement when the service was restored.
Listing post-mortem use: Use as a low-severity comparable for token listings with recurring wallet maintenance, deposit-path outages, or ambiguous restoration communications.
Source
2026-06-09
Tier 1
TON product support on KuCoin margin, convert, trading bot, and UTA collateral
KuCoin announced a coordinated TON support contraction: spot margin services delisting, convert delisting, trading-bot pair delisting, and removal from Unified Trading Account collateral options.
Global
KuCoin
Centralized exchange margin / convert / collateral support
high confidence
margin-service delistingcollateral eligibility removalconvert-service delistingtrading-bot shutdownliquidation riskexchange product support contraction
KuCoin said TON margin services would be delisted at 06:00 UTC on June 10, with margin trading, lending, borrowing, transfer functions, and repayment functions affected and possible forced liquidation for high debt-ratio accounts. Separate same-day notices also removed TON from Convert, TONUSDT trading bots, and UTA collateral eligibility.
Listing post-mortem use: Use as a comparable for cases where a large-cap asset remains listed but loses enough exchange product surfaces to impair leverage, collateral, RFQ conversion, and automated strategy access.
Source
2026-06-08
Tier 3
NEAR network deposit and withdrawal services on Bitget
Bitget announced NEAR network deposits and withdrawals will be suspended from June 10, 2026 due to wallet maintenance, with no reopening date announced.
Global
Bitget
Centralized exchange operations / token deposit and withdrawal infrastructure
high confidence
deposit suspensionwithdrawal suspensionwallet maintenanceunclear reopening datenetwork transfer frictionexchange operational continuityscheduled user-access impairment
Bitget published a June 8, 2026 notice scheduling suspension of NEAR network deposit and withdrawal services from 07:00 UTC+8 on June 10 because of wallet maintenance. The reopening date was not provided, making this a Tier 3 watchlist signal for operational transfer support rather than a confirmed delisting or enforcement action.
Listing post-mortem use: Use when checking whether deposit/withdrawal maintenance windows created avoidable user exit friction, whether restoration timing was disclosed, and whether transfer-support interruptions correlated with liquidity changes on the venue.
Source
2026-06-08
Tier 1
KuCoin DUSDT, MBOXUSDT, and HIGHUSDT perpetual contracts
KuCoin Futures announced it will delist DUSDT, MBOXUSDT, and HIGHUSDT perpetual contracts on June 11, 2026, suspend new positions shortly before delisting, cancel open orders, and settle remaining positions using the final 30-minute average index price.
Global
KuCoin Futures
Centralized exchange derivatives / perpetual contracts
high confidence
perpetual contract delistingforced position settlementopen-order cancellationnew-position suspensionderivatives liquidity lossindex-price manipulation contingencytrading bot support losspre-delisting volatility risk
KuCoin Futures published a June 8, 2026 notice scheduling DUSDT, MBOXUSDT, and HIGHUSDT perpetual-contract delisting for 07:00 UTC on June 11. New positions will be suspended from 06:50 UTC, open orders will be canceled, and remaining positions will be settled using a 30-minute average index-price mechanism, creating a confirmed Tier 1 adverse exchange action.
Listing post-mortem use: Use to test whether derivatives venue support, automated strategy dependency, index-quality risk, leverage exposure, and user wind-down windows were reviewed before maintaining these assets in listing or market-making coverage.
Source
2026-06-08
Tier 1
KuCoin Earn flexible savings products for YB and ZIL
KuCoin Earn announced YB and ZIL will be delisted from flexible savings, with user principal and earnings automatically transferred to Funding Accounts after delisting or lock expiry.
Global
KuCoin Earn
Centralized exchange earn products / yield product restrictions
high confidence
earn product delistingyield product restrictionautomatic redemption transferexchange product support losslong-tail asset support degradationpost-margin-delisting clustering
KuCoin Earn published a June 8, 2026 notice saying YB and ZIL would be removed from KuCoin Earn flexible savings. User principal and earnings are to be moved to Funding Accounts after delisting or lock expiry. Because YB and ZIL were also part of a recent KuCoin margin-service delisting cluster, this is a confirmed Tier 1 exchange product-restriction signal.
Listing post-mortem use: Use to evaluate whether exchange product breadth was shrinking before broader market-access deterioration: compare Earn removal with prior margin delisting, lending/borrowing shutdown, bot restrictions, liquidity depth, and user redemption treatment.
Source
2026-06-06
Tier 1
HTX WLFI and USD1 markets after World Liberty Financial address freeze
HTX said World Liberty Financial unilaterally froze specific HTX on-chain addresses after sanctions-compliance reviews, prompting HTX to suspend WLFI/USDT, USD1/USDT, BTC/USD1, and ETH/USD1 trading and convert user USD1 holdings to USDT.
Global / US / UK
HTX; World Liberty Financial
Centralized exchanges / stablecoin issuer controls / sanctions compliance
high confidence
issuer-controlled address freezestablecoin blacklist authorityexchange trading suspensionforced user balance conversionsanctions-compliance disputecustody and user asset-rights conflictlisting support instabilitypotential legal remedies
HTX published a June 6, 2026 statement saying the WLFI project team had frozen specific HTX on-chain addresses after sanctions-compliance reviews. HTX suspended WLFI and USD1-related trading pairs from 13:00 UTC on June 5 and said user USD1 balances would be converted to USDT, making this a confirmed Tier 1 negative-intel signal for stablecoin issuer controls and exchange listing support.
