Hardware Wallets in 2026: The Chip Held, Everything Around It Broke
Keystone will destroy 18,835 unsold wallets after an attacker stole the factory key that proves its devices are genuine. No funds lost so far.
We counted 30 hardware wallet incidents this year. Not one loss came from a cracked secure chip, yet about $530M still left through code, retail chains and people.
Full Research: https://cryptodiffer.com/feed/other/how-hardware-wallets-failed-in-2026-30-incidents-zero-cracked-chips
Keystone will destroy 18,835 unsold wallets after an attacker stole the factory key that proves its devices are genuine. No funds lost so far.
We counted 30 hardware wallet incidents this year. Not one loss came from a cracked secure chip, yet about $530M still left through code, retail chains and people.
A 2021 Coldcard firmware bug made seeds guessable: $114.7M in BTC swept from July 30. Ledgers from reseller CryptoBilis carried a spy implant: about $102M by on-chain estimates.
The biggest theft, $282M in LTC and BTC, came from one owner talked out of a seed. Buy from the vendor, make the seed on the device, never type it anywhere else.
Full Research: https://cryptodiffer.com/feed/other/how-hardware-wallets-failed-in-2026-30-incidents-zero-cracked-chips
Early Projects Radar: 9 Fresh Names This Week
This week's theme: guardrails. Up to 100x with no liquidations, wallets that give every payment a fresh address, AI that scores the work but cannot release the money.
9 early-stage projects, from private stablecoin payments on Aleo to a free tool that traces every bridge a wallet ever used.
Full breakdown 👉 cryptodiffer.com/feed/other/early-projects-radar-9-fresh-names-this-week-oct-28
This week's theme: guardrails. Up to 100x with no liquidations, wallets that give every payment a fresh address, AI that scores the work but cannot release the money.
9 early-stage projects, from private stablecoin payments on Aleo to a free tool that traces every bridge a wallet ever used.
Full breakdown 👉 cryptodiffer.com/feed/other/early-projects-radar-9-fresh-names-this-week-oct-28
Coins by Diluted Valuation Launched in Autumn 2026
Fifteen of this autumn's new tokens carry about $2.99B in combined fully diluted value. MarsCat leads at $626M, ahead of Quantus ($456M) and FastX ($357M).
Ritual, trading since Oct 28, enters at $231M. The bottom five all sit under $90M, with Canopy ($48M) and LAPTOP ($45M) closing the list.
Fifteen of this autumn's new tokens carry about $2.99B in combined fully diluted value. MarsCat leads at $626M, ahead of Quantus ($456M) and FastX ($357M).
Ritual, trading since Oct 28, enters at $231M. The bottom five all sit under $90M, with Canopy ($48M) and LAPTOP ($45M) closing the list.
Big Names Launching Crypto Custody
Google Cloud is previewing custody tech for banks, with launch planned for early 2027. Alphabet already secures its own ETH and SOL with it.
Since January 2025, 14 banks, brokers and exchanges have gone live with crypto custody, from Emirates NBD in March 2025 to Deka this month. Half of them are in Europe.
European banks like BBVA, BPCE, KBC and Deka hold the keys themselves. Most US retail offers rent them instead: PNC runs on Coinbase, E*Trade on zerohash and Schwab on Paxos.
Google Cloud is previewing custody tech for banks, with launch planned for early 2027. Alphabet already secures its own ETH and SOL with it.
Since January 2025, 14 banks, brokers and exchanges have gone live with crypto custody, from Emirates NBD in March 2025 to Deka this month. Half of them are in Europe.
European banks like BBVA, BPCE, KBC and Deka hold the keys themselves. Most US retail offers rent them instead: PNC runs on Coinbase, E*Trade on zerohash and Schwab on Paxos.
Binance to List PREDICT With a Seed Tag on Oct 30
Binance will list PREDICT, the token of prediction market Predict.fun, on October 30 at 10:00 UTC with USDT, USDC and TRY pairs. Deposits are open, withdrawals start October 31.
The Seed Tag means traders must pass a quiz every 90 days. PREDICT already trades as a pre-market perpetual on Binance Futures at about $1.36, or $1.36B FDV on a 1B supply.
Predict.fun did $406M in volume over the last 30 days, up 35%, and $8.06M in fees. October is already its biggest fee month on record.
