$3.6B flees Binance on reopen, THORChain co-founder opposes coin freeze: Hodler’s Digest

1 day ago

Binance reopens withdrawals, sees nett outflow of $3.64B

Binance has reopened withdrawals for 15 blockchain networks, aft $6.3 cardinal was stolen by North Korean hackers from its blistery wallets precocious past week.

Binance said today it had processed astir $4.65 cardinal successful withdrawals aft reopening and received $1 cardinal successful deposits. Founder Changpeng Zhao said that successful the archetypal 12 hours determination had lone been a 2.1% nett outflow and that “98% take to stay!”

About 95% of the stolen crypto has already been replenished, utilizing a substance of Binance’s firm reserves, security and 50% of the funds successful the Secure Asset Fund for Users (SAFU).

The biggest hack successful past happened connected Thursday, erstwhile North Korea’s TraderTraitor radical gained entree to delegated wallet permissions via a compromised laptop. Blockaid CEO Ido Ben-Natan told Cointelegraph that attackers could person stolen the funds without utilizing EIP-7702 (account abstraction), but it whitethorn person helped them bypass safeguards and drain assets successful 1 sweep.

Binance co-CEO Richard Teng rejected the thought the hack could beryllium attributed to a azygous compromised laptop.

“To beryllium clear: the attacker did not simply usage 1 engineer’s permissions, and this was not a azygous ‘one-click’ action,” helium said. “Our probe has not attributed work to immoderate individual.”

FBI and Secret Service swoop successful to assistance prevention billions

Zhao thanked the Secret Service contiguous for “acting wrong minutes to assistance way and frost stolen funds... your speed, expertise and dedication helped incorporate the damage.”

Elliptic estimated that astir $2.84 cardinal of the stolen assets, mostly USDC and USDT, had been frozen connected concatenation leaving the hackers with $3.33 billion. The attacker raced against clip to bushed the unprecedented stablecoin blocks by borrowing astir $44.6 cardinal of ETH against stablecoins connected Aave.

The FBI attributed blasted for the onslaught to the TraderTraitor hackers, which is associated with North Korea’s Lazarus Group and were besides blamed for multibillion hacks of Bybit and Bitget. President Donald Trump indicated “we’ll speech to North Korea astir it.” The FBI besides released a database of addresses connected to the hack and pointedly singled retired THORnode operators, RPC node operators, instant exchanges, DeFi services, blockchain analytics firms and different integer plus work providers to artifact transactions with oregon derived from addresses.

Source: CZ

THORChain laminitis rejects frost request

The North Korean hackers person utilized THORChain to permissionlessly swap cryptocurrencies pursuing erstwhile attacks, and the terms of the protocol’s autochthonal token RUNE jumped 13% successful expectation of each those fees.

Unfortunately for TraderTraitor, 9 chains connected THORChain, including Bitcoin, Ethereum and Tron connected THORChain, are presently halted aft automated systems paused the protocol for unrelated reasons soon aft the hack occurred.

Source: Vadim

According to THORChain developer Chad Barraford connected the Unchained podcast, lone astir 50 oregon truthful individuals run the 100 THORChain nodes. If the node operators garbage to halt the protocol oregon artifact addresses, arsenic seems apt based connected past incidents and nationalist statements, they could look prosecution fixed the standard of the thefts and the engagement of the FBI and Secret Service.

THORChain laminitis JP Thor (who claims helium is nary longer involved) argued powerfully that THORNode operators should not cooperate and should stay existent to the ideals of decentralization and permissionlessness. “IMO if THORNodes decided to instrumentality the protocol offline adjacent week past the experimentation is over,” helium said.

“The past bastion of unencumbered and neutral colony is over. There volition simply beryllium nary different venue and the protocol would person failed.”

If 1 3rd positive 1 of THORnode operators ballot successful favour they tin halt activity. Nodes tin besides permission the web if they bash not privation to process the funds. THORChain tin run with arsenic fewer arsenic 4 nodes processing transactions.

Lookonchain reports the attackers person besides been utilizing transverse concatenation level Relay to swap astir fractional of $95.9 cardinal of stolen SOL into Bitcoin.

Source: JP Thor

Ramifications of the hack

Crypto related stocks including Coinbase, Circle and Strategy sold disconnected sharply pursuing the hack, and crypto markets took a dive. But Strive CEO Matt Cole commented connected Friday that Bitcoin had held up amended than expected.

“I bash person condemnation that implicit immoderate tenable clip frame, this does not alteration the concern thesis connected Bitcoin,” Cole said. Bitcoin bottomed retired astir $76.5K and had recovered to 77,745 astatine the clip of writing.
In the aftermath of the attack, Nasdaq-listed steadfast Next Technology Holding announced its committee has approved selling disconnected its 5833 Bitcoin Treasury worthy astir $450 million.

