Cryptoccino An espresso cup on a saucer with a folded newspaper, beside the Cryptoccino wordmark and tagline. Cryptoccino YOUR DAILY SHOT OF CRYPTO NEWS
Weekly Recap Cryptoccino TV Buy me a coffee
Theme

Cryptoccino — Friday 10 July 2026

☕ 7 min read

Today's Roast

Single shot · top move 2.7% (BTC)

The Pour. Markets grinding back up while everything underneath is still settling.

Today. Bitcoin bounces toward $64K as DPRK drove 77% of Q2 losses Security Desk · Injective devs hit with malicious SDK backdoor Security Desk · Gauntlet pulls $125M Series C from SBI Holdings alone Projects & Money.

Prices

  • BTC$63,848+2.7%
  • ETH$1,773+2.2%
  • BNB$575+1.1%
  • SOL$78.88+2.1%
  • XRP$1.11+1.9%
  • DOGE$0.0739+2.3%

SECURITY DESK

DPRK actors drove 77% of Q2 ecosystem losses, as AI-assisted attacks shorten the window between audit and exploit.

seal_radar theblock cointelegraph_defi

Fear & Greed23/100Extreme Fear +2 / 7d

What happened. SEAL’s Q2 2026 threat intel summary puts North Korea-linked actors behind 77% of the quarter’s $115.4M in ecosystem losses, with five dominant attack trends flagged for the period. Separately, Immunefi’s H1 2026 report shows total hack losses came in below $1B for the first half despite a record 207 individual incidents, with DeFi exploit damage down 74% from 2022 peaks.

Why it matters. The headline loss number falling below $1B looks like progress, but the DPRK concentration tells a different story: a single state-sponsored actor is responsible for the majority of material damage, and those operations are not getting slower. The Fear & Greed Index sitting at 23 (Extreme Fear) suggests retail has already fled, but institutional flows are the real target now.

The catch. Researchers are now explicitly warning that AI tools are compressing the shelf life of security audits, because the same tooling defenders use to find bugs is accelerating attacker iteration on known codebases. Hackers are also increasingly targeting defunct DeFi protocol codebases that were never patched, turning abandoned code into a live attack surface. Audit-at-deployment is no longer sufficient; continuous monitoring is the new baseline expectation.

Markets

Bitcoin touches $64K on yen and chip tailwinds. A strengthening yen and a chip-stock rally gave BTC a lift to nearly $64,000 in early trading, reversing recent softness. On-chain analysts at CryptoQuant are still calling the move a bear-market recovery rather than a trend reversal, noting that long-term holder capitulation hit $280M per day, the highest reading since December 2022. coindesk theblock theblock

Arbitrum surges 19% on Robinhood onchain volume. ARB jumped sharply after $568M in onchain trading activity on Robinhood’s blockchain flowed through Arbitrum infrastructure. One trader turned $800 into over $1M on Robinhood’s chain betting a memecoin, illustrating the speculative intensity driving the volume spike. coindesk coindesk

DeFi tokens quietly outpacing Bitcoin in the drawdown. Bitwise flagged that DeFi tokens have held up unusually well relative to BTC, a dynamic it describes as a potential quiet re-rating toward revenue-generating protocols. Historically DeFi swings harder than Bitcoin in downturns, so the relative resilience is drawing institutional attention. cointelegraph_defi cryptobriefing

Bitcoin ETF outflows resume as private credit funds also bleed. Billions have left both bitcoin ETFs and private credit funds in recent sessions, with Ether ETFs the lone bright spot extending their inflow streak. Analysts read the dual outflow pattern as a risk-off rotation rather than a crypto-specific signal. coindesk coindesk

Projects & Money

Gauntlet closes $125M Series C with SBI Holdings as sole backer. Risk-management protocol Gauntlet raised the round entirely from Japan’s SBI Holdings, a structurally unusual single-LP close at that size. Founder Tarun Chitra expects tokenisation and vault products to outpace overall stablecoin growth as the next DeFi expansion driver. theblock