Binance will list PREDICT, the token of prediction market Predict.fun, on October 30 at 10:00 UTC with USDT, USDC and TRY pairs. Deposits are open, withdrawals start October 31.
The Seed Tag means traders must pass a quiz every 90 days. PREDICT already trades as a pre-market perpetual on Binance Futures at about $1.36, or $1.36B FDV on a 1B supply.
Predict.fun did $406M in volume over the last 30 days, up 35%, and $8.06M in fees. October is already its biggest fee month on record.
Partner Offers | Get Your Instant BTC Cashback | Your Gateway To Crypto | Arcus Private Whitelist
Mapping October TVL Flows. Who Actually Grew
Total DeFi TVL slipped about 8% over the past 30 days, from $95.4B to $87.6B, yet a few protocols still pulled in fresh capital. Falcon Finance led absolute inflows with +$512M to $1.72B, ahead of Morpho (+$346M) and Sentora (+$344M).
In percentage terms the biggest moves came from smaller names. Metric grew its TVL 8x to $18.4M, while Flowdesk (+189%) and Arcus (+141%) more than doubled. Risk curators, lending and staking fill most of both lists.
Total DeFi TVL slipped about 8% over the past 30 days, from $95.4B to $87.6B, yet a few protocols still pulled in fresh capital. Falcon Finance led absolute inflows with +$512M to $1.72B, ahead of Morpho (+$346M) and Sentora (+$344M).
In percentage terms the biggest moves came from smaller names. Metric grew its TVL 8x to $18.4M, while Flowdesk (+189%) and Arcus (+141%) more than doubled. Risk curators, lending and staking fill most of both lists.
Parlay's $50K Tournament Enters Its Final Week
Parlay's Pushin P tournament wraps up next week together with its mainnet launch. The top 2,000 players on the testnet leaderboard split a $50,000 USDT pool, paid as in-app balance at mainnet.
What to do:
1. Follow Parlay on X
2. Join the Parlay Telegram chat
3. Invite one friend with your ref link and climb the leaderboard
Parlay's Pushin P tournament wraps up next week together with its mainnet launch. The top 2,000 players on the testnet leaderboard split a $50,000 USDT pool, paid as in-app balance at mainnet.
The score is 80% skill (P earned, streaks, consistency) and 20% engagement (activity, social tasks, verified invites). 1st place takes $2,000, the top 10 get $600 to $2,000, and ranks 51 to 2,000 get $10 to $25 each. Rewards are spent inside Parlay, rollover applies. Multi-accounts, bots and fake invites get banned.
What to do:
1. Follow Parlay on X
2. Join the Parlay Telegram chat
3. Invite one friend with your ref link and climb the leaderboard
Ripple Had Its Best Week. XRP Didn't Notice
In three days Ripple won final OCC approval for its trust bank, an investment-grade rating from Moody's, and Robinhood, Coinbase and BNY as partners.
RLUSD supply grew 2.9x in a year to $2.6B, and Ripple targets a $900M product revenue run rate by year-end.
XRP went the other way: from $2.61 to $1.29 over the same year, on track for its worst year since 2022.
In three days Ripple won final OCC approval for its trust bank, an investment-grade rating from Moody's, and Robinhood, Coinbase and BNY as partners.
Monday: Ripple National Trust Bank got final approval, ten months after the conditional nod. It will manage RLUSD reserves and offer custody. Aviva Investors put a tokenized share class of its £22B sterling fund on the XRP Ledger.
Tuesday: BNY signed on to custody XRP and RLUSD and will test invoice financing on XRPL with C2FO. Robinhood will use RLUSD for institutional settlement and Ripple Treasury for its own cash.
Wednesday: Moody's rated RLUSD A2, and Coinbase listed it on its app, Exchange and Prime.
RLUSD supply grew 2.9x in a year to $2.6B, and Ripple targets a $900M product revenue run rate by year-end.
XRP went the other way: from $2.61 to $1.29 over the same year, on track for its worst year since 2022.
Partner Offers | Get Your Instant BTC Cashback | Your Gateway To Crypto | Arcus Private Whitelist
Cryptomarket Check-In. Major Events & Headlines
Everything that moved crypto today, in one card.
