🔐 Keystone lost the key that proves its wallets are real. Fakes can now pass
Hardware wallet maker Keystone sold you a 'cold' box and a promise of authenticity, and now the promise is in a hacker's pocket. The attacker who breached its website last week took the key used to verify devices, plus 25,964 buyer records from 2024 to 2026, after first calling it just a customer data leak. Counterfeit wallets built with that key can pass Keystone's own checks.
▪️ Entry point: a vulnerability in a third-party monitoring tool on Keystone's website, used by the attacker to escalate privileges.
▪️ What came out: some customer information and the key that confirms a device is genuine. Keystone says fake devices could be sold or shipped to buyers.
▪️ Why the old data is still out there: a 180-day deletion policy was supposed to wipe old records, but a bulk-erasure tool silently failed and kept them.
▪️ Checkout leak: the attacker also pulled 12,873 unfinished checkout records that Shopify was still holding. Keystone has asked Shopify to delete anything kept over 30 days.
▪️ Stock freeze: production shipments of every device using the compromised key are suspended. 18,835 devices in inventory will be destroyed, and shipments resume only after a new key is in place.
▪️ Who's safe: devices made and delivered before the Oct. 20 incident are considered safe. Anything delivered after that date can't be vouched for, so buyers are told to contact support for extra…
💬 «These devices could then be sold or shipped to customers, who might unknowingly use them as genuine products, potentially resulting in asset theft.» — Keystone
🔮Your cold storage is only as cold as the supply chain behind it. Who checks the checker?
@hivenetwork
Hardware wallet maker Keystone sold you a 'cold' box and a promise of authenticity, and now the promise is in a hacker's pocket. The attacker who breached its website last week took the key used to verify devices, plus 25,964 buyer records from 2024 to 2026, after first calling it just a customer data leak. Counterfeit wallets built with that key can pass Keystone's own checks.
▪️ Entry point: a vulnerability in a third-party monitoring tool on Keystone's website, used by the attacker to escalate privileges.
▪️ What came out: some customer information and the key that confirms a device is genuine. Keystone says fake devices could be sold or shipped to buyers.
▪️ Why the old data is still out there: a 180-day deletion policy was supposed to wipe old records, but a bulk-erasure tool silently failed and kept them.
▪️ Checkout leak: the attacker also pulled 12,873 unfinished checkout records that Shopify was still holding. Keystone has asked Shopify to delete anything kept over 30 days.
▪️ Stock freeze: production shipments of every device using the compromised key are suspended. 18,835 devices in inventory will be destroyed, and shipments resume only after a new key is in place.
▪️ Who's safe: devices made and delivered before the Oct. 20 incident are considered safe. Anything delivered after that date can't be vouched for, so buyers are told to contact support for extra…
If you bought a Keystone device after Oct. 20, treat its authenticity as unproven until support checks it, because a counterfeit unit with a seed phrase you type in is a direct route to your funds. The buyer list is now in criminal hands, and the 2020 Ledger leak of over a million addresses and phone numbers fed years of phishing, so expect the same wave here. This is also the sector's bad year: Trezor's shipping-partner breach grew past 80,000 users, SafePal exposed nearly 40,000 customers, BitBox got hit by phishing, and Coinkite's weak-entropy bug drained millions.
💬 «These devices could then be sold or shipped to customers, who might unknowingly use them as genuine products, potentially resulting in asset theft.» — Keystone
🔮
@hivenetwork
🐋 Fresh wallets dump $49M in SOL as price breaks under $100
Three brand-new Solana wallets have moved 482,228 SOL in three days, right as SOL slid below $100. About a third of the bag is already on exchanges, and nobody has claimed the addresses. Onchain analysts think it's one whale.
▪️ Oct. 23, evening: three never-used Solana addresses logged their first transactions within two minutes of each other. Arkham lists them as wallet A, B and C, no labels.
▪️ Method: split the coins across fresh addresses and feed them to the market in slices. Textbook way to limit slippage and keep order books from freaking out.
▪️ Lookonchain: 171,430 SOL (about $17.3M) already deposited to various exchanges. The selling is steady, not a dump-in-one-candle.
▪️ As of Oct. 27, 04:20 UTC, all three wallets were still sending transactions. Nobody has stopped.
▪️ Remaining balances: roughly 96,743, 97,639 and 97,312 SOL. Near-identical stacks look like one pre-planned split, not panic.
▪️ Backdrop: bitcoin hovers near $79,590, down almost 6% in a month, with most moving averages tilted bearish. High-beta SOL bleeds first.
📊 Still in the three wallets:
📊 Already sent to exchanges:
📊 SOL price now:
📊 Below Jan 2025 record of $293.31:
🔮Whale exit or whale with a plan? Three near-equal stacks sliced into exchanges is not how people panic.