Listing post-mortem use: Use to test whether issuer freeze authority, sanctions-screening governance, exchange wallet concentration, pair suspension handling, and forced conversion rules were reviewed before listing or maintaining WLFI/USD1 markets.
Source
2026-06-06
Tier 3
XO Protocol deposit service on KuCoin
KuCoin temporarily closed deposit service for XO Protocol (XOXO) due to essential maintenance and said it would not issue a further restoration announcement.
Global
KuCoin
Centralized exchange operations / token deposit infrastructure
high confidence
deposit suspensionexchange maintenancetoken transfer frictionunclear restoration timingvenue-dependence riskpublic-restoration-notice gap
KuCoin published a June 6, 2026 notice stating that it had suspended deposits for XO Protocol (XOXO) due to essential maintenance. The exchange said it would not notify users in a further announcement when services were restored, making the signal useful for ongoing listing-support monitoring.
Listing post-mortem use: Use when reviewing whether deposit-service interruptions, no-follow-up restoration notices, and exchange-wallet maintenance preceded later liquidity deterioration or delisting.
Source
2026-06-05
Tier 1
Bitget spot and margin markets for HIPPO, C98, SYS, POWR, AMP, TOWN, U2U, INJ/USDC, AR/USDC, ARB/USDC, and XRP/BTC
Bitget announced a scheduled June 12, 2026 delisting of eleven spot pairs, with deposits already suspended for seven tokens and margin liquidation risk for INJ/USDC, AR/USDC, and ARB/USDC.
Global
Bitget
Centralized exchange listings / spot and margin-market asset review
high confidence
scheduled exchange delistingdeposit suspensionspot liquidity lossopen order cancellationtrading bot removalcopy trading removalspot margin closureforced liquidation riskcollateral and debt unwind
Bitget published a June 5, 2026 official notice scheduling removal of eleven spot pairs on June 12: HIPPO/USDT, C98/USDT, SYS/USDT, POWR/USDT, AMP/USDT, TOWN/USDT, U2U/USDT, INJ/USDC, AR/USDC, ARB/USDC, and XRP/BTC. Deposits for seven tokens are already suspended, spot bots and selected copy-trading pairs will be removed, and spot margin services for INJ/USDC, AR/USDC, and ARB/USDC will close with automatic liquidation handling if users do not repay and close positions.
Listing post-mortem use: Use in post-mortems to test whether periodic-review criteria, low quote-pair volume, deposit restrictions, bot/copy-trading reliance, and margin debt exposure preceded broader venue support loss.
Source
2026-06-05
Tier 1
Bitget spot markets for SWARMS, VFY, BDXN, ESPORTS, POL/USDC, and DOGE/BTC
Bitget delisted six spot trading pairs on June 5, 2026 after periodic review, with deposit suspensions, order cancellation, unified-account removal, bot removal, and copy-trading removal for affected pairs.
Global
Bitget
Centralized exchange listings / spot-market asset review
high confidence
centralized exchange delistingdeposit suspensionspot liquidity lossopen order cancellationtrading bot removalcopy trading removalunified account transfer restrictionwithdrawal deadline
Bitget announced that SWARMS/USDT, VFY/USDT, BDXN/USDT, ESPORTS/USDT, POL/USDC, and DOGE/BTC would be delisted at 10:00 UTC on June 5, 2026. The notice includes suspended deposits for SWARMS, VFY, BDXN, and ESPORTS, automatic cancellation of pending orders, removal from unified account spot trading, bot removal, copy-trading removal for SWARMS/USDT, and a September 5 withdrawal deadline for several affected tokens.
Listing post-mortem use: Use to evaluate whether weak volume, liquidity quality, project responsiveness, bot dependence, and copy-trading exposure were visible before Bitget removed market support.
Source
2026-06-05
Tier 1
KuCoin margin services for YB, ZIL, YFI, and NEO
KuCoin announced it will delist isolated margin services for YB and ZIL and cross margin services for YFI and NEO, closing margin trading, lending, borrowing, transfers, and repayment functions for the affected tokens on scheduled dates from June 8 to June 11, 2026.
Global
KuCoin margin risk and exchange operations
Centralized exchange margin markets / product restriction
high confidence
centralized exchange margin delistingproduct restrictionmargin trading closurelending and borrowing closureforced order cancellationliquidation processtrading bot shutdownAPI index subscription changesharp-price-move early delisting risk
KuCoin published a June 5, 2026 official notice stating that isolated margin trading services for YB and ZIL and cross margin services for YFI and NEO will be delisted on scheduled dates from June 8 to June 11. The notice says margin trading, lending, borrowing, transfers, and loan repayment for the affected tokens will be closed or suspended; if users do not close positions and repay loans, KuCoin will cancel orders, initiate liquidation handling, transfer remaining assets, and may convert remaining delisted assets into USDT where debt-ratio conditions require it. This is a Tier 1 confirmed exchange product-restriction signal with direct adverse consequences for leveraged users.