Live news feed 👉 t.me/CryptoDifferLite
Everything that moved crypto today, in one card.
Live news feed 👉 t.me/CryptoDifferLite
Today's headliners: ICE, Kalshi, Utah, US Treasury, Bermuda, HTX, Bithumb, Uniswap, Ondo, Bitcoin Core
Forwarded from
CZ confirmed the Binance hack: "User funds are safe! It does look like a hack on Binance", thanking Tether and Circle for freezing ~$1.8B and saying that as a shareholder he expects all user funds to be fully covered — CZ on X
Biggest CEX hacks ever, and Binance's is still ongoing
Over $5B left Binance hot wallets tonight, 3.6x Bybit's $1.4B record from February 2025. One night nearly matches all 118 CEX hacks on record combined ($6.6B).
North Korea is linked to four of the nine biggest past cases. This time Tether and Circle already froze $2.4B in stablecoins, but the BTC, XRP and USDT swapped into ETH are out of reach.
Over $5B left Binance hot wallets tonight, 3.6x Bybit's $1.4B record from February 2025. One night nearly matches all 118 CEX hacks on record combined ($6.6B).
North Korea is linked to four of the nine biggest past cases. This time Tether and Circle already froze $2.4B in stablecoins, but the BTC, XRP and USDT swapped into ETH are out of reach.
Binance hack update: $6.3B hit, $3B already frozen
Binance traced the breach to a compromised DevOps engineer's laptop: the attacker reached a service container and submitted withdrawals, with no private key leaked. The hit is now about $6.3B, and ~$3B is frozen on-chain, up from $2.54B earlier.
The trail points to North Korea's Lazarus Group, which would make it the regime's biggest heist, topping the $1.5B Bybit attack. Some of the stolen funds reached the same THORChain address as loot from the $388M Bitget hack.
Binance will cover all losses from SAFU and company funds. Deposits work, withdrawals should resume within 48 hours, and today's PREDICT spot listing is postponed.
Binance traced the breach to a compromised DevOps engineer's laptop: the attacker reached a service container and submitted withdrawals, with no private key leaked. The hit is now about $6.3B, and ~$3B is frozen on-chain, up from $2.54B earlier.
The trail points to North Korea's Lazarus Group, which would make it the regime's biggest heist, topping the $1.5B Bybit attack. Some of the stolen funds reached the same THORChain address as loot from the $388M Bitget hack.
Binance will cover all losses from SAFU and company funds. Deposits work, withdrawals should resume within 48 hours, and today's PREDICT spot listing is postponed.
TraderTraitor: 6 Hacks, $8.57B in 20 Months
TraderTraitor hit Binance for $6.36B, the biggest crypto hack ever. Since Bybit in February 2025, the North Korean unit has taken about $8.57B in six attacks on exchanges and bridges. So far the link to these hacks rests on on-chain tracing: ZachXBT matched Binance and Bitget loot at one THORChain address.
Not one of them used a smart contract bug. Each started with people or infrastructure: a Safe{Wallet} developer's PC, a fake recruiter, hacked RPC nodes, a vendor zero-day and a DevOps laptop.
Only stablecoins get frozen. Most of Binance's frozen $2.7B (42%) is stables that issuers caught in time, while Bitget's attacker swapped them in 41 minutes and just 0.2% was stopped. Without Binance, 5% of the haul is frozen.
TraderTraitor hit Binance for $6.36B, the biggest crypto hack ever. Since Bybit in February 2025, the North Korean unit has taken about $8.57B in six attacks on exchanges and bridges. So far the link to these hacks rests on on-chain tracing: ZachXBT matched Binance and Bitget loot at one THORChain address.
Not one of them used a smart contract bug. Each started with people or infrastructure: a Safe{Wallet} developer's PC, a fake recruiter, hacked RPC nodes, a vendor zero-day and a DevOps laptop.
Only stablecoins get frozen. Most of Binance's frozen $2.7B (42%) is stables that issuers caught in time, while Bitget's attacker swapped them in 41 minutes and just 0.2% was stopped. Without Binance, 5% of the haul is frozen.
