727 FinanceBinance: Ethereum and BSC networks have resumed withdrawal services for USDC and other assets; Binance attackers dumped over 130 altcoins on EVM chains alone, with a total value of approximately $279 million; Binance will resume first-phase withdrawal services between 14:00 and 17:00 on November 1; Binance updates its proof-of-reserves address list to include newly generated wallet addresses.
Today's Top News:
OpenAI: ChatGPT and Codex to share quota, effective December
Binance to restore phase-one withdrawal services between 14:00 and 17:00 on November 1
Trump on Binance attack: unclear whether North Korea is involved; if so, will raise the matter with North Korea
FBI: North Korea behind theft of over $6 billion from Binance
56 major crypto hacking incidents in October, with losses reaching $6.48 billion
Binance: approximately 90% of affected assets backfilled; publishes proof-of-reserves snapshot
Musk's xAI Grok now supports China UnionPay and Alipay payments; users report half-price first-month subscription
OneKey founder: iPhone 11 and earlier models should migrate seed phrases as soon as possible; system updates cannot fix chip-level vulnerabilities
Regulation & Macro
Next week's macro outlook: nonfarm payrolls and midterm elections take the stage together; Apple and AMD to report earnings
Key market events next week (all Beijing time): Tuesday TBD, 2026 U.S. midterm elections; Wednesday, euro area October CPI preliminary reading, U.S. September trade balance, U.S. Treasury quarterly refunding announcement and October ISM non-manufacturing PMI; Thursday, U.S. initial jobless claims; Friday, U.S. October unemployment rate, nonfarm payrolls, average hourly earnings and preliminary November University of Michigan consumer sentiment index. More than 100 S&P 500 constituents will report earnings next week; according to LSEG IBES, more than half have already reported, with Q3 earnings growth on track to reach 31.6%; Apple will report after the U.S. market close on Monday Eastern Time, and AMD and Qualcomm will also report. Over the past week, spot gold closed at $3,876.89/oz on Friday, down 6.7% in October; silver closed at $49.13/oz, down more than 18% in October.
Trump on Binance attack: unclear whether North Korea is involved; if so, will raise the matter with North Korea
U.S. President Trump, commenting on the hack of Binance, said the United States is looking into the matter and it is not yet clear whether North Korea is involved, but if it is, the matter will be raised with North Korea.
FBI: North Korea behind theft of over $6 billion from Binance
According to the official website of the U.S. Federal Bureau of Investigation (FBI), the FBI announced that North Korea is responsible for the theft of more than $6 billion in virtual assets from cryptocurrency exchange Binance around October 29, calling the North Korean malicious cyber activity "TraderTraitor." The FBI said it, along with the U.S. Secret Service (USSS) and the Internal Revenue Service Criminal Investigation division (IRS-CI), observed that the attackers mainly converted the stolen assets into ETH and are expected to further launder funds through DeFi and instant exchange services; the FBI called on THORChain node operators, RPC node operators, instant exchange platforms, DeFi services and blockchain analytics firms to block transactions with the relevant addresses, and published hundreds of related ETH, BTC and SOL addresses.
Hong Kong clearing company warns of virtual wallet scam: fake websites trick users into providing bank account information
According to a press release from the Hong Kong SAR Government, Hong Kong Interbank Clearing Limited disclosed that it had identified two fraudulent websites impersonating its official website, which induce users to make deposits and withdrawals through virtual wallets and claim to provide Faster Payment System (FPS) online transaction security support, including refunds, reporting unauthorized online transactions and transaction support. The company stressed that under normal circumstances it does not directly provide FPS services to individual members of the public, nor does it proactively contact individual members of the public, and called on the public not to provide personal or bank information to the relevant websites.
