The week's crypto security report shows over $40 million stolen from Mercado Bitcoin and major flaws exposed in BTCPay Server and TENDRIL DeFi protocols.