Listing post-mortem use: Use in listing and post-mortem reviews to test whether margin-service delisting was an early signal before broader liquidity deterioration: check open-order cancellation, leverage availability, lending/borrowing closure, bot deactivation, API subscription changes, and debt-ratio liquidation handling.
Source
2026-06-05
Tier 1
LBank COSUSDT perpetual contract
LBank Futures announced automatic settlement and delisting of the COSUSDT perpetual contract at 12:00 UTC on June 6, 2026.
Global
LBank
Centralized exchange derivatives / perpetual contracts
high confidence
perpetual contract delistingautomatic settlementderivatives liquidity lossforced position closureopen-position deadline
LBank said its futures venue would automatically settle the COSUSDT perpetual contract and delist it at 12:00 UTC on June 6, 2026 after settlement completion. Users were advised to close open positions before the delisting time to avoid automatic settlement.
Listing post-mortem use: Use when reviewing whether derivatives support loss, forced settlement, and short user notice preceded broader market-access degradation or listing-quality concerns for COS.
Source
2026-06-05
Tier 3
EFAON ERC-20 withdrawal service on LBank
LBank said it suspended withdrawals of EFAON-erc20 at 22:23 UTC on June 5, 2026.
Global
LBank
Centralized exchange operations / token withdrawal infrastructure
high confidence
withdrawal suspensionexchange operational frictiontoken exit-path disruptionunclear restoration timingERC-20 transfer risk
LBank published a June 6 notice stating that EFAON-erc20 withdrawals had been suspended at 22:23 UTC on June 5, 2026. The notice did not provide a restoration time, making it a Tier 3 exchange-operation watchlist signal.
Listing post-mortem use: Use to check whether withdrawal suspensions preceded user complaints, liquidity deterioration, or later delisting for long-tail exchange-supported assets.
Source
2026-06-05
Tier 3
SYN-ARBITRUM, ONE, and SYN-BEP20 withdrawal services on LBank
LBank suspended withdrawals for SYN-ARBITRUM, ONE, and SYN-BEP20 at 09:00 UTC on June 5, 2026.
Global
LBank
Centralized exchange operations / token withdrawal infrastructure
high confidence
withdrawal suspensioncross-chain withdrawal frictionexchange operational maintenancetoken exit-path disruptionunclear restoration timing
LBank said withdrawals of SYN-ARBITRUM, ONE, and SYN-BEP20 were suspended at 09:00 UTC on June 5, 2026. The notice did not provide a restoration time, making it an operational negative-intel record rather than a confirmed delisting.
Listing post-mortem use: Use when testing if cross-chain withdrawal outages were early warning signs before liquidity loss, user complaints, or exchange support changes.
Source
2026-06-04
Tier 2
KuCoin BRL PIX withdrawal and refund services
KuCoin escalated its Brazil PIX rail warning into an official maintenance notice: from 16:00 BRT on June 4, 2026, BRL PIX deposits and withdrawals and crypto purchases using BRL balances may fail until further notice.
Brazil
KuCoin upstream payment providers / Brazil PIX fiat rail
Fiat on/off-ramp infrastructure / exchange payment rails
high confidence
fiat off-ramp disruptionpayment provider instabilitywithdrawal failurerefund delayBrazil PIX dependencybank account retry requirementscheduled PIX maintenancecrypto purchase failureuntil-further-notice fiat rail outage
KuCoin issued a June 4, 2026 official notice stating that, because of a system upgrade by payment service providers, PIX-related services entered maintenance from 16:00 BRT with duration until further notice. During the maintenance period, PIX deposits and withdrawals in BRL and crypto purchases using BRL balances may fail. This updates the June 2 PIX instability row and remains a high-confidence Tier 2 fiat-rail negative signal rather than a final enforcement or asset delisting.
Listing post-mortem use: Use when assessing whether a listed asset or venue has reliable fiat exit paths in Brazil: review payment-provider concentration, maintenance windows, failed withdrawal and purchase handling, refund timing, and user-notification quality during fiat-rail disruptions.
Source
2026-06-04
Tier 3
Hooli deposit service on KuCoin
KuCoin temporarily closed the deposit service for Hooli (HOOLI) due to essential maintenance and said it would not issue a further restoration announcement.
Global
KuCoin exchange operations
Centralized exchange operations / token deposit infrastructure
high confidence
deposit suspensionexchange operational maintenancetoken transfer frictionunclear restoration timingvenue-dependence risk
KuCoin posted an official notice on June 4, 2026 saying it had suspended the deposit service for Hooli (HOOLI) because of essential maintenance. The notice says users will not receive a further restoration announcement. This is a Tier 3 early-warning record for exchange operational friction and listing-support monitoring.
Listing post-mortem use: Use when assessing whether a token showed operational warning signs before market-access loss: compare deposit suspension timing, exchange-wallet restoration pattern, and liquidity retention after deposits reopen.
Source
2026-06-04
Tier 3
LAB deposit service on KuCoin
KuCoin temporarily closed the deposit service for LAB due to essential maintenance and said it would not issue a further restoration announcement.
Global
KuCoin exchange operations
Centralized exchange operations / token deposit infrastructure
high confidence
deposit suspensionexchange operational maintenancetoken transfer frictionunclear restoration timingvenue-dependence risk
KuCoin posted an official notice on June 4, 2026 saying it had suspended the deposit service for LAB because of essential maintenance. The notice says KuCoin will not publish a further restoration announcement. This is a high-confidence Tier 3 watchlist signal because the direct adverse consequence is deposit unavailability, not a confirmed exploit, enforcement action, or delisting.
