Verus Incident Analysis

On 16 July 2026, DeFiTuna on Solana lost $569,601 USDC: attackers routed borrowed USDC through an illiquid TUNA/USDC pool, rounding the position's assets to zero and bypassing the solvency check.

On 01 June 2026 an attacker drained dozens of GnosisPay Safes on Gnosis Chain. The attack vector was a signature-verification flaw in the GnosisPay Delay module.

On 6 September 2026, attackers primed the Elements rangeproof cache and reused a cached validation result to mint unauthorized L-BTC, then pegged out roughly 3,998.5 L-BTC worth about $318.7 million.

The JaredFromSubway MEV bot lost 4,424 ETH (~$7.5M) to an approval hijacking: bait tokens and fake arbitrage pools tricked the bot into granting approvals the attacker later used to drain reserves.

Circle's Arc mainnet opens 16 September 2026 with USDC as gas and settlement asset: EVM compatibility, a permissioned institutional validator set, and a $74.22B USDC supply as launch context.

TRON's stablecoin supply grew 9.2% to $89.2B in H1 2026, over six times market pace, while clearing $4.01T in transfers. The network is now extending its settlement rails toward AI-agent payments.