Project Updates
OpenAI: ChatGPT and Codex to share quota, effective December
OpenAI issued an announcement that it will adjust the usage quota rules for ChatGPT and Codex in December this year. The usage quotas of the three paid plans ChatGPT Plus, Pro and Business will be combined, with ChatGPT and Codex no longer calculating quotas separately but sharing the same quota pool. The adjustment is related to OpenAI integrating ChatGPT Work's agent capabilities into ChatGPT, aiming to allow users to complete more complex tasks directly in ChatGPT. After the adjustment, quota consumption will be calculated uniformly by tokens, with the specific consumption depending on the model selected by the user and the complexity of the task.
Binance: USDC and other asset withdrawal services restored on Ethereum and BSC networks
According to a Binance announcement, withdrawal services for the following assets and networks have now been restored: USDC, USDT and ETH on the Ethereum network; USDC, USDT and BNB on BNB Smart Chain (BSC). Binance said it will continue security checks and restore withdrawal services for more assets and networks in phases after completing the relevant checks.
Binance to restore phase-one withdrawal services between 14:00 and 17:00 on November 1
According to an official Binance announcement, Binance plans to restore phase-one withdrawal services between 14:00 and 17:00 (UTC+8) on November 1, with the restoration carried out in phases; the first phase covers the relevant networks and assets, and withdrawal functions will be opened successively. In addition, Binance has now backfilled approximately 95% of affected assets, up from 90% in the previous update; the remaining 5% yet to be backfilled are tokens other than the top ten tokens, which have relatively lower market liquidity and require more time to purchase the required amounts.
Binance updates proof-of-reserves address list, including newly generated wallet addresses
According to a Binance announcement, as part of ongoing security response measures, Binance has updated its "proof-of-reserves" address list to include newly generated wallet addresses; all subsequent withdrawal operations will be processed through these new wallet addresses.
Binance: withdrawal functions for 15 networks to be restored in phases, with Bitcoin network first
Binance staff member Eowyn posted that withdrawal functions will be restored in phases on November 1, covering a total of 15 networks; to effectively manage traffic, the 15 networks will not be opened simultaneously but restored successively, with the Bitcoin network being the first to be restored. Instability or delays may occur in the initial restoration period, after which the experience will gradually smooth out; if withdrawal requests stall initially, it is likely due to traffic congestion rather than a system failure.
Premia Labs attacked, losses reach $464,600; attacker has converted assets to BTC
According to PeckShieldAlert monitoring, Premia Labs suffered an attack with losses reaching $464,600. The attacker bridged the stolen funds from Arbitrum to Ethereum and then converted them to BTC via Chainflip and NEAR Intents.
Binance: approximately 90% of affected assets backfilled; publishes proof-of-reserves snapshot
According to a Binance announcement, as of October 31, approximately 90% of affected assets had been backfilled, further up from the 80% previously disclosed. BTC, ETH, USDT, BNB, SOL, USDC, XRP, USD1, RLUSD and ZEC have all achieved 100% full reserve backing; the remaining approximately 10% of assets not yet backfilled are tokens other than the previous top ten tokens, which, due to relatively lower liquidity, may take longer to purchase in full. The replenishment funds came from part of the SAFU fund (expected to be completed within the next 24 hours), part of the futures insurance fund and Binance's own corporate funds. Binance completed a new round of proof-of-reserves snapshot at 08:00 (UTC+8) on October 31; because zero-knowledge proof generation requires substantial computing resources, the full proof is expected to be generated on November 3 (UTC); withdrawal services are expected to resume as planned on November 1.
Musk's xAI Grok now supports China UnionPay and Alipay payments; users report half-price first-month subscription
According to IT Home, users have reported, and its verification confirmed, that Musk's xAI Grok now supports China UnionPay and Alipay payments, and the region options on the subscription page also include mainland China, Hong Kong, Macau and Taiwan. Because X and Grok share the same payment system, users can also use Alipay to subscribe to X Premium and enjoy Grok's Plus-level subscription. All users can enjoy a half-price discount for the first month when subscribing to Grok for the first time, and can also choose Apple Pay and Google Pay; payments linked to bank accounts will receive $5 cashback.