Listing post-mortem use: Use when reviewing long-tail token support quality: check deposit uptime, whether exchange-wallet maintenance preceded liquidity deterioration, and whether users had enough public notice to manage transfer risk.
Source
2026-06-03
Tier 1
Alephium Bridge
Alephium published an official on-chain report for the May 30 bridge exploit, detailing forged Wormhole-message use, a 64-second drain across Ethereum and BSC, 13.76 million unbacked wALPH minted, Tornado Cash laundering, and a June 2 governance recovery that burned 96.4% of the fake wALPH supply.
Global
Alephium Bridge team and bridge guardians
DeFi security / cross-chain bridges / wrapped assets
high confidence
cross-chain bridge exploitforged bridge messagewrapped-asset unbacked mintbridge node fallback validation failureTornado Cash launderinggovernance recovery actionsecondary-market unrecovered supply
Alephium's June 3 official on-chain report describes the May 30, 2026 Alephium Bridge exploit. The attacker used a fake-event contract to feed false data into the bridge path, drained assets from Ethereum and BSC in about 64 seconds, minted 13,757,076.37 unbacked wALPH, routed proceeds through swaps, deBridge, and Tornado Cash, and left 500,000 wALPH outside the immediate recovery window. On June 2, bridge guardians executed an authorized governance recovery that burned 13,257,077.37 unbacked wALPH. This is a Tier 1 protocol action because the official report documents a confirmed exploit and direct recovery consequence.
Listing post-mortem use: Use for post-mortems on bridge-dependent listings: test whether forged-message and fallback-validation assumptions were reviewed, whether wrapped supply can be invalidated by governance, whether unrecovered wrapped assets reached secondary pools, and whether mixer-routing triggers exchange-freeze workflows.
Source
2026-06-03
Tier 3
RealityMetaverse deposit service on KuCoin
KuCoin temporarily closed the deposit service for RealityMetaverse (RMV) due to essential maintenance and said it would not issue a further restoration announcement.
Global
KuCoin exchange operations
Centralized exchange operations / token deposit infrastructure
high confidence
deposit suspensionexchange operational maintenancetoken transfer frictionunclear restoration timingvenue-dependence risk
KuCoin posted an official notice on June 3, 2026 saying it had suspended the deposit service for RealityMetaverse (RMV) because of essential maintenance. The notice states that users will not receive a further announcement when services are restored, making this a Tier 3 operational early-warning signal rather than a confirmed delisting, enforcement, or exploit event.
Listing post-mortem use: Use when reviewing whether an asset had pre-delisting operational stress: check deposit availability, wallet maintenance frequency, exchange communication quality, and whether suspended deposits affected liquidity or user exit paths.
Source
2026-06-03
Tier 1
Zcash Orchard shielded pool and Zebra node implementation
Zcash Foundation disclosed a critical Orchard Action circuit soundness bug, temporarily disabled Orchard actions by emergency soft fork, and activated NU6.2 to re-enable Orchard with a corrected circuit.
Global
Zcash Foundation / ZODL / Zcash protocol operators
Privacy coins / zero-knowledge protocol security
high confidence
critical protocol vulnerabilityemergency soft forkhard fork remediationtemporary shielded-pool disablementdouble-spend riskzero-knowledge circuit soundnessexchange and infrastructure coordinationprivacy-coin supply-verification risk
The Zcash Foundation said a critical Orchard zero-knowledge circuit soundness vulnerability was found on May 29, 2026. Zebra 4.5.3 temporarily disabled Orchard actions at mainnet height 3,363,426, and Zebra 5.0.0 activated NU6.2 at height 3,364,600 on June 3 to re-enable Orchard with a corrected circuit. The Foundation said there was no known exploitation and no evidence of unauthorized value creation, but the episode is a confirmed adverse protocol-security and exchange-coordination signal.
Listing post-mortem use: Use for post-mortems on privacy coins and ZK-heavy assets: check whether circuit-soundness assumptions, emergency fork readiness, exchange/wallet coordination, and supply-verification limitations were reviewed before listing or continued support.
Source
2026-06-03
Tier 1
Nobitex, Wallex, Bitpin, Ramzinex, and named Nobitex leaders
OFAC designated Nobitex, Wallex, Bitpin, Ramzinex, and multiple Nobitex leaders, alleging Iranian-regime support, sanctions evasion, IRGC-linked transactions, and ransomware-linked wallet activity, with blocked-property and transaction-prohibition consequences.
United States / Iran
U.S. Department of the Treasury Office of Foreign Assets Control (OFAC)
Centralized exchanges / sanctions compliance / illicit finance
high confidence
OFAC sanctions designationblocked propertysanctions evasionIRGC-linked transaction exposureransomware wallet exposurestablecoin sanctions risksecondary sanctions and strict-liability compliance risk
On June 3, 2026, Treasury/OFAC designated Nobitex, Wallex, Bitpin, Ramzinex, and named Nobitex leaders. Treasury says Nobitex processed more than half of Iranian digital-asset inflows in 2025 and facilitated transactions linked to the IRGC, sanctions evasion, and ransomware-related wallets; Wallex, Bitpin, and Ramzinex were also described as Iranian digital-asset exchanges operating in Iran's financial sector. The sanctions implications include blocked property, reporting duties, transaction prohibitions, and civil or criminal penalty exposure, making this a confirmed Tier 1 sanctions signal.
