Chainpion614

If you use the Solana dApp Store, check your device. Solana Mobile said on November 2 that a third-party app, SKR Claim, had been added to the store. After gaining access to the publishing portal, attackers changed the featured placement and task interface to request users’ recovery phrases. The app was removed after being available for about an hour and is being removed from devices.

The official team will never ask for your recovery phrase or tell you to connect your wallet to claim an airdrop. Treat any request to enter your recovery phrase to claim an airdrop as a scam.

#Solana #加密安全 #Phishing attack

If you’ve ever placed a listing on Talis Protocol, check your wallet. The project team says that on October 31, an attacker exploited a vulnerability in Injective’s market and auction contracts, withdrawing about 5,700 escrowed NFTs and selling them into public collection bids. New listings and auctions on Injective have been paused, and more than 26,000 NFTs in the contracts have been returned to their original owners.

If it’s held in a contract, it’s not really in your hands. Is your listing still there?

#NFT被盗 #Injective

If you run a BTCPay Server instance, shut down the server now. On November 2, the official account posted on X that it had received multiple reports of hot-wallet funds being transferred by unauthorized attackers. It recommended shutting down with ./btcpay-down.sh and waiting until the investigation is complete. Just three days earlier, on October 29, the project had released the emergency 2.4.7 update, which fixed a critical vulnerability.

If you run your own payment node, don’t keep funds in the hot wallet long-term.

#加密安全 #BTCPayServer

Lummis 11 月 1 日发文，把《CLARITY 法案》里的一项试点计划和一个数字绑在一起说：本周有 63 亿美元加密资产被盗，盗贼几分钟内就把钱跨链转走。试点要做的是让加密企业直接和联邦执法机构共享情报。

这个条款管的是响应速度，不是市场结构。《CLARITY 法案》原本讨论的是交易所怎么注册、代币算不算证券，现在主要起草人拿来推销它的却是一个追赃场景。链上分析公司早就在替执法部门做类似的事，写进法案的差别在于：企业共享情报是不是法定义务，共享之后要不要为泄露承担责任。

试点最后是自愿参与还是强制报送，决定了它是一条真通道，还是又一份备忘录。

#CLARITY法案 #加密监管

巴西央行给虚拟资产服务商设的申请期 10 月 30 日截止，原本预计有 150 到 200 家企业进场，实际只交了约 40 份，币安和 Itaú 在里面。

关键节点不是这个比例，而是 11 月 6 日：从那天起，银行和支付服务商不能再为监管体系外的虚拟资产服务商处理交易。没交申请的公司要在截止后一个月内清盘退出，交了的可以边审边营业，而央行审一单最长要两年。

所以接下来还能在巴西正常出入金的平台，大概率就是这四十家上下。最终能批下来多少，才是决定当地散户以后在哪交易的那一步。

#加密监管 #巴西 #VASP牌照

$tBTC temporarily cannot be redeemed: Threshold Network announced a pause on tBTC minting and redemptions. There are about 4320 $BTC in the bridge, and about 4185 tBTC in circulation.

The cause was the Linux kernel vulnerability CVE-2026-98432. About 0.5 $ETH was transferred out of an operator's fee account while the node was offline. The funds weren't lost; operations were the first thing to fail.

#tBTC #跨链桥 #Security Incident

Strategy CFO Andrew Kang will step down on November 5. The company’s filing with the SEC cited personal reasons, unrelated to operations or policy disagreements. CEO Phong Le will take over on an interim basis until Reza Virasteh formally succeeds him in January 2027. During the transition, Le will remain directly responsible for the Bitcoin reserve and financing.

Holdings are unchanged: 848,517 coins $BTC , and more than $21 billion raised year to date. Quarterly operating revenue in the same period was about $21 billion, mainly from the appreciation of its Bitcoin holdings—more like paper gains than cash earned through operations.

Changing CFOs won’t alter the company’s trajectory; its direction is determined by the pace of financing and the cost of its holdings. After Reza Virasteh takes office, the first things to watch are whether the financing approach and reserve disclosures change.