@hivenetwork
Three brand-new Solana wallets have moved 482,228 SOL in three days, right as SOL slid below $100. About a third of the bag is already on exchanges, and nobody has claimed the addresses. Onchain analysts think it's one whale.
▪️ Oct. 23, evening: three never-used Solana addresses logged their first transactions within two minutes of each other. Arkham lists them as wallet A, B and C, no labels.
▪️ Method: split the coins across fresh addresses and feed them to the market in slices. Textbook way to limit slippage and keep order books from freaking out.
▪️ Lookonchain: 171,430 SOL (about $17.3M) already deposited to various exchanges. The selling is steady, not a dump-in-one-candle.
▪️ As of Oct. 27, 04:20 UTC, all three wallets were still sending transactions. Nobody has stopped.
▪️ Remaining balances: roughly 96,743, 97,639 and 97,312 SOL. Near-identical stacks look like one pre-planned split, not panic.
▪️ Backdrop: bitcoin hovers near $79,590, down almost 6% in a month, with most moving averages tilted bearish. High-beta SOL bleeds first.
📊 Still in the three wallets:
~291,700 SOL (~$29M)📊 Already sent to exchanges:
171,430 SOL (~$17.3M)📊 SOL price now:
$99.89📊 Below Jan 2025 record of $293.31:
66%If you're long SOL with stops parked under $100, that's exactly where the liquidity hunt happens. Manifold has the 'SOL closes above $100 on Oct. 31' market at 63%, down from the Oct. 20 open when SOL was near $104. By the pattern so far, the remaining ~$29M is the next slice headed for exchanges. Meanwhile, Bloom Trading lost nearly $1M when a breach drained 49 wallets belonging to nine users, and a Solana trading bot got hacked for almost $1M too. Fun week for anyone trusting a hot wallet.
🔮
@hivenetwork
🦆 Quack AI (Q): $0.05 to $0.24 and back to $0.06 in hours. Who was holding the duck?
Quack AI (Q) pumped from about $0.05 to a new all-time high near $0.24, pushing its market cap to almost $1B and into the top 100 coins. Then it gave back nearly every cent in a few hours, now trading around $0.06. Nobody can say what lit the fuse, and that's the part that should bother you.
▪️ What Q is: the native token of an AI governance layer for AI agents and dApps. Holders delegate votes, run gasless payments through the Q402 system and manage governance across multiple chains.
▪️ No big announcement before the spike. It came after weeks of gradual interest in AI agents, and no obvious signal said a move this size was coming.
▪️ Lookonchain tracked trader 0xF1fE, who made almost $1M mainly by opening longs while the price climbed. Smart money or inside info, pick your flavor.
▪️ Crypto with Haris ₿ says he made over $17,000 by shorting what he called 'the perfect top'. Good call, but he was the exception.
▪️ The crowd was on the wrong side: 70% of accounts on Binance were betting on a drop while open interest ballooned from $10M to $42M. Shorts piling in is exactly the fuel a squeeze needs.
▪️ OxNox flagged 48 wallets holding 55% of Q on BNB Chain. Through the entire run they made zero transactions, which means they didn't sell a single token on the way up.
📊 Open interest peak:
📊 Trader 0xF1fE profit:
💬 «pure leverage theater» — Nura
🔮Insiders who knew, or just a leverage casino with a duck mascot? Those 48 silent wallets will answer it.
@hivenetwork
Quack AI (Q) pumped from about $0.05 to a new all-time high near $0.24, pushing its market cap to almost $1B and into the top 100 coins. Then it gave back nearly every cent in a few hours, now trading around $0.06. Nobody can say what lit the fuse, and that's the part that should bother you.
▪️ What Q is: the native token of an AI governance layer for AI agents and dApps. Holders delegate votes, run gasless payments through the Q402 system and manage governance across multiple chains.
▪️ No big announcement before the spike. It came after weeks of gradual interest in AI agents, and no obvious signal said a move this size was coming.
▪️ Lookonchain tracked trader 0xF1fE, who made almost $1M mainly by opening longs while the price climbed. Smart money or inside info, pick your flavor.
▪️ Crypto with Haris ₿ says he made over $17,000 by shorting what he called 'the perfect top'. Good call, but he was the exception.
▪️ The crowd was on the wrong side: 70% of accounts on Binance were betting on a drop while open interest ballooned from $10M to $42M. Shorts piling in is exactly the fuel a squeeze needs.
▪️ OxNox flagged 48 wallets holding 55% of Q on BNB Chain. Through the entire run they made zero transactions, which means they didn't sell a single token on the way up.
