Major Developer Documentation Platform GitBook Hit by AI Agent-Driven Attack, Crypto Projects' Docs Affected GitBook reported that attackers used AI agents to gain unauthorized access to some of its infrastructure credentials at 1:00 p.m. EST on November 2. The company detected and blocked the attack, temporarily suspending some services. Potentially exposed data includes integration tokens, Git Sync secrets, API tokens, and visitor questions submitted to GitBook Assistant. No evidence of content modification has been found. GitBook rotated all infrastructure credentials and secrets, revoked all customer API tokens, and advised users to rotate third-party credentials and re-authenticate GitBook MCP connections. By 10:21 a.m. EST on November 3, its app, API, and published docs were accessible again, though some services remained degraded. A full post-incident report is planned. Previously, trade[XYZ] reported unauthorized activity involving its GitBook documentation, which it later restored, and warned users against clicking links during the investigation. PancakeSwap temporarily took its documentation site offline as a precaution following the GitBook security incident and redirected documentation links to its official homepage.

Solana Wallet Solflare Goes on High Security Alert Amid Recent Crypto Attacks Solflare co-founder Vidor said the Solana-based crypto wallet has entered a heightened state of security alert following a series of recent security incidents across the crypto industry. The team has restricted access to its infrastructure and code, introduced multiple layers of approval for all changes, and paused new additions. Vidor acknowledged that the measures would slow development but said the team was willing to accept the trade-off.

Tether CEO Says Company Owns Approximately 150,000 Bitcoin Tether CEO Paolo Ardoino said during his keynote at the Plan ₿ Forum in Lugano that the company owns approximately 150,000 BTC. He also claimed that Tether serves more than 730 million users globally, adding around 30 million new wallets per quarter. According to Tether’s Q3 2026 attestation, the company held approximately $122.8 billion in U.S. Treasury bills directly, or $132.4 billion including repurchase agreements, while excess reserves reached approximately $7.95 billion. Ardoino also outlined Tether’s broader Independence Stack initiative, covering energy, Bitcoin mining, peer-to-peer communications, self-custody wallets, and on-device AI.

Binance Attacker Moved About $242 Million via Tron Within Two Days; Over $3 Billion in Stolen Assets Remain Largely Untouched According to on-chain analyst SomaXBT, about two days after the Binance attack, the attacker transferred approximately $242 million through Tron-related paths. In the incident, roughly $628 million in assets on Tron were stolen. After Tether froze about 378.7 million USDT, the attacker moved funds via Relay, THORChain, Chainflip, Symbiosis and other channels. An additional approximately $41.7 million flowed through Bitget Wallet, with its destination still unconfirmed. About $7.5 million remains on Tron, while more than $3 billion in stolen assets held by the attacker on other chains have largely remained unmoved.

OneKey Founder: Some Older iPhones Have Unpatchable Chip Vulnerabilities, Posing Risks to Seed Phrase Storage OneKey founder Yishi warned that factory-resetting an older iPhone, enabling airplane mode, and using it to store crypto wallet seed phrases offline may still be unsafe. He noted that iPhone 4S through iPhone X are affected by checkm8, while iPhone XS, XR, 11 series, and second-generation iPhone SE are affected by usbliter8, disclosed earlier this year. These BootROM-level vulnerabilities cannot be fixed through iOS updates. Attackers with physical access and specialized tools may exploit them via USB, even in airplane mode. However, on models such as the XS and 11, these flaws alone do not provide direct access to seed phrases, as device passcodes and the Secure Enclave offer additional protection. Yishi advised affected users to generate entirely new seed phrases in a trusted environment, transfer their assets, use newer devices, keep software updated, and adopt stronger passwords.

North Korean Hackers Moved $38M Through Relay Protocol in 7 Hours On-chain analyst Specter reported that North Korean hackers transferred approximately $38 million through Relay Protocol within seven hours, with transfers still ongoing at the time of the post. Despite Relay's claims of having a Know Your Transaction (KYT) monitoring system in place, it failed to block the transfers. Specter noted that North Korean hackers would have struggled to move such a large amount through THORChain in the same timeframe, raising questions about Relay's compliance and risk controls. Relay Protocol is a cross-chain bridge and interoperability protocol that enables asset transfers across multiple blockchains.