The attackers person reportedly amassed astatine slightest 18,000 Bitcoin and 430,000 Ether from the theft and consequent swaps, though immoderate tallies of the funds successful the addresses identified by the FBI enactment the tally overmuch higher astatine 551,612 ETH and 18,270 BTC. There are concerns that if those currencies are sold disconnected quickly, that it would enactment downward unit connected BTC and ETH prices.

Meanwhile, Senator Cynthia Lummis and The Digital Chamber some utilized the hack to again propulsion for crypto authorities to assistance forestall and mitigate the effects of aboriginal attacks.

Tampered Trezor linked to CryptoBilis reseller

Trezor has urged customers who bought its hardware wallets from erstwhile authorized reseller CryptoBilis since March to determination their funds aft a study of a suspected implant successful a Safe 5 device.

Trezor said Friday that a lawsuit successful Indonesia reported an unauthorized circuit committee wrong a Trezor Safe 5 bought connected Tokopedia successful August. Trezor said it had not yet examined the instrumentality and had received nary reports of related losses.

The informing follows reports of crypto losses involving Ledger wallets sold done CryptoBilis that surfaced connected Oct. 9. Ledger confirmed an unauthorized hardware implant successful 1 device.

Winners and Losers

At the extremity of the week, Bitcoin (BTC) is down 3% to commercialized astatine $77,745, Ethereum (ETH) is down 3.5% to commercialized astatine $2,260 and XRP (XRP) is down 3.9% to $1.02. The full marketplace headdress is astatine $2.21 trillion according to CoinMarketCap.

Among the biggest 100 cryptocurrencies, the apical 3 altcoin winners of the week are Hyperliquid (HYPE) with a 13.7% gain, Midnight (NIGHT) connected 12.6%, and Pepe (PEPE) connected 12.6%.

The apical 3 altcoin losers of the week are Curve DAO (CRV) which was down 18.6%, VeChain (VET) down 15.9% and Worldcoin down 13.8%.

Prediction of the Week

Binance hack could accelerate displacement to DEXs: Standard Chartered

Standard Chartered’s Geoffrey Kendrick said 1 large victor from the hack was apt to beryllium decentralized exchanges and reaffirmed his condemnation successful Uniswap and the UNI token.

“The decentralized speech [Uniswap] has ne'er had immoderate exploits, and the hack of the largest centralized exchange, successful Binance, should spot the ratio of DEX to CEX trading proceed to increase.”

The ratio is presently astir 23.5%. Kendrick said helium retains his $100 terms people for Uniswap (UNI) for 2030. He said the Binance hack is “another crushed wherefore that forecast whitethorn extremity up being excessively low.”

Top FUD of the Week

CFTC seat warns of AI Agents dangers

CFTC seat Mike Selig says autonomous AI agents could situation fiscal rules built astir quality traders, and regulators request to adapt. Selig said Super Intelligence (SI) could springiness smaller traders and businesses entree to risk-management that was erstwhile reserved for larger institutions.

“SI tin assistance process the immense magnitude of accusation importantly faster than quality encephalon powerfulness and with greater accuracy,” helium said.

But greater autonomy besides comes with caller risks. Agents could respond unexpectedly to marketplace conditions, portion those utilizing akin models could make correlated trading behavior. The velocity of autonomous transactions could besides complicate marketplace surveillance and hazard management, helium said.

Blockchain researcher Chainalysis deed by cybersecurity incident

Blockchain analytics institution Chainalysis said it was targeted successful a cybersecurity incident, akin to those suffered precocious by different platforms.

“Based connected the probe to date, we person recovered nary grounds of unauthorized entree to probe content, authentication credentials, oregon league tokens,” it said successful a blog post connected Friday. Some non-sensitive lawsuit information was exposed, including idiosyncratic IDs, names and email addresses.

Chainalysis said it was utilizing ample connection models to reappraisal its information and added the incidental was not related to the caller crypto theft astatine Binance.

Texas brothers sentenced to 15 years successful situation for equipped crypto robbery

Raymond Christian Garcia and Isiah Angelo Garcia, some of Waller, Texas, were sentenced to 180 months and 186 months successful prison, respectively, for their equipped robbery of cryptocurrency and kidnapping of a household successful Grant, Minnesota.

The brothers were sentenced connected Thursday earlier US District Judge Donovan W. Frank, according to a Friday quality release. They had pleaded blameworthy successful June.

On Sept. 19, 2025, the brothers, who had traveled from Texas to Minnesota, kidnapped Victim 1 and his household successful their location astatine gunpoint, tribunal documents said. They zip‑tied the household astatine gunpoint and held them for much than 9 hours, demanding entree to Victim 1’s cryptocurrency accounts.