Binance: has covered $6 billion of the losses caused by the hack
Binance again updated on the hack incident, disclosing that it has now covered $6 billion of the losses caused by the hack. Binance previously said it had completed backfilling approximately 90% of affected assets, further up from the 80% previously disclosed, with BTC, ETH, USDT, BNB, SOL, USDC, XRP, USD1, RLUSD and ZEC all achieving 100% full reserve backing.
Genius launches revenue-driven buyback and burn mechanismOn-chain trading terminal Genius announced the expansion of $GENIUS's role in the ecosystem, launching a revenue-driven buyback and burn mechanism: a portion of the revenue generated by the Genius App will be used to buy back $GENIUS from the market and permanently burn it, directly linking product activity to token supply; holding $GENIUS will in the future allow users to enjoy fee discounts in the Genius App and other applications; holding at least 1,000 $GENIUS grants certification, displayed as a top-tier Genius within the App, and may participate in future airdrops and other in-app benefits. Genius previously launched a mobile app integrating BNB Chain trading, social, and token creation features.
Nasdaq-listed company NXTT considers selling $450 million in Bitcoin due to Binance hack and quantum risk
According to CoinDesk, Nasdaq-listed software company Next Technology Holding (NXTT) said its board has authorized the sale or pledging of its approximately 5,833 Bitcoin, worth about $449 million, in tranches, citing the Binance hack, exchange vulnerabilities, and the potential threat of quantum computing to Bitcoin cryptography. The company said none of its Bitcoin was stored on Binance. CEO Weihong Liu will decide the timing, price, and size of transactions; the authorization permits exchange sales, privately negotiated transactions, and Bitcoin-collateralized financing, but does not guarantee that transactions will be completed. Most of the company's Bitcoin came from a transaction in March 2025 with total consideration of $158.1 million. The company is headquartered in Japan, closed at $5.30 on Friday, and has a circulating market capitalization of about $7.8 million.
Binance SAFU wallet transferred out 7,500 BTC half an hour ago, possibly to top up assets required for Proof of Reserves
According to on-chain analyst Ai Yi's monitoring, the Binance SAFU wallet transferred out 7,500 BTC ($580 million) half an hour ago, possibly to top up assets required for Proof of Reserves; the address still has 7,500 BTC remaining. Binance co-founder Yi He subsequently said that the reserves for BTC, ETH, USDT, BNB, SOL, USDC, XRP, USD1, RLUSD, and ZEC have returned to 100%.
Analysis: Ethereum reorganization caused THORChain to pause, unexpectedly delaying money laundering of stolen Binance funds
According to TokenPost, blockchain analytics firm Chainalysis said that at 10 a.m. ET on October 31, a chain reorganization occurred on Ethereum, causing cross-chain protocol THORChain to erroneously issue a double refund to a user who deposited 10 ETH, and triggering an emergency pause. The pause shut down swap functionality across most of THORChain's cross-chain bridges for all users, including North Korean money launderers, unexpectedly delaying the laundering of a large amount of stolen Binance funds. Separately, according to The Defiant, THORChain's status interface shows that transactions on 12 of the 13 chains it lists remain paused, while outbound signing remains enabled on most chains.
Meta and Chinese company Fourier developed a humanoid robot prototype in 3 months
According to Reuters citing The Information, people familiar with the matter said Meta collaborated with Chinese robotics company Fourier Intelligence to develop a humanoid robot prototype in only about 3 months and has begun developing a second-generation product. The prototype, internally codenamed Max, weighs about 106 pounds (about 48 kilograms). Meta views humanoid robots as the physical carrier of its Muse agent and hopes they will perform various household tasks. Meta said it currently has no plans to sell these robots.
ICE republished the trade.xyz cooperation announcement, revising wording to include "plans to introduce" and "subject to regulatory approval"
ICE, the parent company of the New York Stock Exchange, republished the trade.xyz cooperation announcement, revising the wording to include "plans to introduce" and "subject to regulatory approval."