Binance Rescue Operation: $3B Frozen in 5 Hours
The attacker drained Binance's hot wallets at 20:24 UTC. The first freeze landed 33 minutes later. By 01:19, issuers and one L2 had locked about $3B. Here's how the night went (UTC):
DeFi shut its doors too. Aave froze 175 markets on 16 networks, trapping 60M USDT of the attacker's collateral. Compound, Moonwell, Kamino, BENQI and Venus paused markets.
Not everything was caught. About 435M USDT was sold before the blacklists, 325M of it to market makers at a discount of over 10%. Around $3.27B sits in BTC, ETH, XRP, TRX and SOL, which nobody can freeze. THORChain, the attacker's main exit, froze nothing.
The attacker drained Binance's hot wallets at 20:24 UTC. The first freeze landed 33 minutes later. By 01:19, issuers and one L2 had locked about $3B. Here's how the night went (UTC):
20:57 World Liberty blacklists 48.5M WLFI. First freeze of the night
21:01 Tether freezes 971M USDT in a single wallet
21:04 Circle freezes 822.6M USDC, working with law enforcement
21:07-21:21 Tether hits Avalanche, Tron and gold: 8.4M USDt, 378.7M USDT, 12,574 XAUt (~$50M)
21:18 The attacker moves 30M USDT. Tether freezes the sender 36 seconds later and catches the money at the next address
22:00 Ripple freezes 40.5M RLUSD in the same block as the attacker's last sale
22:06 Tether blacklists the hacked Binance hot wallet itself, so the attacker's later USDT sweeps fail
22:10 World Liberty and BitGo freeze 27.8M USD1
22:30 Paxos freezes 1,907 PAXG (~$8M)
22:48 Binance blacklists 29,934 of its own wBETH (~$75M)
00:08 Arbitrum Security Council takes back 8,426 ETH and 74.6M ARB ($30.5M), the only ETH anyone recovered
01:19 First Digital confirms an FDUSD freeze, amount not disclosed
DeFi shut its doors too. Aave froze 175 markets on 16 networks, trapping 60M USDT of the attacker's collateral. Compound, Moonwell, Kamino, BENQI and Venus paused markets.
Not everything was caught. About 435M USDT was sold before the blacklists, 325M of it to market makers at a discount of over 10%. Around $3.27B sits in BTC, ETH, XRP, TRX and SOL, which nobody can freeze. THORChain, the attacker's main exit, froze nothing.
The Binance hacker overpaid about $90M to cash out fast. Here's who picked it up
To dump stolen coins before the freezes, the attacker bought ETH at up to 32% above Binance and sold dozens of altcoins at deep discounts. On Uniswap, ETH hit $3,487 while Binance showed $2,266. Every dollar of that gap landed in someone's pocket.
The window stayed open for about 45 minutes, and anyone could trade it: buy ETH on a centralized exchange, sell it on-chain for 10%+ more. The catch was having money outside Binance, where withdrawals were frozen.
To dump stolen coins before the freezes, the attacker bought ETH at up to 32% above Binance and sold dozens of altcoins at deep discounts. On Uniswap, ETH hit $3,487 while Binance showed $2,266. Every dollar of that gap landed in someone's pocket.
Block builders took the most. In the hour from 20:30 UTC, Ethereum builders and validators collected about 7,200 ETH (~$16.5M) in tips. The same hour a day earlier paid 4.55 ETH. Titan built 191 of 298 blocks, and beaverbuild got 1,070 ETH (~$2.4M) from a single transaction.
Arbitrage bots came second, with about $12.7M for the top 10. The best one borrowed 11,701 ETH on Aave, sold it on-chain near $2,595 and bought it back near $2,221, clearing about $4.4M. Another wallet pulled 4,175 ETH from Kraken and sold it on-chain 72 seconds later for $11.24M, about $1.8M above the Binance price.
Market makers got far less than you'd think. The hacker sold 325M USDT for ETH through UniswapX and 1inch Fusion at an average of $2,657. Most fillers bought that ETH on Uniswap in the same transaction, so the spread leaked to pools, arbs and builders. The biggest filler, registered on 1inch as Kipseli, handled 145M USDT, kept about 149 ETH (~$337K) and paid builders 1,221 ETH. One resolver did it differently: it posted 28.6M of the stolen USDT as collateral on Compound, borrowed 10,041 ETH and now sits on about $6M. That USDT is still there.