#Strategy #比特币储备 #Corporate governance

If you’re waiting to withdraw on Binance, here’s an update: In the evening of November 1 (Beijing time), withdrawals resumed on the Arbitrum and TRON networks. Assets including $ETH and $USDT are on the list, as is $TRX on TRON. This brings the total to partial asset withdrawals available on 9 networks. Binance says the rest will be enabled in phases. USDT is the only asset whose withdrawals have resumed on both networks, so those in a hurry to move funds should check it first.

#币安 #提现恢复 #Arbitrum

On November 1, Changpeng Zhao thanked the FBI, the U.S. Secret Service, and the IRS on X: They tracked and froze funds stolen from Binance. He also said that $BTC hadn't fallen further largely thanks to these agencies. The FBI had previously determined that North Korea was responsible for stealing more than $6 billion, and that the attackers mainly converted the assets into $ETH .

The freeze did prevent some selling pressure, but crediting law enforcement agencies with the coin's price holding up is a bit of a stretch.

#比特币 #币安被盗案 #CryptoSecurity

Binance resumed some withdrawals on the afternoon of November 1: USDC, USDT, and $ETH can be withdrawn on the Ethereum network, while USDC, USDT, and $BNB can be withdrawn on BNB Smart Chain.

The announcement said security checks are ongoing, and the remaining assets and networks will be reopened in stages. Opening two major chains and a few popular coins first is like clearing the biggest bottlenecks. Are your assets still stuck on Binance?

#币安 #WithdrawalsResumed

The hacker who attacked Binance has started selling off altcoins: On November 1, Lookonchain monitored the sale of more than 130 tokens on EVM chains, converted into about 123,400 $ETH and stablecoins, totaling approximately $279 million. $UNI and $PEPE were both on the list.

Everything was converted into ETH and stablecoins, with not a single altcoin position left. The person moving the money isn’t watching prices, so anyone holding these coins should keep a close eye on them.

#币安被盗 #Altcoins

Decentralized derivatives project Premia Labs was attacked, losing approximately $464,600. PeckShield detected on November 1 that the attacker bridged funds from Arbitrum to Ethereum, then swapped them via Chainflip and NEAR Intents into $BTC .

Routing through two cross-chain tools and then swapping into Bitcoin makes the funds much harder to track than if they had stayed on the original chain.

#DeFi安全 #PremiaLabs

The total supply of stablecoins rose from $203.2 billion to $303.7 billion last year, but by October 28 this year it had instead fallen by about $2.1 billion, to around $301.6 billion. According to data from DefiLlama cited by Milk Road Crypto, the expansion in 2025 grew at a rate of 49%.

Breaking it down, $USDT and $USDC each declined by $5.3 billion and $4 billion year to date, while other stablecoins collectively gained $7.2 billion, offsetting more than 70% of the drop in major stablecoins. Supply peaked at $315.5 billion on May 17, then steadily declined, while $BTC fell by about 7% over the same period.

The net decline of $2.1 billion is less than 1% of the $301.6 billion total, so it’s too early to say that funds are leaving on a large scale. It looks more like money is moving from USDT and USDC to other stablecoins. The next thing to watch is whether the growth in other stablecoins also slows.

#稳定币 #FundFlows

Attention those who staked CORE through b14g: At 17:29 Beijing time on October 31, approximately 97 million $CORE were transferred without authorization to an attacker’s address. The affected contract has been paused. Approximately 68 million remain on the Core chain, and exchanges have frozen about 9 million.

The $BTC staked through this protocol is locked on the Bitcoin network and was untouched. The remaining approximately 68 million may not be recoverable.

#CORE #BTCFi #SecurityIncident

The yield strategy platform Troves on Starknet lost about 8.6 units of $BTC from one vault on October 31, not because of a new vulnerability, but because an old version of the asset rebalancing contract that had already been replaced still retained operating permissions.

