WuBlockchain

Coinbase reported Q3 2026 revenue of $1.22 billion, down 35% year over year, while net income rose 66% to $719 million, ending three consecutive quarters of losses. Earnings per share reached $2.51, with profits largely driven by unrealized crypto gains. Adjusted net income was $78 million. Meanwhile, prediction markets surpassed $200 million in annualized revenue, with 82% quarterly compound growth since launch. Coinbase's crypto trading market share reached 10.7%, while average USDC holdings hit a record $22 billion.

Trezor said it received a credible report of a suspected hardware implant in a Trezor Safe 5 device purchased from reseller CryptoBilis in August 2026. The company has not yet received the device for verification, and no CryptoBilis customer has reported losing funds.
Trezor urged customers who purchased devices from CryptoBilis since March 2026 to move their funds to newly created wallets with new recovery seeds as soon as possible. The company removed CryptoBilis as a reseller on October 9 following reports of tampered Ledger devices. Four Trezor devices inspected so far showed no signs of tampering, and the investigation remains ongoing.

Aave risk service provider LlamaRisk said one wallet linked to the Binance exploiter deposited about 60 million USDT into Aave V3 Ethereum Core and borrowed 19,762 WETH (worth roughly $44.6 million) between 20:58 and 21:01 UTC on October 29, about 40 minutes before the first freeze. The position remains over-collateralized and is the exploiter’s only position on Aave.
Aave froze all DAO-operated V3 and V4 markets as a precaution after a potential security incident involving Binance-affiliated wallets, pausing new deposits and borrowing. Users can still withdraw assets and repay existing loans. In total, 175 V3 reserves across 16 networks and 117 V4 reserves across four networks were frozen. Aave said its contracts were unaffected and it aims to lift the freeze as soon as possible.

ZachXBT posted that stolen funds from the $6.3 billion Binance exploit and the $388 million Bitget exploit arrived via THORChain and were commingled at the same address. ZachXBT stated that this indicates the same actor is likely behind both incidents. The Bitget exploit had previously been attributed to the North Korea-linked TraiderTraitor, which has overlap with other previous exploits such as Kelp DAO.
According to MistTrack, stolen TRX from the Binance incident flowed through Bitget Wallet Swap Bridge into an address beginning with 0xCd68. On-chain tracking shows that this address was previously used by the Phemex hacker.

According to Kraken’s status page, the platform began investigating connectivity and order placement issues at 02:42 UTC on October 30, affecting spot and derivatives users across the web, mobile app, and REST, WebSocket, and FIX interfaces. Kraken announced the issue was resolved at 03:42 UTC the same day.

According to analysis by blockchain security firm Blockaid, the attacker used Ethereum’s EIP-7702 authorization mechanism to attack Binance’s Binance 14 hot wallet. Because the attacker could not determine the hot wallet’s live nonce, and EIP-7702 authorizations must match the account’s nonce at the time of transaction execution, the attacker submitted 50 authorizations with different nonces (18914775 to 18914824) in a single Type-4 transaction. Only one matched successfully, allowing the malicious delegation to take effect.
The successful authorization delegated the hot wallet’s account code to an unverified malicious asset-transfer contract. The contract allows only the address designated by the attacker to execute the sweep() function, which can transfer ETH and ERC-20 tokens from the wallet while retaining 1 ETH for gas fees. Subsequent incoming assets may also be at risk of being transferred.

Binance said its initial investigation suggests the security incident may have involved a compromised DevOps engineer's laptop, allowing the attacker to access a service container and submit unauthorized withdrawal transactions. The exchange said it has found no evidence that any wallet private keys were leaked.
Binance estimates the total impact at approximately $6.3 billion, with around $3 billion in affected assets frozen on-chain. Deposits and withdrawals have been temporarily suspended, and the affected address authorization has been revoked. Binance said it will cover all losses through its SAFU fund and company funds, with a detailed technical post-mortem to follow.

Strategy reported $19.53 billion in net income for Q3 2026, compared with $2.79 billion a year earlier, largely driven by $20.91 billion in digital asset gains. The company also disclosed that it sold approximately $431.8 million worth of Bitcoin year-to-date to fund a portion of its preferred stock dividends and STRC share repurchases. As of October 25, Strategy held 848,517 BTC, up 26% year-to-date, having purchased $14.33 billion worth of Bitcoin during 2026. CFO Andrew Kang will step down on November 5, with Reza Virasteh set to succeed him on January 1, 2027.

The Arbitrum Security Council announced that it has taken emergency action to rescue 74,559,805 ARB and 8,425 ETH held in an address on Arbitrum One identified as connected to the Binance exploit. The Security Council acted after weighing its commitment to the security and integrity of the Arbitrum community and Arbitrum governance, without impacting any Arbitrum users or applications.
After significant technical diligence and deliberation, the Security Council identified and executed a technical approach to move the funds to safety without affecting any other chain state or other Arbitrum users. As of October 30, 2026, the funds have been successfully transferred to an intermediary frozen wallet. The funds are no longer accessible to the address that originally held them and can only be moved by further action of the Security Council or a vote of Arbitrum DAO governance, which will be coordinated with relevant parties.

