Binance Revealed the $6.3B Hack, Bitcoin ETFs Lost $870 Million, and Much More
Binance disclosed that the October 29 breach came through fake recruiter interviews and compromised developer tools. FinCEN cut MEXC Global off from US banks over $16 billion in alleged illicit activity. Bitcoin ETFs bled nearly $870 million in four days. Democrats swept the US midterms and Bitcoin dropped to $75,500. And Paybis launched its biggest-ever fee campaign.
Here is everything that mattered in crypto from November 2 to 8, 2026.
Binance Revealed How Attackers Stole $6.3 Billion
Binance published its account of the October 29 breach, saying attackers used fake recruiter interviews and compromised developer tools to access its signing service. About $6.34 billion left the exchange. Partners froze or intercepted roughly $2.85 billion, and Binance said it has replenished 98% of affected token assets.
The attack vector (fake job interviews used to compromise developer machines) is the same technique North Korea’s TraderTraitor group has used in prior operations. The signing service compromise gave attackers the ability to authorize transactions without triggering standard controls.
The 98% replenishment figure addresses user funds but does not resolve the question of how $3.5 billion in unrecovered assets gets accounted for long term.
FinCEN Cut MEXC Off From US Banks
The US Treasury’s FinCEN issued a 311 special measure order against MEXC Global, barring the exchange from accessing US financial institutions. FinCEN alleged MEXC processed about $16 billion in illicit activity between 2021 and 2026, including transactions tied to Iran sanctions evasion.
A 311 order is one of the most severe tools FinCEN can deploy short of a criminal referral. It effectively cuts an institution off from the US dollar system by prohibiting correspondent banking relationships with US banks.
MEXC is registered in the Seychelles and does not hold a US license, but its ability to move dollars through the global banking system now depends on no US bank being involved in the chain.
Bitcoin ETFs Lost $870 Million in Four Days
US spot Bitcoin ETFs recorded $430.2 million in net outflows on November 5, bringing total outflows over the first four November sessions to $869.8 million.
The selling came alongside a broader market move after Democrats won both chambers of Congress in the US midterms. Bitcoin rose above $80,000 on November 4 before falling to around $75,500 the following day. By November 7 the Crypto Fear and Greed Index had dropped to 25, in the extreme fear zone, with Bitcoin near $75,800.
The combined outflows over four sessions represent a significant reversal from the institutional inflow trend that characterized most of Q3.
Democrats Won the Midterms. Bitcoin Dropped.
Democrats won both chambers of Congress in the US midterms, taking back the Senate and the House. Bitcoin rose above $80,000 on November 4 before falling to around $75,500 the next day as markets priced in the implications for crypto legislation.
The incoming Congress will determine the fate of the GENIUS Act implementing rules, the stalled CLARITY Act, and any additional crypto market structure legislation. A divided or Democratic-controlled Congress is a different environment for crypto legislation than the one that passed the GENIUS Act.
Mercado Bitcoin Was Drained of $40 Million
Brazilian exchange Mercado Bitcoin halted deposits and withdrawals after more than $40 million was drained from wallets across at least 10 blockchains.
Mercado Bitcoin is one of Brazil’s largest crypto exchanges. The multi-chain nature of the drain suggests either a compromised hot wallet infrastructure or a signing key exposure that gave attackers access across multiple networks simultaneously.
Brazil’s crypto licensing regime became active in late October. This breach is one of the first major incidents to hit a Brazilian-licensed exchange under the new framework.
Web3Auth Flaw Exposed Social-Login Private Keys
Keplr suspended Google and Apple logins and Web3Auth paused its embedded-wallet service after a flaw in Web3Auth infrastructure exposed private keys of accounts created through social logins.
Web3Auth provides the backend that lets wallets offer “sign in with Google” or “sign in with Apple” as an alternative to seed phrases. A flaw at that layer means the exposure was not limited to one wallet — any application using Web3Auth’s embedded wallet infrastructure was potentially affected.