📊 Open interest peak:
$42M📊 Trader 0xF1fE profit:
almost $1MIf you bought the top chasing the duck, you're the exit liquidity now. The 48 wallets sitting on 55% of supply haven't moved yet, and that's the next question: whoever controls that float decides when the next leg happens, and retail is the only side without a map. Nura says the volume is largely wash trading, which means part of the chart was never real demand to begin with.
💬 «pure leverage theater» — Nura
🔮
@hivenetwork
📊 Green board, thin books: BTC and ETH up, the real action is in pumps and dumps
BTC is at $80,944 (+1.46% in 24h) and ETH at $2,354 (+1.75%), so the majors are drifting up quietly. The real action is in small caps, where a few wallets and a few pumps are doing all the talking.
▪️ HAEDAL +26.2% on just $20M volume. A move that size on that little liquidity is a thin book, and thin books are where someone's exit lives.
▪️ SOXLB +13.9% on $56M and PEPE +10.4% on $57M. Same old rotation into memes, same old script.
▪️ ZEC +7.3% on $168M is the only mover with real size behind it. The rest is pocket change dressed up as a rally.
▪️ NIL -6.2% on $25M is the day's bleeder. ENA -1.2%, WLD flat on $21M. Nobody is celebrating there.
▪️ Solana: three fresh wallets moved 482,228 SOL (~$49.17M) over three days. About a third already hit exchanges, the wallets are unclaimed, and SOL dipped under $100.
▪️ Quack AI (Q) ran from ~$0.05 to an ATH near $0.24, about $1B market cap, then gave back almost all of it. Whales who knew in advance is the open question.
📊 Fear & Greed (yesterday 48):
🔮Green board, thin books, unclaimed wallets. Who's buying this, and who's selling it to them?
@hivenetwork
BTC is at $80,944 (+1.46% in 24h) and ETH at $2,354 (+1.75%), so the majors are drifting up quietly. The real action is in small caps, where a few wallets and a few pumps are doing all the talking.
▪️ HAEDAL +26.2% on just $20M volume. A move that size on that little liquidity is a thin book, and thin books are where someone's exit lives.
▪️ SOXLB +13.9% on $56M and PEPE +10.4% on $57M. Same old rotation into memes, same old script.
▪️ ZEC +7.3% on $168M is the only mover with real size behind it. The rest is pocket change dressed up as a rally.
▪️ NIL -6.2% on $25M is the day's bleeder. ENA -1.2%, WLD flat on $21M. Nobody is celebrating there.
▪️ Solana: three fresh wallets moved 482,228 SOL (~$49.17M) over three days. About a third already hit exchanges, the wallets are unclaimed, and SOL dipped under $100.
▪️ Quack AI (Q) ran from ~$0.05 to an ATH near $0.24, about $1B market cap, then gave back almost all of it. Whales who knew in advance is the open question.
📊 Fear & Greed (yesterday 48):
51 (Neutral)A 51 reading means nobody is panicking and nobody is euphoric, which is exactly when small-cap pumps get sold into. The market hasn't picked a side yet, so today is about who is holding the bags when volume shows up. Watch whether those Solana wallets keep feeding exchanges and whether SOL stays under $100.
🔮
@hivenetwork
🐋 Hedge funds ditched 68,000 BTC of Bitcoin ETFs while sovereign funds bought the dip
Galaxy Research says nine hedge funds and banks (Millennium, Goldman Sachs, Tudor and six others) cut about $5.4B of spot Bitcoin ETF exposure. Morgan Stanley's wealth arm, Abu Dhabi's Mubadala and the Abu Dhabi Investment Council were on the other side, buying. The sellers weren't dumping Bitcoin. They were unwinding a trade that stopped paying.
▪️ The trade: buy spot ETF shares, short CME Bitcoin futures, pocket the gap between them (the basis). Free money, until it isn't.
▪️ The basis averaged 7.9% annualized in the 30 days before the all-time high. In the 30 days to Oct. 21 it averaged 4.8%, barely above T-bills.
▪️ After fees, rolling costs and margin, the trade now nets about 1.5 points over cash. The desks did the math and walked.
▪️ Asset managers' net long on CME fell from 43,300 BTC to 18,400 BTC, and leveraged funds' net short shrank by the same proportion. Open interest is down 28% in BTC terms.
▪️ Advisers, family offices and individuals who don't file 13Fs cut holdings by just 6.6% while the price fell 49%.
▪️ Since the June low, the ETFs have been net buyers, which Galaxy calls directional buying, not carry.
📊 Basis over T-bills, 30 days to Oct. 21:
📊 13F holdings, Sep 2025 to Jun 2026:
📊 Added since June low:
💬 «That arithmetic, not the price, is why the multi-strategy desks left.» — Alex Thorn
🔮Smart money didn't stop loving Bitcoin. The free carry just ran out. So who's the hamster now?