U.S. Spot Ethereum ETFs Hit Record 23-Day Net Outflow Streak Since Launch On-chain analytics firm Glassnode reported that U.S. spot Ethereum ETFs have recorded 23 consecutive trading days of net outflows, marking their longest streak since launch. Glassnode said the sustained withdrawals reflect weakening demand from traditional finance investors, who had accumulated ETH heavily in August and September.

Chainalysis: Ethereum Reorg Triggers THORChain Emergency Pause, Delaying Laundering of Binance Hack Funds Blockchain analytics firm Chainalysis said an Ethereum chain reorganization on the morning of October 31 (EDT) caused THORChain to mistakenly issue a double refund to a user who had deposited 10 ETH, triggering an emergency pause. The pause blocked cross-chain swaps through most of THORChain’s bridges for all users, including North Korean money launderers, inadvertently delaying the laundering of a significant amount of funds stolen from Binance.

ICE Reposts Trade[XYZ] Partnership Announcement, Emphasizing "Plans to Bring" and "Subject to Regulatory Approvals" Following the deletion of its earlier post, Intercontinental Exchange (ICE) reposted its partnership announcement with Trade[XYZ]. In the updated post, ICE amended its phrasing to emphasize that the two parties "plan to bring Hyperliquid-based perps to the U.S." and that operating "U.S. regulated versions" remains strictly "subject to regulatory approvals," with both parties seeking approvals to launch a new market built on Hyperliquid to operate KYC-compliant perp markets, including approvals to support leveraged trading.

Binance Co-CEO: Attackers Used Self-Destruct Mechanisms, Making the Hack Harder to Trace Binance Co-CEO Richard Teng @_RichardTeng updated the investigation into the roughly $6.3 billion hack on October 30, saying multiple people were involved. Investigators initially suspected a compromised laptop but later found other entry points. Attackers used self-destruct mechanisms to erase tools and traces, complicating the investigation. Teng said they used EIP-7702 to gain on-chain execution authority over a hot wallet without passing Binance's normal approval controls. Binance paused withdrawals to rebuild and test its systems, targeting restoration within 40 hours. It is also working with law enforcement to trace and recover stolen funds.

Chainalysis Hit by Cyberattack, Accessing User Names, Emails, and Organization Roles Blockchain data analytics and tracking firm Chainalysis disclosed that an external hacker used "offensive agentic techniques" to gain unauthorized access to its internal systems and tools, leading to the compromise of some non-sensitive customer data, including user IDs, full names, email addresses, and organization role labels. Chainalysis emphasized in an email that the security incident is unrelated to the recent crypto theft involving Binance. The current investigation has found no indication that investigative content (such as graphs, notes, or cases), transaction or query results, plaintext passwords, MFA secrets, or user session tokens were accessed. The team is actively determining the specific affected records while patching vulnerabilities and hardening system security.

Trump on Binance Hack: Says He Has Long Been Wary of Digital Money Risks On October 30, President Donald Trump @realDonaldTrump addressed Binance’s reported $6.3 billion crypto theft during a press exchange in the White House Oval Office. Asked whether North Korea was responsible, Trump said the U.S. was still investigating. He added that Binance claimed it would recover the stolen funds and had the situation largely under control, but cautioned, “We’ll see.” Comparing digital transactions with traditional paper checks, Trump said people no longer see their money physically and that he had always considered this “a little bit dangerous.”

Ethereum Block Builder Titan Builder Briefly Tops 24-Hour Protocol Revenue Rankings With $22.83M, Surpassing Tether According to DeFiLlama, Ethereum block builder Titan Builder briefly ranked first in 24-hour protocol revenue with $22.83 million, surpassing Tether. DeFiLlama co-founder 0xngmi said Titan Builder generated approximately $24.7 million in fees over the same period, an unusually high figure that DeFiLlama’s systems initially flagged and blocked as a data error. He attributed the surge in MEV activity to arbitrage opportunities created by hacker-related market disruptions and widespread panic.