Multiple crypto trading platforms strengthen security measures, Coinbase adjusts cold storage system
According to the UK's Financial Times, after Binance suffered a $6.3 billion theft, multiple crypto trading platforms are stepping up security measures. Coinbase Chief Security Officer Jeff Lunglhofer said the company has made partial adjustments to its cold storage system; Gemini has added warnings and restrictions for fund transfers; Kraken said it is closely monitoring the situation and platform services are operating normally. Coinbase Vice President of Product Will Megson said the company is significantly upgrading telephone protection measures, because scammers often keep victims on the line to induce them to change account settings. Chainalysis attributed the attack to the North Korea-linked hacking group TraderTraitor. OKX CEO Star Xu called on the industry to establish real-time security incident reporting, coordinated monitoring of suspicious funds, and rapid response mechanisms.
Step Drainer attack has spread to 10 websites including StonkFun and Pickle Finance
According to SolanaFloor monitoring, the Step Drainer attack has been found on another 10 websites, including stonkfun.xyz, pickle.finance, echelon.market, origami.finance, fluxbeam.xyz, stakepoint.app, supswap.xyz, longbow.cash, shprd.finance, and apexdefi.xyz. SolanaFloor said it is actively investigating and collecting more data. StonkFun said its website has recovered after migrating to new infrastructure, on-chain operations were unaffected, and no users are currently known to be affected. Step Drainer is a highly active malware-as-a-service (MaaS) wallet drainer.
New Ethereum draft proposes allowing wallets to permanently disable EIP-7702 delegation
According to The Defiant, Ethereum developer nicolashw submitted a core EIP draft on October 30 titled "Permanent Exit from EOA Delegation," which would allow key-controlled wallets to permanently disable EIP-7702 delegation, enabling account owners to reject smart contract execution on existing addresses. The proposal number has not yet been assigned and remains open and unmerged. The draft would use a currently invalid EIP-7702 type 4 transaction to install a non-executable three-byte marker in the account, causing future delegation authorizations to be skipped; the account would retain its address, ordinary transfers, and contract call capabilities, but incoming calls would not execute code. The draft notes that this feature can only block EIP-7702 delegation and cannot guard against other risks after a private key is stolen; if the private key leaks, an attacker can still transfer funds, grant token approvals, or sign contract authorizations, and existing approvals would not be revoked.
Investment and financing news
Views & Analysis
OneKey founder: iPhone 11 and earlier models should migrate seed phrases as soon as possible; system updates cannot fix chip-level vulnerabilities
OneKey founder Yishi posted a reminder that erasing data from older iPhones, turning on airplane mode, and using them solely as seed phrase storage devices is not as safe as most people imagine. iPhone 11 and earlier models (including XS, XR, the 11 series, the second-generation SE, etc.) have BootROM hardware vulnerabilities (checkm8, usbliter8) that cannot be fixed through software updates. An attacker only needs physical access to the device and, through DFU mode with a specially crafted USB device, can execute code before the system boots; airplane mode is ineffective and the phone shows no abnormalities after the attack (a typical "evil maid" attack). He recommends that users migrate seed phrases to new devices as soon as possible and generate entirely new seed phrases to move assets; creating new addresses under the old seed is ineffective. He also recommends using long alphanumeric passwords, avoiding simple 6-digit PINs, enabling Lockdown Mode, and keeping the system up to date.
THORChain co-founder responds to FBI call to block transactions: operators do not hold non-public information; investigators can obtain data without a subpoena
In response to the FBI's call for THORNode operators, RPC node operators, and DeFi platforms to block transactions related to the Binance attacker, THORChain co-founder Chad Barraford said that THORNode operators do not hold any non-public information; all relevant data is already public in real time, and investigators can obtain it without a subpoena, which he called the ideal situation for an investigation. He said that whenever a large-scale hack occurs, attackers usually aim to convert crypto assets into dollars through centralized platforms, because those platforms hold the identity information of wrongdoers and maintain contact with them, and should cooperate with law enforcement.
