1. Binance Reveals Preliminary Investigation into $6.34 Billion Hack: Fake Job Interviews Used to Install Malware, Internal AI Tools Exploited
Binance has released a preliminary investigation report on the October 29 hack, revealing that attackers gradually infiltrated its wallet infrastructure through fake job interviews, malware, and internal AI tools. In September this year, an engineer downloaded a project containing malicious code during a fake job interview, compromising their work computer. On October 20, attackers further exploited the compromised device and internal AI tools to gain system access to other wallet engineers. On October 29, using stolen credentials, attackers deployed malicious containers to gain unauthorized access to the internal wallet signing service and delegated some execution permissions to a smart contract they controlled through Ethereum's EIP-7702 authorization mechanism. The incident involved approximately $6.34 billion in digital assets, of which approximately $2.85 billion has been frozen or intercepted. As of October 31, 98% of the affected token assets had been replenished.
2. BitMart hacked amid shutdown; founder says attackers may be part of the same group that targeted Mercado Bitcoin
Sheldon Xia, founder of crypto exchange BitMart, which has announced its closure and is proceeding with restructuring and liquidation, confirmed in a post that BitMart was also hit by a cyberattack yesterday. The amount involved was relatively small, and the team promptly launched an investigation and strengthened its security defenses. Preliminary findings indicate that the attackers may be the same group behind yesterday’s attack on Mercado Bitcoin, a major Brazilian crypto exchange. Sheldon revealed that restructuring has reduced the team to essential personnel only, leaving the security and technology teams severely understaffed. The platform is doing everything it can to retain key technical staff and protect data and assets.
3. Hong Kong Legislative Council passes crypto-asset reporting framework bill; automatic exchange of tax information to begin in 2028
Hong Kong Legislative Council member Yan Gang disclosed on November 4 that the council had passed the Inland Revenue (Amendment) (Crypto-Asset Reporting Framework and Updated Common Reporting Standard) Bill 2026 that day, implementing the OECD’s Crypto-Asset Reporting Framework (CARF). Under the arrangements, crypto-asset service providers that meet the relevant criteria must conduct customer due diligence and report transaction information starting in 2027. Hong Kong plans to begin automatically exchanging tax information on crypto-asset transactions with partner tax jurisdictions in 2028. The information to be reported includes users’ tax residency, crypto-asset purchases and sales, and transfers.
4. Circle reports third-quarter 2026 results: revenue up 17% to $865 million, average USDC in circulation reaches $73.3 billion
Circle disclosed that revenue and reserve income for the third quarter of 2026 rose 17% year over year to $865 million, while net income from continuing operations increased 5% to $226 million. Other income included $182 million in proceeds from the presale of ARC tokens. Average USDC in circulation during the quarter was $73.3 billion, up 8% year over year. Circle also said it had completed the genesis minting of 10 billion ARC tokens and signed a definitive agreement to acquire cross-border payments platform Tazapay. The transaction is expected to close in 2027, subject to regulatory approval. The company cut its workforce by approximately 5% in the third quarter to better align its organizational structure with its operating model and strategic priorities. The changes resulted in restructuring expenses of approximately $9.145 million, primarily covering severance, pay in lieu of notice, and employee benefits.
5. French bank Crédit Mutuel Arkéa confirms fraudulent transfers; ZachXBT estimates more than $133 million stolen
On November 4, on-chain investigator ZachXBT updated his earlier report about the theft from a European Union financial institution, saying that the suspected victim was French bank Crédit Mutuel Arkéa, which has approximately $235 billion in assets. ZachXBT had previously reported that an EU entity was suspected of having more than $106 million stolen from several centralized exchange accounts on November 1. The attackers withdrew funds in USDC and USDT, then moved the assets through instant exchange platforms, privacy coin XMR, and cross-chain bridges. The latest reported estimate of the suspected theft has risen to more than $133 million.