pro

On-chain analyst @FabianoSolana posted that suspected North Korean hackers transferred approximately $1.46 million through the Jupiter Lend and Circle cross-chain bridge. According to his analysis, the funds were initially transferred from a Solana wallet address marked by the FBI (starting with AffzFD), then dispersed to about 35 temporary addresses via intermediary wallets before being re-aggregated and deposited into Jupiter Lend. A few minutes later, a similar amount was withdrawn by another new wallet.Subsequently, the funds were exchanged for USDC and transferred out of Solana through the Circle cross-chain bridge, returning to a new address on the Solana network via Noble and dYdX. The related funds were transferred out in approximately 16 transactions totaling about $1.4634 million, and then returned in 19 transactions, with a difference of about $10 between the amounts transferred out and returned. According to the analyst, the related funds have not been frozen.In response, Jupiter's Chief Operating Officer Kash Dhanda stated that based on the current investigation results, the attackers only performed deposit and withdrawal operations through Jupiter Lend, which is different from the previous Aave incident where stolen stablecoins were borrowed and could not freeze the assets. The flow of related funds can still be fully tracked through LP tokens, and the relationship of the funds has not been severed, so it cannot be concluded that the attackers used Jupiter Lend to launder the source of the funds. The Jupiter security team has been monitoring the flow of related funds in real-time. As of the time of publication, Circle has not publicly responded to the reasons for the aforementioned fund transfer and why they have not been frozen.

According to Bloomberg, Jack Dorsey's payment company Block disclosed in regulatory filings submitted on Tuesday that it has reached a principle agreement with the U.S. Department of Justice regarding its anti-money laundering compliance investigation, in which the Department of Justice will defer prosecution for three years on charges that Block failed to maintain an effective anti-money laundering program and violated the Bank Secrecy Act.This deferred prosecution agreement still requires court approval, with an expected total amount of approximately $964 million, and a net payment of about $764 million. Block had previously accrued $526 million at the end of June and increased the accrued amount to $764 million by the end of September.

The voting for the SIP-6 proposal on the Sei network has reached the quorum requirement. This proposal involves an upgrade to the consensus mechanism named Autobahn. According to the proposal design, validators will be able to propose transactions simultaneously, rather than submitting proposals one by one.Approval of the vote does not mean that the functionality will be immediately online. According to the proposal content, Sei must first complete the operational verification of the public testnet and pass a security audit before activating Autobahn. Both of these prerequisites must be completed prior to the official launch. The actual deployment depends on the performance of the testnet and the audit results.

The Bell upgrade of Stellar has been launched on the test network, and the mainnet voting will follow. This upgrade requires wallets and indexers to update their software to adapt to the network changes.The upgrade also introduces an optional post-quantum signature verification feature for smart contracts, which developers can enable as needed. The launch on the test network means that this upgrade has entered the verification phase before the mainnet voting.

The cryptocurrency exchange platform Binance released a preliminary investigation report on a security incident, disclosing the attack process in which approximately $6.3 billion in assets were stolen. The report states that an engineer, referred to as Little A, from the wallet operations team, searched for and installed an AI programming tool in June 2026, downloading a tampered Homebrew installation package from the search results. After the security team discovered the anomaly, they replaced the relevant equipment, but Little A still exposed the wallet infrastructure permissions.The report indicates that the attacker continued to lurk thereafter. In September, the attacker contacted a software engineer, referred to as Little B, through a recruitment platform, posing as a project director, and conducted video interviews and social media interviews, sending a code repository as an assignment. Little B downloaded the repository to their work computer and set it up according to the instructions. One file of 3,414 bytes bypassed terminal security protections and used internal AI tools to find traces related to Little A.The report states that on October 30, the attacker logged into another employee, referred to as Little C's, computer and transferred $6.3 billion. Binance stated that approximately $6.34 billion in assets were affected, with about $2.85 billion frozen or intercepted, and the losses covered by the SAFU fund and company funds. As of October 31, 98% of the affected tokens have been replenished.

According to security company Salus, approximately 3,600 stolen Binance SOL flowed into the HitBTC hot wallet on November 3 at 16:51 Beijing time after being transferred through automated scripts and a peeling chain model via multiple paths.Salus stated that HitBTC had previously appeared in the fund transfer paths of major cryptocurrency theft cases; hackers often use nested services such as instant exchange services, small exchanges, and over-the-counter trading desks to transfer stolen funds.

Anthropic has open-sourced FlashProve, bringing the commonly used zkSNARK (zero-knowledge proof) technology from the cryptocurrency field into AI model inference.This technology was originally designed to prove the validity of blockchain transactions without disclosing transaction details. Anthropic aims to use it to solve another problem: when users pay a high price for an AI model's API, how can they know if the service provider has secretly switched to a cheaper model?FlashProve allows service providers to first generate encrypted fingerprints for the model weights and then provide mathematical proof for the inference results. Users do not need to obtain the model weights or rerun the model; they can check whether the specified output comes from the previously committed set of weights. Claude was also involved in the development and optimization of this system.Anthropic has already completed experiments on Meta's 400 billion parameter model Llama 4 Maverick. For every 1024 tokens of context processed, the generated proof is about 19 MB, and verification on a regular CPU takes about 17 seconds.However, currently, each proof can only verify one output token and cannot validate an entire response. The GPU computation time required to generate the proof is also about 70 to 95 times that of regular inference. Whether it can be used to identify API service providers that secretly switch models in the future will depend on when the cost of proof generation can be reduced.

