Short Squeeze Hits as Solana RWA Hits $3.4B; Social Attacks Dominate
A weekly tally of 13 security incidents, a $1B USDT mint on Tron, and Solana's RWA TVL hitting $3.41B signal shifting risk vectors and capital flows.
The week of July 10–16, 2026, exposed a crypto ecosystem where security threats are shifting from pure smart-contract exploits to social-engineering vectors, while capital flows signal a regime of short squeezes and growing institutional adoption of real-world assets on Solana.
Fairyproof recorded 13 notable security incidents in that week, with 9 being social-media account compromises, 3 smart-contract attacks, and 1 rug-pull[^claim_2059]. Compromised accounts like @holoride were used to send phishing links, illustrating that key-signing flows for project communication channels are now a primary threat vector[^claim_2068]. This matters for any protocol relying on social media for governance signaling or token launch announcements—multisig-controlled X accounts are no longer optional.
Market structure data from Coingecko shows the total crypto market cap rebounded to $2.49 trillion, with Bitcoin dominance at 51.2% and Ethereum at 16.7%[^claim_2061]. In the same 24-hour window, network-wide liquidations totaled $193 million, of which $157 million were short liquidations[^claim_2062]. This lopsided liquidation distribution—81% shorts—confirms a short-squeeze regime, directly affecting on-chain perps and lending protocols that calibrate risk parameters to centralized-exchange liquidation data.
Tether issued 1 billion USDT on the Tron network on July 16[^claim_2060]. This supply expansion on a high-throughput chain affects stablecoin routing for cross-chain payment systems, DEX liquidity pools, and L2 rollups that depend on Tron–Ethereum bridges for stablecoin depth.
Solana’s tokenized real-world-asset ecosystem reached an all-time high of $3.41 billion in total value[^claim_2064]. This signals that institutional and structured products are increasingly using Solana as a settlement layer, with direct consequences for oracle design, legal wrappers around tokenized treasuries, and the chain’s priority-fee markets as RWA issuers compete with MEV activity for blockspace.
On-chain losses in June totaled $75.9 million, down from $81.7 million in May, with Humanity Protocol suffering the largest single loss[^claim_2063]. While the decline is modest, the sustained attack surface—bridges, DeFi platforms, user accounts—remains a constant risk for liquidity providers and MEV searchers.
Santiment’s MVRV data shows Bitcoin’s 365-day ratio near -30% in early July, then -27.5% by mid-July, while XRP’s MVRV sits near -45%[^claim_2065][^claim_2066]. These deep unrealized loss conditions historically mark lower-risk zones for long-term accumulation. For DeFi money markets and staking protocols, this may translate into a rotation toward yield-bearing instruments as spot holders seek carry while waiting for price recovery.
Looking ahead, Ethereum’s ‘Glamsterdam’ upgrade—the first hard fork targeting base-layer throughput since The Merge—is scheduled for H2 2026[^claim_2067]. This will impact rollup and shared-sequencer designs that assume current L1 bandwidth and gas-price regimes, likely changing optimal batch sizes for optimistic/ZK rollups and fee markets for builder/relay infrastructure.
Protocol designers, risk engines, and MEV actors must model these flows explicitly—social-media compromises are now a first-class threat, stablecoin supply shifts alter liquidity routing, and Solana’s RWA growth will reshape blockspace competition.
Provenance ledger
10 claims web-citedEvery claim below cites a source URL, and each URL was checked for validity before publish. The excerpt shown is the researcher's own summary of the page — it is not re-derived from the source, so it is not a verified verbatim quote. Follow the link to confirm any claim against the original. Citation markers in the text jump here.
[1] From July 10 to July 16, 2026, Fairyproof recorded 13 notable blockchain security incidents, of which 9 were social‑media account compromises, 3 were smart‑contract attacks, and 1 was a rug‑pull. web-cited
“From July 10 to July 16, the following social media accounts were compromised… 13 notable security incidents have occurred in the past week. 9 were attacked on social medial accounts, 3 were attacks on smart contracts and 1 was a rug-pull.”
This excerpt was not re-derived from the source page, and may paraphrase or condense it. Check the source before relying on it.
[2] Tether issued 1,000,000,000 USDT on the Tron network at 04:26 on July 16, 2024, according to Whale Alert monitoring reported by BlockBeats. web-cited
“BlockBeats news, on July 16, according to Whale Alert Monitoring, Tether issued 1 billion USDT on the Tron network at 4:26 this morning.”
This excerpt was not re-derived from the source page, and may paraphrase or condense it. Check the source before relying on it.