Listing post-mortem use: Use in listing and counterparty post-mortems to test whether sanctions-screening caught exchange-specific Iranian exposure, whether stablecoin flows involved sanctioned platforms, and whether wallet-risk escalation happened before liquidity or market-making relationships were approved.
Source
2026-06-02
Tier 1
OKX listed-asset basket: MAJOR and Jambo
OKX scheduled delisting of MAJOR and J spot pairs after stating the affected pairs did not fulfill listing criteria; MAJOR/USD was scheduled for June 2, with related Buy/Sell and Convert services suspended from May 30 and deposits suspended from May 26.
Global
OKX Token Delisting / Hiding Guideline and asset-review process
Centralized exchange listings / spot-market asset review
high confidence
centralized exchange delistinglisting criteria failureservice suspensiondeposit suspensiontrading bot closureuntradable asset migration
OKX published a May 26 official notice that MAJOR and J would be delisted after regular monitoring found several trading pairs did not fulfill listing criteria. The MAJOR/USD pair was scheduled for removal on June 2, 2026, with MAJOR/USDT and J/USDT on June 5; related Buy/Sell and Convert services were suspended from May 30, deposits from May 26, and withdrawals from August 26. The June 2 effective action makes this a Tier 1 exchange delisting signal.
Listing post-mortem use: Use for post-mortems on assets that lose top-tier venue support: review asset-quality indicators, deposit cutoff timing, bot and convert-service suspension, residual withdrawal windows, and whether local pair availability masked broader listing stress.
Source
2026-06-02
Tier 1
Phemex MCDX spot market
Phemex delisted the MCDX/USDT spot trading pair at 10:00 UTC on June 2, 2026, automatically removed pending orders, and ended MCDX deposits and withdrawals at the same timestamp.
Global
Phemex exchange asset-review / market operation notice
Centralized exchange listings / long-tail spot assets
high confidence
centralized exchange delistingspot market liquidity lossopen order cancellationdeposit suspensionwithdrawal suspensioncustomer support-dependent asset recovery
Phemex announced on June 1 that MCDX/USDT would be delisted from its spot market at 10:00 UTC on June 2, 2026. The notice also states that pending orders would be automatically removed and MCDX deposits and withdrawals would no longer be available after the same time, making this a confirmed Tier 1 exchange action with direct adverse consequence.
Listing post-mortem use: Use when reviewing whether a token had overconcentration on a small number of venues, whether withdrawal deadlines were monitored, and whether customer-support recovery became the only post-delisting asset path.
Source
2026-06-01
Tier 3
DeFi exploit and cross-chain bridge sector
CertiK's May 2026 loss data reported about $68.3 million lost to hacks, exploits, scams, and security breaches, with bridges causing about $28.6 million in losses and late-month Gravity Bridge and Alephium Bridge incidents tied to private-key access.
Global
CertiK; DeFiLlama; crypto.news reporting
DeFi security / cross-chain bridges / private key management
medium-high confidence
cross-chain bridge exploit concentrationprivate key compromiseprotocol code vulnerabilityAI-assisted malware riskdeveloper supply-chain targetingmonthly exploit-loss deterioration
A June 1, 2026 crypto.news report attributed May 2026 crypto security losses to CertiK data: about $68.3 million lost across exploits, scams, and breaches, with Verus Protocol and THORChain as the largest May incidents and cross-chain bridges representing about $28.6 million. The report also flagged late-May Alephium Bridge and Gravity Bridge private-key incidents and rising AI-assisted malware activity, so this is classified as a Tier 3 sector-risk movement rather than a new final enforcement or single-protocol action.
Listing post-mortem use: Use as a weekly and monthly comparator when a listed asset depends on bridge liquidity, wrapped collateral, multisig authority, AI-assisted developer tooling, or operational keys that may sit outside normal smart-contract audit scope.
Source
2026-06-01
Tier 1
Giottus listed-asset basket: Dent, FUNToken, Gari Network, Hooked Protocol, Measurable Data Token, TrueFi, and Wanchain
Giottus discontinued trading for seven listed tokens and scheduled remaining user balances above Rs 1 to be automatically converted to INR at 15:00 IST on June 1, 2026.
India
Giottus exchange asset-review process
Centralized exchange listings / long-tail spot assets
high confidence
centralized exchange delistingforced fiat conversionopen order cancellationlong-tail asset liquidity lossIndia exchange listing standardscustody exit deadline
Giottus announced that Dent, FUNToken, Gari Network, Hooked Protocol, Measurable Data Token, TrueFi, and Wanchain would be delisted on June 1, 2026. The official notice says trading would be discontinued, open orders cancelled, and remaining user balances above Rs 1 automatically converted into INR at 15:00 IST, making this a confirmed Tier 1 exchange action with direct adverse consequence.
