News linked to this event type.
Binance has once again updated the progress of the hacking incident, stating that it has now covered $6 billion of the losses caused by the hack. Previously, Binance said it had completed the backfilling of approximately 90% of affected assets, a further increase from the previously disclosed 80%; BTC, ETH, USDT, BNB, SOL, USDC, XRP, USD1, RLUSD, and ZEC have all achieved 100% full reserve backing.
Currently, some Linux distributions have released fix patches, but others, including Ubuntu, are still preparing updates. Intersect stated that it will continue to publish security guidance through its official X account and the staking pool operators community.
DeFi protocol Troves announced that its xWBTC/WBTC vault was exploited on October 31 due to a vulnerability, with preliminary estimates indicating losses of approximately 8.6 BTC.
Odaily — In response to the FBI's call for THORNode operators, RPC node operators, and DeFi platforms to block transactions related to the Binance attacker, THORChain co-founder Chad Barraford responded on X that the information held by THORNode operators does not exceed the scope of public information, and that this information is all available in real time, so law enforcement agencies can obtain the relevant information without a subpoena.
According to blockchain analytics firm Chainalysis, THORChain triggered an emergency pause mechanism due to anomalous refund issues stemming from an Ethereum block reorg (Reorg), inadvertently delaying the process of North Korean hackers laundering stolen funds from Binance through the protocol.
Trump responded to the Binance hack by stating that if it is confirmed that North Korea was responsible, the United States will communicate with the North Korean side regarding the matter.
Odaily reports: OnKey founder Yishi posted a warning on X platform that using older iPhones as cold wallets for crypto assets may pose security risks. iPhone 4S through iPhone X are affected by the checkm8 vulnerability in BootROM, and the usbliter8 vulnerability disclosed in June this year affects iPhone XS, XR, 11 series, and second-generation SE, all of which involve low-level boot code that cannot be fixed through iOS system updates. After gaining physical access to a device, attackers can execute code via the USB interface before iOS boots, and airplane mode cannot prevent such attacks.Yishi recommends against using iPhone 11 and earlier models for storing mnemonics. Users who have already used such devices to store mnemonics should generate entirely new mnemonics in a trusted environment and migrate their assets, rather than merely changing the wallet address under the original mnemonic. In addition, users should promptly update their systems, use more complex device and wallet passwords, avoid charging via public USB ports, and remain vigilant against physical attacks during periods when the device is out of their control for extended periods.Previously, OneKey founder Yishi had posted on X platform recommending users use iPhone as a cold wallet, but only recommended iPhone 17 or newer models.
The FBI attributed the theft of over $6 billion from Binance to North Korea and called on crypto service providers to block the involved addresses and their derivative transactions.
Whale Alert detected that an address linked to Binance's stolen funds transferred out approximately 158 million TRX, worth around $49.08 million.
Strive CEO Matt Cole believes that the Binance hack has not changed the long-term investment logic for Bitcoin. The market may still need six to nine months to gradually recover, and it is currently too early to determine whether prices have bottomed out.
He Yi responded to users' inquiries regarding the return of frozen funds, stating that the current $6.3 billion has covered all stolen assets, and the $3 billion in frozen assets still needs to be recovered through formal procedures.
Community users reported that their VergeX accounts were stolen after receiving withdrawal verification code emails. VergeX team member Tintin stated in the community group that only a few users were affected and that full compensation will be provided within 72 hours.
Binance stated that approximately 90% of the affected assets have been replenished and released a new proof of reserves snapshot, planning to resume withdrawals on November 1.
Cosine noted that Lido's 7-day average APR over the past two days rose from 2.2% to 4.2%, attributing the increase to additional execution layer rewards driven by on-chain competition following the Binance hack.
SlowMist released an analysis of the zkLink attack, stating that the attacker exploited residual verification values in transient storage to forge a batch root, completed 12 withdrawals, and caused approximately $783,000 in losses.
Origin stated that it has restored on-chain liquidity for OGN. Previously, the attacker sold OGN at an average price approximately 79% lower than the reference market price due to insufficient liquidity.
According to CertiK, total losses from crypto security incidents in 2026 reached approximately $9.2 billion, with October accounting for around $6.5 billion, setting an annual record.
AI is accelerating the cyberattack process, with researchers noting that attackers have already used autonomous tools to automate phishing, vulnerability research, and credential theft. Binance stated that its October 30 incident is estimated to have caused a $6.3 billion impact; the Bitget incident in September involved approximately $387.5 million transferred to attacker-controlled addresses. Neither company has publicly attributed the incidents to AI.Google's threat intelligence unit said attackers are shifting from simple AI prompts to agentic attack workflows. In a 2026 case disclosed by Google, attackers used AI agents to carry out large-scale credential theft in under 6 hours, resulting in the leakage of thousands of third-party credentials; Anthropic has also observed attackers running AI agents in parallel to conduct reconnaissance, vulnerability exploitation, and theft.This summer, a partial seed randomness flaw in COLDCARD-generated seeds was linked to the theft of 1,367 bitcoins across more than 4,500 addresses, worth close to $116 million at the time. Keystone disclosed that an October website incident leaked personal information related to 25,964 buyer records; FBI records show that from January to November 2025, reported losses from account takeovers exceeded $262 million. (Bitcoin.com News)
Chainalysis confirmed that an external attacker accessed its systems without authorization, affecting customer user IDs, names, email addresses, and organizational role tags. Currently, there is no evidence that investigation content or authentication credentials were accessed.
Chainalysis disclosed that Binance hackers transferred stablecoin redemption rights via lending protocol deposit receipts on the Tron blockchain, and demonstrated this path with a $500,000 fund flow.