The incident highlights the trust assumption embedded in social-login wallet infrastructure: users who chose convenience over self-custody were exposed through a third-party service they may not have known existed.
Stock Perpetual Futures Are Live. A Court Declined to Stop Them.
A federal judge denied an emergency halt on CFTC-cleared stock perpetual futures at KalshiEX, Bitnomial, and Coinbase Derivatives. The court also questioned whether the CFTC had authority to approve the products in the first place.
Stock perpetual futures launched in the US this week, bringing a product structure that dominates offshore crypto trading into regulated domestic markets. The court’s willingness to let them run while questioning CFTC authority leaves the legal status unresolved and sets up a longer legal fight.
The ICE and trade[XYZ] venue on Hyperliquid, announced last week, is still pending CFTC approval. The court’s comments on CFTC authority may affect that application.
Crypto in 401(k)s Moved Closer to Reality
The US Labor Department sent its final rule on alternative assets in retirement plans to the White House for review on November 5. The rule would ease crypto exposure in 401(k) accounts.
The rule goes to the White House Office of Information and Regulatory Affairs for review before it can take effect. White House review is the last step before publication. The timing may affect how quickly the new administration acts on it.
Circle Reported $864.9 Million in Q3 Revenue
Circle reported Q3 revenue and reserve income of $864.9 million, up 17% year over year. USDC on-chain volume rose 49% to $13.9 trillion in the quarter.
The volume growth reflects USDC’s strengthening position after the EBA classified it as the first MiCA-significant stablecoin in October. With USDT excluded from EU-regulated platforms, USDC is capturing stablecoin volume that has nowhere else to go in compliant markets.
Paybis Launched Its Biggest Fee Campaign
Paybis launched its “Fee Slasher” November campaign offering new users 70% off purchases. The launch was paired with research showing over a third of people cannot say what they pay to send money abroad.
Other News Worth Noting
Greece’s parliament approved a crypto tax framework from 2027: a 10% tax on gains above €500 and a 15% levy on staking and DeFi income. France’s National Assembly rejected the revenue section of its 2027 budget 458 to 0, removing a proposed crypto-to-stablecoin tax and a €100,000 self-custody reporting rule in the process.
Stripe said its Crypto Onramp powers stablecoin purchases in Samsung Wallet, available to eligible users on 82 million Galaxy devices in the US. Strategy bought 811 BTC for about $65.5 million, lifting its total to 849,327 BTC. FinCEN and the Federal Reserve withdrew a proposal that would have cut the cross-border transfer reporting threshold from $3,000 to $250.
Zcash activated its NU7 upgrade on November 6, cutting block time from 75 to 25 seconds. A former FBI agent pleaded guilty to stealing about $2.47 million in crypto from wallets tied to 35 FBI investigations. tZERO agreed to go public through a SPAC merger at a $350 million pre-money valuation, targeting an NYSE American listing in early 2027.
Wrapping Up
This week Binance detailed how fake recruiter interviews and compromised developer tools enabled the $6.3 billion breach, with 98% of token assets replenished and $2.85 billion frozen. FinCEN cut MEXC off from US banks over $16 billion in alleged illicit activity. Bitcoin ETFs shed $870 million in four days as Democrats swept the midterms and Bitcoin fell to $75,500. Mercado Bitcoin was drained of $40 million across 10 chains. A Web3Auth flaw exposed social-login private keys across multiple wallets. Stock perpetual futures launched in the US and a court declined to stop them while questioning the CFTC’s authority. The Fear and Greed Index hit 25 by Friday. The market is in its worst sentiment stretch since early 2026, and the new Congress has not yet signaled what it will do with the crypto legislation agenda.
Disclaimer: Don’t invest unless you’re prepared to lose all the money you invest. This is a high‑risk investment and you should not expect to be protected if something goes wrong. Take 2 mins to learn more at: https://go.payb.is/FCA-Info