Listing post-mortem use: Use when reviewing why a long-tail token lost exchange support: check whether asset-review triggers, local compliance alignment, volume quality, custody deadlines, and automatic conversion terms were visible before listing or continued support.
Source
2026-05-30
Tier 3
Bitcoin ATM and crypto kiosk operators
Same-day sector analysis consolidated a widening adverse pattern for Bitcoin ATM operators: regulatory bans and limits, consumer-fraud litigation, license suspensions, restitution settlements, and Bitcoin Depot's Chapter 11 wind-down after taking its kiosk network offline.
United States / Canada
State regulators and attorneys general; DFPI; bankruptcy court; consumer-protection authorities
Crypto kiosks / retail fiat on-ramps
medium-high confidence
crypto ATM scam infrastructureconsumer fraud exposureAML and KYC compliance failurestate-level product restrictionbankruptcy and network shutdowncash-to-crypto access contraction
CryptoSlate's May 30, 2026 analysis described a sector-level deterioration for Bitcoin ATMs, citing Bitcoin Depot's May 18 Chapter 11 filing and network shutdown, Canada's proposed ATM ban debate, California kiosk limits and DFPI enforcement, Iowa lawsuits against Bitcoin Depot and CoinFlip, Maine's Bitcoin Depot restitution settlement, and Connecticut license-suspension pressure. The row is classified as Tier 3 because the May 30 item is a fresh sector-risk synthesis rather than a new final enforcement order, but the underlying adverse actions are official and structured enough for longitudinal monitoring.
Listing post-mortem use: Use in listing and partner post-mortems to test whether retail on-ramp exposure was screened for scam complaint concentration, cash transaction limits, fee practices, AML/KYC gaps, state-license suspensions, and dependency on kiosk liquidity or distribution.
Source
2026-05-22
Tier 1
Polymarket operational wallet / UMA CTF Adapter-related infrastructure
Polymarket confirmed a six-year-old private key tied to internal top-up configuration was compromised, with roughly $573,200 transferred and $164,000 frozen after coordination with investigators and exchanges.
Global / United States
Polymarket engineering; ZachXBT; BitcoinVN; ChangeNOW
Prediction markets / protocol operations security
medium-high confidence
private key compromiseoperational wallet drainpartial fund freezekey-management failureincident response and KMS migration
On May 22, 2026, Polymarket engineering attributed suspicious outflows to a compromised legacy private key rather than a Polymarket or UMA smart-contract exploit. Public reporting said about $573,200 was transferred and $164,000 was frozen with help from ZachXBT, BitcoinVN, and ChangeNOW; Polymarket said user funds and contracts were unaffected and that it rotated the key and moved private keys to KMS-based management.
Listing post-mortem use: Use in listing post-mortems to test whether project due diligence covered old private keys, operational-wallet permissions, KMS migration, admin-key revocation, and incident-response coordination with exchanges or on-chain investigators.
Source
2026-05-22
Tier 2
Polymarket and Kalshi
The House Oversight Committee opened an investigation into whether Polymarket and Kalshi users can trade prediction contracts using non-public information and requested documents on identity checks, geo-restrictions, and anomalous-trading surveillance.
United States
U.S. House Committee on Oversight and Government Reform
Prediction markets / exchange infrastructure
high confidence
market integrity investigationinsider trading controlsKYC and geo-restriction scrutinyprediction-market surveillanceoffshore access controls
On May 22, 2026, the House Oversight Committee requested documents and information from Polymarket and Kalshi after reports of suspiciously timed prediction-market bets. The probe focuses on identity verification, foreign and domestic account controls, geographic restrictions, and anomalous-trading monitoring rather than a final enforcement outcome, so it is classified as a high-confidence Tier 2 adverse signal.
Listing post-mortem use: Use as a comparable when reviewing prediction-market tokens, oracle/resolution infrastructure, market-making support, or listings tied to event-contract platforms that could be exposed to insider-information trading claims.
Source
2026-05-20
Tier 3
MiCA-regulated crypto-asset issuers and service providers
The European Commission opened a MiCA review consultation to assess whether the EU crypto-asset framework remains fit for purpose and whether amendments or complementary regulation may be warranted.
EU
European Commission DG FISMA
Crypto regulation / CASP licensing / stablecoins
high confidence
jurisdiction risk shiftMiCA rule reviewCASP compliance burdenstablecoin regulationfuture legislative amendment
The European Commission launched a public and targeted consultation on May 20, 2026 to review the functioning of MiCA after initial implementation and market-policy developments. The targeted consultation is intended for crypto-asset service providers, crypto-asset issuers, public authorities, central banks, and finance ministries, and the Commission states that the mandated report may be accompanied by a legislative proposal if warranted.
Listing post-mortem use: Use as jurisdiction-radar context when reviewing EU market access, CASP sponsor readiness, stablecoin support, token issuer disclosure obligations, and listings whose business model depends on a stable MiCA perimeter.
Source
2026-05-20
Tier 2
Jane Street Group / Terraform Labs estate
Newly unsealed filings in Terraform estate litigation allege Jane Street used a private Telegram backchannel with Terraform insiders before selling about $192M of UST ahead of the Terra collapse.
