TLDR Crypto 2026-07-31

Ostium's post-mortem on its July 15 exploit found the attacker compromised off-chain infrastructure to submit fraudulent BTC-USD price reports, generating artificial profits from the OLP vault rather than exploiting a smart contract or multisig bug. The attacker tested with a $100 position, then executed a main batch plus six more cycles, draining $23.75 million total before automated monitoring stopped further withdrawals. Trader collateral was unaffected, the protocol migrated to a new production environment, and trading resumed July 23, with a liquidity provider recovery plan still to come.

Nearly $286 million in crypto derivatives were liquidated across 87,294 traders in 24 hours, even as BTC finished near $63,900 on a 2% intraday range and ETH held around $1,900, with both assets ending the period close to unchanged. The Fed rate decision on Wednesday drove $188 million of the total, including $130 million in long liquidations. The full-period long/short split was $186 million versus $100 million, with ETH exposure skewed toward longs. Crypto exchanges offering leveraged equity products saw an additional $43 million unwound across AI memory names, including SanDisk ($19M), Micron ($10M), SK Hynix ($7M), and SOXL ($7M), after SK Hynix's earnings miss produced the year's steepest chip sector selloff.

Coinbase CDP Payment Acceptance added x402 agentic payment support, with existing Coinbase Business merchants receiving the capability without any configuration changes. The first x402 transactions cleared July 29, putting stablecoin-based AI agent payments in front of thousands of merchants by default.

Programmable launches on Ethereum mainnet as a Uniswap v4 token launchpad that abstracts hook-based pool configuration into selectable launch models, removing the need for custom Solidity. Its first model, Classic, deploys a fixed-supply token and a v4 liquidity pool in a single transaction with the initial liquidity position permanently locked and the creator's chosen swap fee (between 1% and 10%) frozen post-launch. The protocol charges no upfront launch fee, instead collecting 0.10% from the ETH side of each swap within the creator-set fee range. The platform's $V4 token captures 50% of net protocol revenue via automatic onchain buybacks, with expansion to Base and Robinhood and additional launch models covering game economies, NFT-connected markets, and tokenized real-world assets planned.

DeFi vaults, which wrap onchain strategies behind ERC-4626 share tokens, have built multi-billion-dollar TVL across lending and trading verticals, with Morpho's isolated-market architecture driving $4.6B in vault TVL by delegating risk parameterization to a curator layer rather than DAO governance. Three curators, Gauntlet ($1.4B), Steakhouse Financial ($2.5B), and Sentora ($2.1B), control over 75% of curation TVL, while infrastructure layer Veda powers earn products for Kraken, MetaMask, and Whop, and Maple Finance's syrupUSDC holds $4.1B+ at 4.7% APY. Fee-on-AUM incentives push curators toward riskier allocations, and nested wrapper exposure, as shown by the $280M Drift hack, is a persistent structural risk, even as agent-led curators begin targeting long-tail asset markets over the next two years. The SEC is examining whether vaults require broker-dealer registration, and the next product cycle targets currency diversification (JPY and euro stablecoins), tokenized reinsurance (OnRe holds $240M+), and structured products on tokenized equities.

Owney, CODESPECT, CORE3, and Hacken have published a Trust and Security framework for DeFi yield agents, addressing the sector's absence of standardized evaluation criteria as autonomous strategies allocating capital across Morpho, Aave, and Compound now deliver 2.5x more yield than manual approaches. The framework scores agents across three distinct pillars: Security (audit coverage, permission scoping, and upgrade controls against adversarial exploits), Risk (pre-deposit vetting, collateral monitoring, and on-chain quantitative limits against self-inflicted losses), and Robustness (oracle diversity, data redundancy, and per-user fund isolation in smart accounts versus pooled structures against infrastructural failures). Each pillar is scored 0-10 with a minimum threshold of 6 for eligibility, resolving a structural gap where users currently select agents on advertised APY rather than underlying risk architecture, while institutional allocators require independently verified assessments before approving exposure. Real-world validation includes Zyfai's proactive risk signal detection before losses materialized and Surf Liquid's Guardian Layer executing automated emergency responses during recent DeFi hacks, with live agent scores published at risk.owney.app.

Researchers are probing whether predictive signals from CEX perpetual markets can transfer profitably to Ethereum DEXs, with source-venue backtests showing BTC at +0.82 bps P&L per trade (76.4% win rate) and ETH at +0.95 bps (69.5% win rate) before fees. The dir_mr event-driven state machine generates signals in 4 to 50 microseconds locally, but six cross-venue risks threaten transfer viability: signal decay during transport latency, AMM versus order book architecture mismatch, oracle-driven price leadership, fill execution uncertainty, MEV sandwiching and reordering, and timestamp misalignment. The study proposes freezing source models before testing destination outcomes and benchmarking against causal baselines including momentum and order flow imbalance, with source records published to a public S3 archive for independent replication. A verified cross-venue signal would give DEX participants a method to reduce adverse selection from CEX-informed order flow, a structural problem that has eroded LP returns across AMM protocols.

Tokenized equity price discovery still happens offchain, so dealer-driven mechanisms like RFQ and RFS/PropAMM naturally fit best, while CLOBs and native onchain primitives remain niche use cases. Bebop's RFQ and PropAMM infrastructure is a refined, battle-tested example.

Merchants are recognizing AI agents as a rapidly growing customer segment that transacts using the x402 payment protocol paired with USDC.

Aave is deprecating 50 low-adoption asset reserves and orderly winding down deployments on Sonic, Scroll, zkSync, Metis, Soneium, and Aptos (25 more reserves), plus retiring 21 matured Pendle PTs in favor of new maturities.

Robinhood's event contracts generated $156 million in Q2 versus $129 million for equities and $100 million for crypto (down 38%), making prediction markets 20% of trading revenue versus 2% a year ago.

SyntheTick is a new AI-powered thesis screener that maps a user's investment conviction, submitted via text, link, video, or voice note, to relevant public stocks, ETFs, crypto assets, and Polymarket positions.