Binance co-founder Yi He stated that user funds are safe. Binance will cover all hacking losses. Deposits and withdrawals have been temporarily suspended while the team conducts security checks, freezes funds, and works with law enforcement. A full post-mortem will be shared once the investigation is complete. Please rely only on official Binance channels for updates.

According to Arkham data, an entity labeled "binance-hacker-1029" is associated with 66 on-chain addresses holding approximately $5.88 billion in crypto assets, including 1.768 billion USDT, 18,270 BTC ($1.44 billion), 466,622 ETH ($1.06 billion), and 824.56 million USDC, among other assets. Binance previously confirmed that $2.54 billion in assets linked to the hack had been frozen, with the total potentially increasing as recovery efforts continue. The $5.88 billion figure represents the addresses' holdings, not the confirmed amount stolen in the attack.

Breaking: Binance co-founder Changpeng Zhao (CZ) said the exchange appeared to have been hacked but that user funds were safe. Tether CEO Paolo Ardoino said the company had frozen over 1.567 billion USDT linked to the potential hack, while Circle CEO Jeremy Allaire said Circle had frozen more than 800 million USDC associated with the incident in coordination with law enforcement. CZ thanked both companies and said that although he no longer manages Binance, he expects all user funds to be fully covered.
Binance said it is actively investigating reports of a potential security issue and confirmed that user funds are completely safe. Its security team is urgently reviewing the situation and will provide updates through official channels once information is verified. Binance also warned users to beware of scams, unofficial links, messages, and requests for account information.

Multiple Polymarket users reported unauthorized fund transfers, with some claiming losses of hundreds of thousands of dollars. Users suspected a possible frontend compromise, though the cause remains unconfirmed. Polymarket said it had entered cancel-only mode and paused relayer actions while investigating. The platform previously reported a third-party vendor breach that led to approximately $3 million in stolen user funds, but said the vulnerability had been fixed and affected users would be fully reimbursed.

Legendary Wall Street investor Stan Druckenmiller stated in his debut post on X that he has invested in Trade xyz, expressing strong support for the platform's partnership with the Intercontinental Exchange (ICE) to bring 24/7 perpetual contract trading to the US market. Druckenmiller noted that, as an active market participant, he looks forward to utilizing the platform's innovative products to optimize his own investment decision-making process. The post was subsequently retweeted by Elon Musk with the comment "Interesting." Driven by today's news, HYPE surged to $94.64, registering a 24-hour gain of 17.64% and sitting just 4.3% shy of its all-time high (ATH).

According to on-chain investigator ZachXBT, suspected insiders of Axis Robotics received over 76 million AXIS tokens (valued at over $12 million) from the team multisig wallet before dumping them via decentralized exchanges (DEXs) and depositing funds into Bitget. ZachXBT highlighted that one insider offloaded approximately 42 million tokens (~5.04 million USDC) directly from the team multisig, triggering a 40% price plunge just one week after the token was listed on Coinbase, Upbit, and Binance.

The advance estimate of US real GDP for the third quarter expanded at an annualized quarterly rate of 3.4%, topping the 3.2% forecast and accelerating from the previous quarter's 2.20%. Meanwhile, the advance reading for the Q3 annualized core PCE price index came in at 2.5%, slightly above the 2.40% estimate but down from 3.30% in the prior quarter. For September, the monthly core PCE price index rose 0.3%, matching the 0.30% expectation, while the previous month's figure was revised upward from 0.20% to 0.3%. The annual core PCE rate for September printed at 3.1%, meeting the 3.10% consensus and edging up from 3.00% previously. Analysts noted that US third-quarter GDP beat expectations while September inflation accelerated in tandem, matching market consensus.

William Sutanto, co-founder and CEO of Indonesia's largest cryptocurrency exchange Indodax, said the platform has temporarily suspended deposits and withdrawals as a precaution after detecting an increase in cyberattack attempts. The team is conducting security assessments and mitigation measures, with services to resume once safety is confirmed. Sutanto emphasized that customer assets remain secure and that no unauthorized withdrawals or data breaches have been detected.

According to TASS, Vladimir Chistyukhin, First Deputy Governor of the Bank of Russia, stated that proposed restrictions on non-custodial crypto wallets under the draft legislation regulating cryptocurrency circulation will not apply to international settlements, where the use of non-custodial wallets will remain permitted. Chistyukhin noted that while allowing domestic Russian investors to utilize non-custodial wallets was initially considered during the drafting process, authorities ultimately decided against permitting direct investments via non-custodial wallets due to investor protection concerns, AML requirements, and oversight constraints. However, the forthcoming restrictions do not prevent users from transferring cryptocurrencies from domestic custodial wallets to foreign custodial wallets, and subsequently moving them into non-custodial wallets.