US
US federal court / Terraform bankruptcy estate litigation
Stablecoins / market makers / trading firms
medium confidence
market integrity litigationstablecoin depeginsider information allegationmarket-maker red flagbankruptcy estate recovery
CoinDesk reported on May 20, 2026 that newly unsealed Manhattan federal court filings in Terraform estate litigation describe a private Telegram backchannel allegedly connecting a former Terraform intern working at Jane Street with Terraform insiders. The amended complaint alleges Jane Street sold roughly 193 million UST tokens, including an $85M Curve sale shortly after Terraform removed liquidity, then built short positions; Jane Street disputes the claims and says it will defend itself.
Listing post-mortem use: Use when reconstructing Terra/UST/LUNA listing failures, stablecoin depeg post-mortems, and token listings where affiliated market makers or insiders may have informational advantages during liquidity stress.
Source
2026-05-19
Tier 1
Echo Protocol Monad eBTC deployment
Echo Protocol suspended cross-chain transactions after unauthorized eBTC minting on Monad led to estimated realized losses of about $816,000 and a much larger unbacked eBTC supply event.
Global
Echo Protocol / Curvance / Monad ecosystem statements
Bitcoin DeFi / cross-chain bridge
high confidence
admin key compromiseunauthorized mintbridge suspensionlending collateral contagionmixer outflow
Crypto.news reported that an attacker minted roughly 1,000 unauthorized eBTC on Echo Protocol's Monad deployment, used part of the position as Curvance collateral, borrowed real Bitcoin-backed assets, bridged value to Ethereum, and routed ETH through Tornado Cash. Echo suspended cross-chain transactions while investigating, and ecosystem statements said Monad itself and Curvance core contracts were not breached.
Listing post-mortem use: Use as a direct comparable for listings or integrations of wrapped Bitcoin assets, bridge-issued collateral, and projects relying on single-admin mint paths or shallow new-chain lending markets.
Source
2026-05-19
Tier 2
Hormuz Safe Bitcoin-backed shipping insurance
Iran-linked Hormuz Safe reportedly offers Bitcoin-settled insurance for ships transiting the Strait of Hormuz, creating sanctions, maritime-finance, and payment-rail exposure for counterparties.
IR
Iran Ministry of Economy and Financial Affairs / Fars News reporting
Sanctions exposure / crypto insurance rails
high confidence
sanctions evasion riskBitcoin settlementshipping insurancestate-linked payment railmaritime access restriction
Claims Journal republished Bloomberg reporting that Iran started a Bitcoin-backed insurance service for Iranian shipping companies transiting the Strait of Hormuz, citing Fars and documents from Iran's Ministry of Economy and Financial Affairs. The report links the service to sanctions pressure, maritime passage controls, and Bitcoin settlement, making it a structured Tier 2 negative-intel signal rather than a completed enforcement action.
Listing post-mortem use: Use as jurisdictional context when reviewing projects, payment processors, insurers, or trading venues with exposure to Iranian maritime commerce, BTC settlement rails, or sanctioned-entity flow clusters.
Source
2026-05-19
Tier 2
Crypto national trust charter applicants and approvals
Senator Elizabeth Warren pressed the OCC over at least nine crypto national trust charters, alleging the approvals let crypto firms act like banks while evading full bank safeguards.
US
US Senate Banking Committee minority / Office of the Comptroller of the Currency
Crypto custody / banking access
high confidence
banking access scrutinycharter approval challengeconsumer protection riskstablecoin activityseparation of banking and commerce
The Senate Banking Committee minority published Senator Warren's May 19 letter to OCC Comptroller Jonathan Gould questioning at least nine national trust charters for crypto companies. The letter argues that the approvals may let crypto firms conduct custody, payment, lending, and stablecoin-like activities without full bank safeguards, and requests applications, legal analyses, and related communications by June 1, 2026.
Listing post-mortem use: Use as banking-access and regulatory-arbitrage context when reviewing listings or post-mortems for exchange tokens, stablecoin issuers, custody providers, and crypto firms whose market structure depends on national trust bank approvals.
Source
2026-05-18
Tier 2
Garden Finance
Garden Finance reportedly lost approximately $11M after a compromised solver drained funds; the protocol offered a 10% bounty and said user funds were not affected.
Global
Garden Finance / security media reporting
Cross-chain bridge / solver infrastructure
medium confidence
solver compromisebridge infrastructureoperational securitykey managementbounty negotiation
Cryptonews.net reported that Garden Finance lost about $11M through a compromised solver and offered a 10% bounty for fund return. The report says the protocol stated user funds were not affected, but the incident remains adverse because it points to solver/key-management exposure inside bridge operations.
Listing post-mortem use: Use when reviewing tokens or protocols dependent on solver networks, bridge market makers, off-chain relayers, or concentrated execution infrastructure.
Source
2026-05-18
Tier 2
Verus-Ethereum Bridge
Security researchers reported that the Verus-Ethereum Bridge was drained of more than $11.5M through a forged cross-chain transfer exploit.
Global
Blockaid / PeckShield / GoPlus / ExVul security researchers
Cross-chain bridge / DeFi
high confidence
bridge exploitcross-chain message validationreserve drainTornado Cash funding traceliquidity loss
Crypto.news reported that Blockaid, PeckShield, GoPlus, and ExVul linked a Verus-Ethereum Bridge drain to a forged cross-chain transfer message and missing validation checks. Reported drained assets included 103.6 tBTC, 1,625 ETH, and about 147,000 USDC, later swapped into roughly 5,402 ETH.