Sony Bank gets conditional OCC approval for a dollar stablecoin trust. Sony’s US banking subsidiary Connectia Trust cleared the OCC’s initial hurdle and will issue a dollar-pegged stablecoin once final conditions are met. The approval puts a major consumer electronics brand directly in the stablecoin issuance stack alongside Circle and Tether. coindesk decrypt

MARA gains 14% after announcing a 2GW Texas campus deal. The miner agreed to acquire a large powered land plot in Texas structured as up to $600M in milestone-based payments rather than an upfront purchase. The site is intended to host both bitcoin mining and AI compute, following the broader pivot miners are making toward data-centre revenue. theblock decrypt

Security Desk

Injective developer tooling hit with malicious SDK backdoor. Attackers distributed a compromised npm package targeting Injective developers, with the payload designed to extract wallet private keys. The supply-chain vector is consistent with SEAL’s Q2 trend analysis. See lead for the broader DPRK and AI-audit context. cryptobriefing

Hong Kong SFC mandates passkey replacement for OTP logins within 12 months. The regulator ordered all licensed crypto platforms and internet brokers to retire one-time password authentication after spoofing incidents rose 57%. Platforms have one year to comply, with passkeys the prescribed replacement standard. theblock

Interpol ties a 20-year-old’s wallet to $123M in romance-scam proceeds. Two arrests in Thailand were part of Operation First Light, a 97-country sweep that logged 5,811 arrests and intercepted $293M in total. The single wallet routing $123M in scam cash illustrates how concentrated the money-movement layer remains even in large operations. decrypt

On the Hill

CLARITY Act update expected as soon as next week. Sources say the latest draft of the crypto market-structure bill could be released within days, with CFTC Chair Selig publicly warning that regulators will fill the vacuum themselves if Congress stalls. Senator Wyden separately urged Senate leaders to preserve developer liability protections from the Blockchain Regulatory Certainty Act inside the final text. coindesk theblock cointelegraph_regulation

New Hampshire executive council kills bitcoin municipal bond proposal. The council voted down a plan that would have made New Hampshire the first US state to issue a bitcoin-backed municipal bond. The failure closes what had been one of the more creative state-level experiments in sovereign bitcoin adoption. coindesk bloomberg_crypto

White House says Democrats never responded to CFTC and SEC nomination requests. The administration pushed back on criticism over regulatory vacancies by claiming it sent Democrats a request for commissioner nominations that went unanswered. Both agencies remain short of a full complement of commissioners at a moment when crypto rulemaking is at its most consequential. cointelegraph_regulation theblock

Phantom and Hyperliquid urge CFTC to stop treating onchain protocols like traditional brokers. The two firms submitted formal comments calling on the regulator to exempt non-custodial wallets and blockchain-native protocols from rulebooks written for centralised intermediaries. The comments respond to a CFTC-SEC joint Request for Information on financial innovation issued in mid-June. cointelegraph_regulation theblock

What else is grinding?

  • Coinbase CLO Paul Grewal is departing after leading the firm through its SEC battle, with legal and compliance teams being reorganised underneath his successor. coindesk theblock
  • Grayscale’s CFO has exited after seven years, adding to the executive churn across major crypto firms this month. coindesk
  • Bitmine acquired 20,500 ETH for $36M from Galaxy Digital, pushing its accumulation strategy closer to 5% of circulating supply. cryptobriefing
  • PayPal’s PYUSD stablecoin will now be issued natively on Polygon and integrated into Polygon’s Open Money Stack, broadening distribution beyond Ethereum and Solana. theblock
  • North Carolina’s legislature imposed a 6% tax on prediction market winnings while simultaneously raising the sports betting tax to 23%, a regulatory split that advantages platforms like Polymarket just as it files for US margin trading approval. cryptobriefing theblock
  • The EU is planning a 2027 MiCA revision that would extend stablecoin rules to non-EU issuers, directly targeting dollar-denominated tokens like USDT and USDC. decrypt

Last sip. DPRK’s 77% share of Q2 losses went largely unpunished in real time, and nothing in the Q3 threat landscape suggests the targeting calculus has changed.