Binance Co-Founder He Yi Explains the $6.3 Billion Hack On October 30, 2026, Binance co-founder He Yi @heyibinance said Binance had suffered a cyberattack affecting approximately $6.3 billion in assets, of which around $3 billion had been frozen with assistance from industry participants. Binance is rebuilding its security environment and reviewing its wallets, with withdrawals expected to resume within the next 42 hours. The company will use its own funds to cover the stolen assets, with only a small portion requiring purchases on the market. She described the incident as a complex, multi-vector attack and said Binance would release a technical security audit report and work with law enforcement agencies worldwide to track down the hackers and trace the funds.

Binance Says $6.3B Security Incident May Stem From Compromised DevOps Laptop, No Evidence of Private Key Leak Binance said its initial investigation suggests the security incident may have involved a compromised DevOps engineer's laptop, allowing the attacker to access a service container and submit unauthorized withdrawal transactions. The exchange said it has found no evidence that any wallet private keys were leaked. Binance estimates the total impact at approximately $6.3 billion, with around $3 billion in affected assets frozen on-chain. Deposits and withdrawals have been temporarily suspended, and the affected address authorization has been revoked. Binance said it will cover all losses through its SAFU fund and company funds, with a detailed technical post-mortem to follow.

Coinbase Derivatives Head on Deribit Integration, Crypto Options, and What Comes Next Luuk explains why Deribit chose to join Coinbase, how its upgraded matching engine delivers 50–60x faster performance, and what the acquisition means for the exchange’s product roadmap. He also discusses the expansion into equity, commodity, and pre-IPO perpetual futures, where demand has exceeded expectations — and where it has fallen short. With limited fresh capital entering crypto options, Coinbase is focused on unlocking liquidity from existing institutional holdings, improving capital efficiency, and expanding access to U.S. traders. Looking ahead, Luuk sees a modest bullish bias in options positioning and futures markets, but little evidence of a strong directional consensus.

Legendary Wall Street Investor Stanley Druckenmiller Invests in Trade xyz; Musk Retweets as HYPE Surges 17.64% Legendary Wall Street investor Stan Druckenmiller stated in his debut post on X that he has invested in Trade xyz, expressing strong support for the platform's partnership with the Intercontinental Exchange (ICE) to bring 24/7 perpetual contract trading to the US market. Druckenmiller noted that, as an active market participant, he looks forward to utilizing the platform's innovative products to optimize his own investment decision-making process. The post was subsequently retweeted by Elon Musk with the comment "Interesting." Driven by today's news, HYPE surged to $94.64, registering a 24-hour gain of 17.64% and sitting just 4.3% shy of its all-time high (ATH).

US Q3 Advance Real GDP Annualized QoQ Hits 3.4%, Above 3.2% Expected The advance estimate of US real GDP for the third quarter expanded at an annualized quarterly rate of 3.4%, topping the 3.2% forecast and accelerating from the previous quarter's 2.20%. Meanwhile, the advance reading for the Q3 annualized core PCE price index came in at 2.5%, slightly above the 2.40% estimate but down from 3.30% in the prior quarter. For September, the monthly core PCE price index rose 0.3%, matching the 0.30% expectation, while the previous month's figure was revised upward from 0.20% to 0.3%. The annual core PCE rate for September printed at 3.1%, meeting the 3.10% consensus and edging up from 3.00% previously. Analysts noted that US third-quarter GDP beat expectations while September inflation accelerated in tandem, matching market consensus.

Indonesia's Largest Crypto Exchange Indodax Suspends Deposits and Withdrawals Amid Increased Cyberattack Attempts William Sutanto, co-founder and CEO of Indonesia's largest cryptocurrency exchange Indodax, said the platform has temporarily suspended deposits and withdrawals as a precaution after detecting an increase in cyberattack attempts. The team is conducting security assessments and mitigation measures, with services to resume once safety is confirmed. Sutanto emphasized that customer assets remain secure and that no unauthorized withdrawals or data breaches have been detected.

Singapore Police Say Ledger crypto Wallets Sold at Local Retailers Contained Malicious Hardware Implants Singapore police said on October 28 that some Ledger cryptocurrency hardware wallets purchased from local retailers contained malicious hardware implants capable of stealing users' recovery phrases or private keys. At least two cases have been reported since September 10, resulting in losses of approximately S$3.5 million ($2.7 million). Ledger, a leading French hardware wallet manufacturer, is reviewing the affected cases, while police investigations remain ongoing.