Bitwise: The Binance hack will not affect Bitcoin's price; market expected to recover within a weekBitwise Chief Investment Officer Matt Hougan said during a CNBC live broadcast that the Binance hack will absolutely not affect Bitcoin's price. He stated that it will not change Bitcoin's long-term direction, the blockchain itself was not hacked, and he expects to see market recovery within a week.
Key Data
Binance attackers sold off over 130 altcoins on EVM chains alone, with a total value of approximately $279 million
According to Lookonchain monitoring, on EVM chains alone, the Binance attackers sold off more than 130 altcoins in exchange for 123,400 ETH (worth $277.26 million) and 1.69 million USDC, with a total value of approximately $279 million.
Analyst: Lazarus Group's total stolen funds reach $11.87 billion, equivalent to 45% of North Korea's 2025 GDP
Analyst Darkfost posted that with the attack on Binance, the Lazarus Group's total stolen funds have reached $11.87 billion. According to 2025 data from the Bank of Korea, this is equivalent to 45% of North Korea's gross domestic product (GDP) and 35% of its gross national income (GNI). The attack on Binance is the North Korean hacker group's most profitable operation to date.
Major crypto industry hacking incidents in October reached 56, with losses of $6.48 billion
According to PeckShieldAlert statistics, in October 2026 there were 56 major hacking attacks in the crypto industry, with total losses of approximately $6.48 billion, a month-on-month surge of about 745% from $766.5 million in September. Among them, the Binance incident (approximately $6.3 billion, with $3 billion frozen) jumped to the top of the year's largest theft cases, surpassing Bitget (approximately $387 million) and Liquid Network (approximately $320 million, with $285 million recovered). As of October 31, the top ten hacking incidents of the year accounted for 92.3% of the total annual losses ($8.6 billion), before deducting frozen and returned funds.
Total stablecoin supply falls to $298.5 billion, a new low since August
According to Sumcap data, since October 28 the total stablecoin supply has decreased by $3.1 billion, currently falling to $298.5 billion, the lowest level since August, down $5.2 billion from January 1, 2026. The peak during the year occurred on May 17 at $315.5 billion, after which all gains were erased. Since January 1, USDT supply has decreased by $5.3 billion, USDC has decreased by $4 billion, and other stablecoins combined have increased by $7.2 billion, with smaller issuers still gaining market share. Overall, the sector contracted by $2.1 billion during the period, while Bitcoin's price fell 7% over the same period; the rules related to the first U.S. regulatory framework for stablecoins, the GENIUS Act, were also officially introduced in October.
Bitcoin's historical November returns: 10 gains and 6 losses since 2010, average return 34.59%
According to Coinglass data, Bitcoin's October 2026 return was -7.32%, the fourth-lowest October return in history; Ethereum's October 2026 return was -16.06%, the second-lowest October return in history. Since 2010, Bitcoin has had 16 "November" performances, with 10 gains and 6 losses; the largest gain was 453.6% in November 2013, the largest decline was 36.41% in November 2018, the average return was 34.59%, and the median was 10.26%. Since 2015, Ethereum has had 11 "November" performances, with 5 gains and 6 losses; the largest gain was 59.04% in November 2020, the largest decline was 42.66% in November 2018, and the median return was -4.75%.
Data: Binance hacker transferred $38 million via Relay cross-chain in 7 hours
Onchain Lens posted on X that the North Korea-linked Binance hacker transferred approximately $38 million through the cross-chain protocol Relay within 7 hours, and the transfers are still ongoing, despite Relay claiming to have deployed a KYT system. Onchain Lens noted that the hacker had previously been unable to move funds so quickly through THORChain. The situation was first discovered by on-chain analyst Specter, and the relevant Tron address is TNhpfKq83wufEKGjBhQFnT7jnxYmyBzH6F.