Bots cleaned up the altcoin dump, about $9.4M for the top three. jaredfromsubway sandwiched 25 of the hacker's 29 ONDO sales. UNI went for $5.69 vs $6.41 on Binance.
On Tron the attacker swapped 234M USDT into TRX at $0.367 while Binance showed $0.334, about $21M handed to arbitrageurs. Uniswap LPs earned about $2.2M in fees, 130x a normal hour.
The window stayed open for about 45 minutes, and anyone could trade it: buy ETH on a centralized exchange, sell it on-chain for 10%+ more. The catch was having money outside Binance, where withdrawals were frozen.
Binance hack live: where the $6B is now
Of the $6.0B taken from Binance hot wallets, $2.75B (46%) is frozen or seized, almost all of it on Ethereum and Tron. The other $3.16B is still with the hacker, and $1.41B of that sits in BTC, which nobody can freeze.
Only $82M has left the tracked wallets so far. Follow the money live on LayerHub: 145 wallets across 10 networks, refreshed within a minute.
Of the $6.0B taken from Binance hot wallets, $2.75B (46%) is frozen or seized, almost all of it on Ethereum and Tron. The other $3.16B is still with the hacker, and $1.41B of that sits in BTC, which nobody can freeze.
Only $82M has left the tracked wallets so far. Follow the money live on LayerHub: 145 wallets across 10 networks, refreshed within a minute.
Binance is the biggest crypto hack ever. At today's prices, it's only #5
The hackers took about $6.36B from Binance on October 29, the largest theft ever by value at the time. But a decade of rising coin prices changes the ranking. Re-price every stolen coin at today's BTC ($77.4K) and ETH ($2,235), and the old hacks look far bigger.
Some hacks shrank instead. Coincheck lost $530M in NEM in 2018, and that NEM is worth about $170K today. Bybit's $1.46B in ETH is now $1.16B. Ronin's $624M is $413M.
And in 10 years? Not a forecast, just math. At $1M per BTC, the Mt. Gox loot would be worth $650B. The Binance hacker still holds 18,270 BTC and about 512K ETH, roughly $2.6B today. At BTC $1M and ETH $25K, that stash becomes $31B.
The hackers took about $6.36B from Binance on October 29, the largest theft ever by value at the time. But a decade of rising coin prices changes the ranking. Re-price every stolen coin at today's BTC ($77.4K) and ETH ($2,235), and the old hacks look far bigger.
Mt. Gox, 2014: about 650,000 BTC lost for good (850,000 reported, 200,000 later found). About $470M then, $50.3B now. Not one stolen coin has been recovered.
LuBian, 2020: 127,426 BTC. $3.5B then, $9.9B now. The coins are now in a contested US forfeiture case.
Bitfinex, 2016: 119,754 BTC. $72M then, $9.3B now, 129x. US authorities seized 79% of it in 2022, and none has been returned yet.
The DAO, 2016: 3.64M ETH. $50M then, $8.1B now. Ethereum reversed it with a hard fork.
Binance, 2026: $6.36B then, $6.28B now.
Bitstamp, 2015: 18,866 BTC. $5.3M then, $1.46B now, 278x.
Go back further and it gets wilder. Six bitcoin thefts from 2011 and 2012 (MyBitcoin, Linode, Bitcoinica and others) were worth under $3M combined, by community records. The same coins are worth about $18B today.
Inflation barely matters here. Bitfinex's $72M is about $101M in today's dollars. The jump to $9.3B is all bitcoin.
Some hacks shrank instead. Coincheck lost $530M in NEM in 2018, and that NEM is worth about $170K today. Bybit's $1.46B in ETH is now $1.16B. Ronin's $624M is $413M.
And in 10 years? Not a forecast, just math. At $1M per BTC, the Mt. Gox loot would be worth $650B. The Binance hacker still holds 18,270 BTC and about 512K ETH, roughly $2.6B today. At BTC $1M and ETH $25K, that stash becomes $31B.
MAJOR UPCOMING EVENTS IN NOVEMBER!
A full list of Major Upcoming Events, to be updated
👉 https://cryptodiffer.com/events
A full list of Major Upcoming Events, to be updated
👉 https://cryptodiffer.com/events