According to Binance's official disclosure, the security incident on October 29 involved approximately $6.34 billion in digital assets. As of the report's release, about $2.85 billion in assets had been frozen or intercepted, with amounts pending verification and affected by market price fluctuations.Binance's preliminary investigation stated that the attackers infiltrated employee devices through fake job interviews and malicious software downloads, subsequently using internal AI tools and stolen credentials to access wallet signature services, bypassing normal withdrawal processes to initiate transactions. The attackers also exploited the Ethereum EIP-7702 authorization mechanism, allowing the malicious contract to gain partial execution rights over the hot wallet.Binance stated that the company will bear the financial impact of the stolen funds; as of October 31, 98% of the affected token assets have been replenished, while the remaining assets with lower liquidity are still being purchased. The company has closed the identified attack vectors and is hiring independent security experts for further review.

The U.S. Commodity Futures Trading Commission (CFTC) has approved the first batch of perpetual futures contracts linked to U.S. individual stocks, allowing such products to be listed and traded on regulated exchanges in the U.S. for the first time.This means that U.S. investors will be able to trade individual stock perpetual contracts through regulated markets, further expanding the crossover between traditional stocks and the cryptocurrency derivatives market.

According to The Block, the Aztec Foundation behind the Ethereum privacy Layer 2 network Aztec has launched the Tierra (Alpha V6) upgrade, which fixes security vulnerabilities from previous versions, including a critical vulnerability in V5, and introduces an AI-based security testing system.In terms of performance, the new version doubles the speed of generating privacy transaction proofs, taking only about 1 second on local devices; the time for Ethereum messages to reach Aztec has also been reduced from an average of about 2 minutes to as fast as 12 seconds, further enhancing cross-chain deposit and transaction efficiency. Aztec stated that due to the network's decentralized architecture, fixing critical vulnerabilities requires an upgrade of the entire network, and plans are currently underway to accelerate the deployment of future security updates.In terms of ecosystem, Aztec has recently relaunched the self-custody privacy wallet zk.money, and several applications are being launched or prepared for launch, including Galactica, which supports privacy AI inference, the privacy perpetual contract trading platform Nemi, the privacy browser wallet Nulo, and Xochi and Nyx, which support privacy payments and transactions. Meanwhile, Aztec has also released a new brand image and website, aiming to become the infrastructure platform for privacy applications.

According to the official announcement from Cross River, Cross River has collaborated with Offchain, the development company of Arbitrum, to directly integrate tokenization features into Cross River's lending platform, allowing assets issued by the platform to be financed, held, and transferred on Arbitrum One from the moment of creation.The announcement states that borrowers' applications, financing, and repayments will still be conducted through the existing customer interface, with the underlying ZeroDev wallet infrastructure embedded. Cross River remains a regulated bank and lender, and tokenization will not change the standards for loan underwriting, risk management, or compliance.Both parties have completed a proof of concept for loan tokenization and are advancing towards production deployment, with a target date of early 2027.

According to a report by South Korea's News1, industry sources say that the Financial Services Commission (FSC) of South Korea held an emergency security inspection meeting on November 2 with major cryptocurrency exchanges and custodians, using the Binance theft incident as an opportunity to discuss increasing the proportion of cold wallet custody at exchanges. The current proposal is to raise this proportion from the 80% stipulated by the existing Virtual Asset User Protection Act to around 99%, which is maintained by some large exchanges.It is reported that the cold wallet custody ratio of Upbit user assets exceeds 99%, Bithumb is about 94%, Coinone is 85%, and exchanges like GOPAX are just above 80%. Industry insiders warn that increasing the ratio will reduce the assets available for immediate withdrawals in hot wallets, which may lead to withdrawal delays and increase the operational burden on small and medium-sized exchanges. In August of this year, Bithumb experienced delays of about 13 hours for withdrawals of some altcoins due to insufficient hot wallet balances. This proposal is still under discussion and has not yet been finalized.

The stablecoin protocol Sky Protocol's official account posted on November 3, revealing the financial highlights for the third quarter. The official statement indicated that net income was positive for the sixth consecutive quarter, profit margins expanded, and funds continued to be transferred to Sky Reserves.The key data listed by the official source includes: total revenue of $99.29 million, a year-on-year increase of 14.2%; net income of $37.19 million, a quarter-on-quarter increase of 11.8%, marking the sixth consecutive quarter of positive net income. The net income margin was 37.5%, up from 31.0% in the second quarter. The protocol's collateral size was $11.41 billion, a year-on-year increase of 25.3%.During the same period, $28.47 million was transferred to Sky Reserves, with a balance of $85.08 million at the end of the quarter. The supply of sUSDS was $4.52 billion, a year-on-year increase of 118%. The post included a link to the Sky Ecosystem Q3 2026 report published by the Sky Frontier Foundation.