[3] According to Coingecko data cited by BlockBeats on July 16, the total cryptocurrency market capitalization rebounded to 2.49 trillion USD with a 24‑hour increase of 6.2%, and 24‑hour trading volume of 106.8332 billion USD; Bitcoin’s market share was 51.2% and Ethereum’s was 16.7%. web-cited
“BlockBeats news, on July 16, according to Coingecko data, the total market value of cryptocurrency on the entire network rebounded to $2.49 trillion, a 24-hour increase of 6.2%. The 24-hour trading volume is $106.8332 billion. The current market share of Bitcoin is 51.2%, and the market share of Ethereum is 16.7%.”
This excerpt was not re-derived from the source page, and may paraphrase or condense it. Check the source before relying on it.
[4] In the same 24‑hour window reported by BlockBeats, network‑wide liquidations totaled 193,000,000 USD, including 35,015,700 USD in long liquidations and 157,000,000 USD in short liquidations, based on Coinglass data. web-cited
“BlockBeats news, on July 16, according to Coinglass data, in the past 24 hours, the entire network has been liquidated for $193 million, of which long orders were liquidated for $35.0157 million and short orders were liquidated for $157 million.”
This excerpt was not re-derived from the source page, and may paraphrase or condense it. Check the source before relying on it.
[5] From January through June 2026, on‑chain hacks and exploits totaled 75.9 million USD in losses for June, down from 81.7 million USD in May, with Humanity Protocol suffering the largest single loss in June. web-cited
“June also closed out with $75.9 million lost to hacks and exploits, with Humanity Protocol taking the biggest hit. … While losses declined from $81.7 million in May, attackers continued to target bridges, DeFi platforms, and user accounts.”
This excerpt was not re-derived from the source page, and may paraphrase or condense it. Check the source before relying on it.
[6] Solana’s tokenized real‑world‑asset (RWA) ecosystem reached an all‑time‑high of 3.41 billion USD in total value, according to DeFi Planet’s July 2026 roundup. web-cited
“Solana’s tokenized RWA ecosystem just hit a fresh all-time high of $3.41 billion, a significant sign that real-world asset adoption is picking up momentum.”
This excerpt was not re-derived from the source page, and may paraphrase or condense it. Check the source before relying on it.
[7] During the first week of July 2026, Bitcoin’s 365‑day MVRV ratio stood at approximately −30%, and the asset had gained 5.5% over the last three trading days while the S&P 500 slipped 0.3%, according to Santiment’s W1 July 2026 written summary. web-cited
“Bitcoin gained 5.5% over the last three trading days while the S&P 500 slipped 0.3%, and a -30% 365-day MVRV suggests the rally still has room before it's overextended.”
This excerpt was not re-derived from the source page, and may paraphrase or condense it. Check the source before relying on it.
[8] By W2 July 2026, Bitcoin’s 365‑day MVRV was near −27.5% and XRP’s near −45%, which Santiment characterizes as historically marking lower‑risk zones for long‑term accumulation. web-cited
“365-day MVRV sits deeply negative — Bitcoin near -27.5%, XRP near -45% — historically marking lower-risk zones for long-term accumulation.”
This excerpt was not re-derived from the source page, and may paraphrase or condense it. Check the source before relying on it.
[9] The Ethereum ‘Glamsterdam’ upgrade, described as the first hard fork targeting base‑layer throughput since The Merge, is scheduled for the second half of 2026. web-cited
“Ethereum's Glamsterdam upgrade is set for H2 2026, the first hard fork targeting its base layer throughput since The Merge.”
This excerpt was not re-derived from the source page, and may paraphrase or condense it. Check the source before relying on it.
[10] Between July 10 and July 16, 2026, Fairyproof identified compromised social accounts (including @holoride and others) used to send phishing links, illustrating active social‑engineering vectors parallel to smart‑contract attacks. web-cited
“From July 10 to July 16, the following social media accounts were compromised and phishing links might be sent in these accounts: holoride@holoride, … 9 were attacked on social medial accounts…”
This excerpt was not re-derived from the source page, and may paraphrase or condense it. Check the source before relying on it.
Sources
- https://www.fairyproof.com/img/researchImg/WR_10Jul-16Jul.pdf
- https://www.bitget.com/news/detail/12560604098566
- https://defi-planet.com/2026/07/your-weekend-crypto-roundup-july-2026-%C2%B7-1/
- https://app.santiment.net/insights/read/this-week-in-crypto-full-written-summary-w1-july-2026-11041
- https://santimentdata.substack.com/p/this-week-in-crypto-full-written-759
- https://crypto.com/us/market-updates/best-crypto-july-2026