Crypto news

Blockchain data firm Bitquery has traced at least $4 million in USDT thefts to a network of 365 TRON addresses, with 43 collector wallets linked by funding flows to a common fee wallet. The investigation, covering Oct. 5 to Nov. 4, found 89 of the victim addresses lost only TRX. Bitquery matched one theft to a published iPhone-owner account but could not identify devices or exploits for most addresses, and common operator control remains unproven. Separately, Security Alliance logged six iOS wallet-compromise reports involving about $127,000 in losses from Oct. 28 to Nov. 3, affecting Trust Wallet and one Uniswap Wallet. Trust Wallet advised users to install the latest iOS updates and avoid storing recovery phrases in screenshots. This follows research on the DarkSword spyware variant, which has been used to steal crypto from iPhones, and recommendations from Google's Threat Intelligence Group to update iOS or enable Lockdown Mode.

Blockchain analysis firm Elliptic reports that hackers behind last week's $6.43 billion breach of Binance have swapped around $124 million in altcoins into bitcoin, adding to the $1.48 billion in bitcoin already stolen. The laundering operation has used over 20,000 wallets across 16 blockchains and 65,000 transactions, but only a 'negligible amount' has likely been cashed out. Most converted bitcoin came from stolen XRP via THORChain, while nearly all stolen Solana has been mixed or swapped. About $3.11 billion in ether and bitcoin remains in attack-linked addresses, with $2.85 billion frozen; $470 million is unaccounted for. Elliptic expects attackers to swap remaining ether in small batches and cash out via OTC brokers and Chinese money laundering networks, dismissing speculation that AI agents were involved. Binance, meanwhile, is working to reopen withdrawals for several tokens, including HYPE, INJ, APT, PLASMA, NEAR, and LTC, by the end of next week, as well as for all tokens on restored networks like ETH, BSC, Arbitrum, and Optimism. Binance's own report attributed the attack to a tampered developer tool, a fake job interview, and compromised internal AI tooling. The exchange has replenished virtually all stolen assets.

Keplr Wallet suspended Google and Apple logins after a security breach at Web3Auth, its authentication provider, exposed private keys. Blockchain firm Bitquery traced over $6 million in transfers from more than 44,000 wallets across Cosmos networks, with Cosmos Hub accounting for about $3.5 million. Keplr co-founder Josh Lee said the incident, which affected roughly 20% of social-login accounts, was not due to a hack of Keplr's code. Web3Auth has begun whitehat recovery operations, moving assets from vulnerable wallets to protect them, which may resemble unauthorized activity. Keplr advised affected users to transfer remaining liquid funds to recovery-phrase or hardware-wallet accounts, while noting that staked and locked assets require more complex recovery.

Intercontinental Exchange (ICE), owner of the New York Stock Exchange, announced a deal with Trade[XYZ] to launch a regulated US perpetual futures market using Hyperliquid's onchain trading infrastructure. The venue will target retail traders, offering 24/7 leveraged trading across multiple asset classes via regulated futures commission merchants. ICE will be the exclusive operator and has taken an undisclosed minority stake in Trade[XYZ]. Trade[XYZ] has generated over $650 billion in volume on Hyperliquid's HIP-3 markets, and following the announcement, Hyperliquid's HYPE token rose 13-15% to around $91. The effort has backing from high-profile investors like Stan Druckenmiller. The market awaits CFTC approval, with no launch date set. Key questions include which FCMs participate and whether offshore volume translates to a regulated US environment.

Stripe has enabled eligible US Samsung Wallet users to buy USDC stablecoins using Samsung Pay, credit or debit cards, and ACH bank payments, as announced on Nov. 5. The feature, initially revealed Oct. 7, is available on 82 million compatible Galaxy devices. New York residents are excluded, and devices must run Android 13 or later with built-in fingerprint authentication. Users can fund accounts via bank cards, Coinbase, or external wallets, and can hold, send, and receive USDC, with withdrawals converting back to dollars. Fees vary by method and are shown before confirmation, and a maintenance fee may apply after a year of inactivity. Bastion provides custodial services, with USDC held in Coinbase institutional custody.

Bitcoin fell to $74,780.91, its lowest intraday price since August 21, as crypto liquidations surged past $1 billion in 24 hours, with long positions accounting for 88.2% of the total, per CoinGlass. The selloff followed a sharp decline in AI stocks, triggered by post-election concerns over stricter AI regulation, and a stronger-than-expected U.S. jobs report that fueled expectations of another Fed rate hike. Bitcoin was trading near $75,570 on Friday, below both its 50-day and 200-day EMAs, though the 50-day remains above the 200-day. Technical indicators show weak but bearish momentum, with immediate support at $74,780 and a potential drop toward $73,000–$72,500 if that level breaks. The Fear and Greed Index stood at 28, near extreme fear, down from neutral a week earlier.

The White House has begun its final review of a proposed rule that could allow Bitcoin in U.S. retirement accounts, such as 401(k)s. The Department of Labor developed the guidelines to balance performance, fees, and fiduciary duties, though employers would not be required to offer Bitcoin. Market participants see this as a significant step that may boost Bitcoin adoption and pricing, with current prices reflecting anticipated gains if the rule is finalized. Observers are watching for official announcements from the Department of Labor or White House, as well as broader regulatory and legislative developments on cryptocurrency.

The Bank of Russia has approved Bitcoin, Ether, and USDT for trading by retail investors under a new framework effective Nov. 17. Exchanges can now offer these assets, with purchases capped at 300,000 rubles per year per intermediary for non-qualified investors. Qualified investors face no limits and can access any cryptocurrency. Both investor types must pass an assessment test and acknowledge risks. The central bank selected only the most liquid assets, based on market cap, trading volume, and five years of pricing data, to reduce retail investment risks.

Zcash's NU7 upgrade activated Friday, introducing the Network Sustainability Mechanism, which removes 60% of transaction fees from circulation to fund future block rewards starting in 2031, preserving the 21 million coin supply cap. The upgrade also cuts block time from 75 to 25 seconds and retires the Sprout privacy pool, locking about $16 million in coins. Separately, coinholders will vote this month on the future of Zcash Community Grants' share of the Dev Fund, with proposals due by November 8.

Coinbase is bringing USDC, a dollar-pegged stablecoin, to Samsung Wallet as the default dollar stablecoin for US Galaxy users, targeting about 82 million compatible devices. The feature, announced in early October 2026, is expected to launch around November 5, 2026. Eligible US residents outside New York can buy, hold, send, and receive USDC directly in the wallet without needing a separate app or managing private keys. Transfers run on the Solana blockchain and support fee-free movement to compatible external wallets, as well as payouts to bank accounts in over 60 countries with local currency conversion. Samsung will not hold customer funds; Bastion serves as the primary custodian, with Coinbase acting as sub-custodian via Coinbase Prime Vault. Access requires US residency, identity verification, biometric authentication, and a compatible Samsung Galaxy device running Android 13 or higher. New York residents are excluded. This deal expands Coinbase's infrastructure role beyond its own apps, gives Solana a new flow of transfers, and positions USDC for everyday money movement. The launch is set for November 5, 2026, giving eligible Galaxy owners outside New York a date to anticipate.