Afterward, the team revoked the contract’s permissions and proactively paused the three vaults xWBTC/WBTC, xSTRK/STRK, and xstrkBTC/strkBTC, saying no actual losses had been found in other vaults so far. At the same time, they reached out to the attacker on-chain, offering a white-hat bounty of 1 unit of $WBTC in exchange for returning the remaining funds.

A loss of 8.6 BTC is not huge, but incidents like this are the easiest to overlook and the easiest to prevent in advance: when replacing a contract, whether the old permissions were truly cut off. A detailed postmortem report and a plan for handling affected depositors have not yet been released, and that is what these people are really waiting for.

#DeFi安全 #Starknet

Binance updated the progress of the hack incident on the morning of November 1, Beijing time: it has covered $6 billion of the losses, and approximately 90% of affected assets have been replenished—one step up from the previously reported 80%. Ten tokens, including $BTC , $ETH , BNB, SOL, and USDC, are now backed by 100% reserves.

Two figures are being reported side by side: $6 billion refers to the amount, while 90% refers to the proportion of assets replenished. Since the ten major tokens are fully backed, the remaining roughly 10% is probably outside those ten. Binance has not said how much it represents or which assets it involves.

Replenishing large holdings first and taking longer with smaller, less common assets is typical in incidents like this. In the next update, watch whether the 90% figure changes; that will say more about progress than how many more dollars have been replenished.

#币安 #黑客事件 #ProofOfReserves

U.S. spot Ethereum ETFs have recorded net outflows for 23 consecutive trading days. Glassnode said on X on November 1 that this is the longest consecutive outflow streak since these products launched. Demand from traditional investors, who were buying heavily in August and September, has weakened.

The 23-day figure is more significant than any single day’s outflow. A large one-day redemption could simply mean one account is rebalancing; 23 consecutive days suggest there’s virtually no one stepping in on the buyer side, while existing holdings continue to flow out. Those purchases in August and September had been one of the main supports for $ETH price; now that money is moving in the opposite direction.

But this alone doesn’t show that something is wrong with ETH itself. ETFs are just one channel for traditional capital to enter the market. The channel is leaking, but a single data point can’t tell us whether the asset has changed or risk appetite is tightening. Next, watch how many days the outflows continue before they stop, and whether the price moves first or funds start flowing back in when they do.

#以太坊ETF #Fund flows

Most bridges are currently unavailable for people using THORChain to move assets across chains. Chainalysis says that after an Ethereum chain reorganization on October 31 Beijing time, THORChain issued duplicate refunds to a user who deposited 10 $ETH , triggering an emergency pause. Twelve of the 13 chains are still halted.

There’s some irony in a refund bug slowing down a money-laundering operation.

#THORChain #跨链桥 #On-chain security

On November 1 (Beijing time), the FBI officially attributed the Binance hack to North Korea and asked THORChain node operators, RPC node operators, instant-swap platforms, and DeFi services to block the associated addresses. It also published hundreds of addresses linked to the case.

The FBI said the attackers mainly converted the assets into $ETH and would continue laundering them through DeFi and instant swaps. Whether the funds can actually be frozen depends on whether these node operators are willing to cooperate.

#币安被盗 #朝鲜黑客 #DeFi

After about $6.3 billion was stolen from Binance, $BTC is now around $77,400, down only about 4% from before the attack began. Strive CEO Matt Cole said on October 31 that the drop was smaller than he expected—CNBC cited Anchorage Digital data showing that Bitcoin fell an average of 8.3% in the first 24 hours after trading platforms were hacked in the past.

Cole compared the attack to a bank robbery, not a failure of the Bitcoin network; it was Binance’s own system that was compromised. He also didn’t say the bottom was in, describing the current period as “early spring,” which could last another 6 to 9 months.

The investigation is worth watching more closely: Ido Ben-Natan of Blockaid believes the attacker may have exploited a loophole in Binance’s signing process, embedding 50 signature authorizations in a single Ethereum transaction. Binance said it had found no evidence of private key leaks as of Friday.

#比特币 #币安被盗 #Market reaction