According to a report by Reuters, an official familiar with the negotiations revealed that the Qatari mediators expect to receive feedback from the United States and Iran on a new proposal aimed at advancing the negotiations within 36 hours.

According to official news from Bitget, the platform has launched a special event for new customers around the Anthropic IPO subscription, with a total prize pool of 100,000 USDT. New users who register starting from November 2, 2026, 00:00 (UTC+8), and complete the corresponding deposit and subscription tasks will have the opportunity to receive rewards distributed in the form of Anthropic stocks and unlock VIP exclusive subscription rights.The event features a three-tier reward mechanism. Users who make their first single deposit of at least 1,000 USDT and participate in the Anthropic IPO subscription with any amount can receive a stock reward worth 20 USDT; users who make their first single deposit of at least 30,000 USDT and participate in the subscription can upgrade to receive a stock reward worth 100 USDT, while also being promoted to VIP status and enjoying a higher subscription limit; users who complete their first deposit task through the C2C channel can receive an additional stock reward worth 5 USDT. The prize pool operates on a first-come, first-served basis, and the specific event rules and subscription arrangements are subject to the official Bitget page.

Renowned trader Killa posted that in the cryptocurrency industry, those who frequently showcase so-called huge profits should be approached with caution. Such individuals may have poor trading performance and attempt to prove their abilities by displaying screenshots of simulated trading profits.He believes that those who truly trade with large amounts of capital usually do not need to constantly prove themselves to the outside world, and he reminds the community not to be easily deceived by the trading results presented on the surface, but to pay attention to the details.

The proposal number 108 of the TRON network has been officially approved and is now in effect. The smart contract storage operation optimization introduced in version GreatVoyage-v4.8.2.4 (Empedocles) is now synchronized and enabled. This update further optimizes contract storage-related operations, helping to improve processing consistency and stability in relevant execution scenarios.With the official implementation of proposal number 108, the TRON network has further enhanced contract execution stability and node operation reliability, providing developers and ecological applications with a more stable underlying operating environment.

According to Onchain Lens monitoring, FalconX transferred 50,000 HYPE to Coinbase, worth approximately 4.2 million USD.In the past 3 days, a total of 350,000 HYPE has been transferred in, worth approximately 30.57 million USD.

Binance founder Changpeng Zhao stated in an interview, "Typically, after an attack event, some users do choose to withdraw their funds. Some large institutions are required by internal policies to withdraw funds, and some retail investors may follow suit.However, after withdrawing, users face another question: where is it safer to store their money? I personally have not suffered any financial losses on Binance because Binance has absorbed the losses caused by this incident. This event is indeed frightening, but the question is, where can I transfer my funds? Recently, several hardware wallets have also been attacked, including one supply chain attack and another involving the mnemonic phrase generation process. This means that even if users make no operational mistakes and strictly follow all security protocols, purchasing hardware wallets and generating mnemonic phrases, they could still lose all their funds five years later without any fault, and no institution will bear the losses.The first wave of impact has already occurred, and Binance has also been attacked and completed repairs. Next, the second wave of impact may affect smaller platforms, which may not necessarily be more secure. Therefore, some users may initially choose to withdraw, but later realize that they need to manage their mnemonic phrases and store their assets themselves. In fact, less than 10% of the funds flowed to other centralized trading platforms, which means that most of the funds may have been transferred to users' own self-custody wallets. However, using self-custody wallets is not without risks. Users must properly back up their mnemonic phrases and ensure they do not get lost or damaged.In fact, most losses suffered by users when self-custodying assets are not even caused by hacker attacks. Therefore, after weighing their options, users may reconsider depositing their funds back into trading platforms. In fact, within less than 24 hours, we have already seen a change in fund flows. I also saw a tweet earlier showing that the fund flow statistics for the platform have turned into a net inflow on an hourly basis, which actually reflects the strength of the platform and users' trust in it. I believe that in the coming weeks and even months, fund flows will continue to fluctuate. As we mentioned before, if the market re-enters a bull market, we will see more funds flowing in.I believe there are many aspects that need attention. First, the speed of technological development is very fast, especially AI, which is growing at an astonishing rate, and the trend of exponential growth even exceeds people's understanding. Secondly, I believe that the entire cryptocurrency industry is still under-invested in the security field. Frankly speaking, many AI security tools are not yet truly applied in the industry.Therefore, I encourage all practitioners to increase their investment in these areas, including increasing the number of security engineers, introducing more AI tools, and closely collaborating with AI security service providers. I believe these are crucial. For ordinary users, what we call retail investors, I suggest everyone actively learn about different security tools, understand how to protect their assets, and closely follow industry trends and relevant news. Especially at this current stage, all of this is very important."