Listing post-mortem use: Use as a comparable for bridge-dependent token listings, cross-chain reserve validation failures, and listings where external security researchers identify an exploit before formal project disclosure.
Source
2026-05-17
Tier 1
CRYPGPT spot market
BloFin's delisting schedule closed CRYPGPT withdrawals at 09:00 UTC on May 17, 2026 after earlier spot trading and deposit termination.
Global
BloFin
Exchange spot markets / AI tokens
high confidence
exchange delistingwithdrawal closuremarket-access lossAI-token liquiditycustody deadline
BloFin previously announced removal of the CRYPGPT/USDT spot pair and set May 17, 2026 at 09:00 UTC as the final withdrawal deadline. The deadline creates a confirmed adverse market-access and custody-risk signal for CRYPGPT holders on that venue.
Listing post-mortem use: Use when reviewing AI-token listings that depend on thin centralized-exchange liquidity, short delisting remediation windows, or exchange-hosted custody exits.
Source
2026-05-17
Tier 1
CoinEx delisted asset basket
CoinEx's delisting schedule terminated withdrawals for twelve previously delisted assets at 08:00 UTC on May 17, 2026.
Global
CoinEx
Exchange spot markets / long-tail tokens
high confidence
exchange delistingwithdrawal closurelong-tail liquidityasset support terminationlisting maintenance failure
CoinEx's official delisting notice set May 17, 2026 at 08:00 UTC as the withdrawal termination time for RIFSOL, PNP, LLM, VIA, AIMONICA, BADGER, GRAIL, TSUKA, HXD, UNA, 0X0, and MOCHI after trading ended earlier. The action is a confirmed adverse exchange-support signal for the affected assets.
Listing post-mortem use: Use as a basket comparable for post-listing maintenance failures, long-tail spot-market cleanup, and cases where final withdrawal deadlines matter as much as the initial trading halt.
Source
2026-05-15
Tier 1
XTIUSDT and XBRUSDT perpetual contracts
BitMart announced delisting and automatic closure of XTIUSDT and XBRUSDT perpetual contracts, with no new positions allowed after the delisting time.
Global
BitMart
Exchange derivatives / tokenized commodities
high confidence
exchange delistingforced settlementderivatives liquiditycontract migrationmarket-access friction
BitMart said it would delist XTIUSDT and XBRUSDT perpetual contracts on May 15, 2026 at 10:30 UTC. The exchange stated that contracts would be automatically closed, open positions settled at market price at delisting, and users would no longer be able to open positions after the cutoff.
Listing post-mortem use: Use as a comparable for post-listing derivative support failures, forced settlement, and liquidity degradation when evaluating tokenized commodity assets or exchange-maintained perpetual contracts.
Source
2026-05-15
Tier 2
Crypto scam compounds
Draft cyber-scam legislation proposes capital punishment for violent scam-compound offenses.
MM
Myanmar Government
Scam infrastructure
medium confidence
AMLhuman traffickingscam infrastructurecross-border enforcement
Myanmar's draft cyber-scam bill is not a completed enforcement action, but it is a negative intelligence signal for crypto-facilitated scam infrastructure and regional AML pressure.
Listing post-mortem use: Raises risk weight for projects, wallets, payment rails, or exchanges with exposure to Southeast Asia scam-compound flows.
Source
2026-05-15
Tier 1
THORChain
THORChain halted trading after an Asgard vault compromise caused an estimated $10.7M protocol-owned fund loss.
Global
THORChain protocol / security researchers
Cross-chain liquidity / DeFi
high confidence
cross-chain exploitprotocol haltvault compromiseliquidity disruptionnode security
THORChain paused trading after security researchers flagged a multi-chain exploit and the protocol confirmed one of six Asgard vaults was compromised. Reported losses were approximately $10.7M in protocol-owned funds, while initial statements said individual user swaps were not affected.
Listing post-mortem use: Use as a direct adverse comparable when reviewing listings or non-listings of RUNE, bridge tokens, cross-chain liquidity assets, and projects dependent on threshold-signature vault operations.
Source
2026-05-14
Tier 2
DeFi and offshore VASPs
AUSTRAC flags DeFi and offshore VASPs as money-laundering blind spots.
AU
AUSTRAC
Exchange / DeFi / AML
high confidence
AMLoffshore VASPDeFitraceability
The AUSTRAC risk snapshot expands the negative intelligence surface beyond completed enforcement into AML blind spots likely to shape future supervision.
Listing post-mortem use: Use as jurisdiction-risk context when a token or venue has heavy offshore VASP routing, DeFi liquidity, or weak attribution controls.
Source
2026-05-13
Tier 1
Banco Topazio
Central bank action reportedly suspends OTC virtual asset activity over AML control failures.
BR
Banco Central do Brasil
OTC virtual asset activity
medium confidence
AMLOTCcustomer due diligencebanking rails
Banco Topazio is a structured negative intelligence entry because it links AML failures, virtual asset OTC activity, and bank-supervised settlement infrastructure.
Listing post-mortem use: Increases risk weight for OTC-heavy liquidity routes and bank-linked settlement partners with weak CDD controls.
Source