Governance Takeover, a Signing-Library Flaw, and a Laser: July's Security Ledger

A $20 million treasury drain at BonkDAO, a $2.4 million Cardano wallet exploit, and a lab attack on Tangem cards show losses arriving through governance, code, and hardware alike.

Recent on-chain thefts arrived through three distinct routes, none of them a classic smart-contract reentrancy. BonkDAO lost roughly $20 million from its treasury on July 6 in a governance attack: the attacker spent about $4.4 million to ac…