@hivenetwork
Galaxy Research says nine hedge funds and banks (Millennium, Goldman Sachs, Tudor and six others) cut about $5.4B of spot Bitcoin ETF exposure. Morgan Stanley's wealth arm, Abu Dhabi's Mubadala and the Abu Dhabi Investment Council were on the other side, buying. The sellers weren't dumping Bitcoin. They were unwinding a trade that stopped paying.
▪️ The trade: buy spot ETF shares, short CME Bitcoin futures, pocket the gap between them (the basis). Free money, until it isn't.
▪️ The basis averaged 7.9% annualized in the 30 days before the all-time high. In the 30 days to Oct. 21 it averaged 4.8%, barely above T-bills.
▪️ After fees, rolling costs and margin, the trade now nets about 1.5 points over cash. The desks did the math and walked.
▪️ Asset managers' net long on CME fell from 43,300 BTC to 18,400 BTC, and leveraged funds' net short shrank by the same proportion. Open interest is down 28% in BTC terms.
▪️ Advisers, family offices and individuals who don't file 13Fs cut holdings by just 6.6% while the price fell 49%.
▪️ Since the June low, the ETFs have been net buyers, which Galaxy calls directional buying, not carry.
📊 Basis over T-bills, 30 days to Oct. 21:
0.6 pts📊 13F holdings, Sep 2025 to Jun 2026:
355k to 307k BTC📊 Added since June low:
87,000 BTCTranslation: nobody got scared of Bitcoin, the free lunch just ran out. The desks that lived off the basis unwound, and the people stepping in are sovereign money and wealth platforms with no reason to flip next week. Galaxy's warning is the part to remember: in December 2022 the basis inverted to minus 31% annualized, so this carry was never free money, just a bet that the gap stays open. The further-out futures pay about 2 points over bills before costs, which Thorn says doesn't pay for that tail.
💬 «That arithmetic, not the price, is why the multi-strategy desks left.» — Alex Thorn
🔮
@hivenetwork
☀️ Nothing's breaking: majors drift lower and the crowd is sitting on its hands
Bitcoin is at $80,467.5 (-0.63% in 24h), Ether at $2,333.12 (-0.94%). The majors are drifting, not crashing, and that's exactly when lazy money gets sloppy.
▪️ INIT +16.0% on just $23M volume: top gainer, but thin volume means it can unwind fast.
▪️ PEPE +7.7% on $109M: the real money in the gainers, meme chasing at scale.
▪️ GOOGLB -9.5% on $39M is the worst loser; ZEC -4.6% on $174M had the most volume of any loser, so that's where the selling actually happened.
▪️ Galaxy Research: nine hedge funds and banks cut 68,000 BTC of spot ETF exposure as cash-and-carry dried up. Sovereign funds and wealth platforms bought.
▪️ DekaBank bought $15.2 million of Strategy shares, traditional finance hunting indirect Bitcoin exposure.
▪️ Singapore police: users lost $2.7M after Ledger wallets were tampered with. At least two cases were reported as early as Sept. 10, almost a month before it went public.
🔮Neutral 51 while hedge funds dump 68,000 BTC of ETF exposure. Who is buying the calm you're trading?
@hivenetwork
Bitcoin is at $80,467.5 (-0.63% in 24h), Ether at $2,333.12 (-0.94%). The majors are drifting, not crashing, and that's exactly when lazy money gets sloppy.
▪️ INIT +16.0% on just $23M volume: top gainer, but thin volume means it can unwind fast.
▪️ PEPE +7.7% on $109M: the real money in the gainers, meme chasing at scale.
▪️ GOOGLB -9.5% on $39M is the worst loser; ZEC -4.6% on $174M had the most volume of any loser, so that's where the selling actually happened.
▪️ Galaxy Research: nine hedge funds and banks cut 68,000 BTC of spot ETF exposure as cash-and-carry dried up. Sovereign funds and wealth platforms bought.
▪️ DekaBank bought $15.2 million of Strategy shares, traditional finance hunting indirect Bitcoin exposure.
▪️ Singapore police: users lost $2.7M after Ledger wallets were tampered with. At least two cases were reported as early as Sept. 10, almost a month before it went public.
Fear & Greed is at 51 (Neutral), same as yesterday. No panic to buy, no euphoria to top-tick, so today is chop, and chop is where the stop hunts happen. Hardware wallet users in Singapore should check their devices before they touch anything.
🔮
@hivenetwork
🔐 Cold wallet with a warm spy inside: Singapore users robbed via tampered Ledgers
Singapore police say users lost S$3.5M (about $2.7M) after Ledger hardware wallets bought from local retailers were tampered with. The first reports date back to Sept. 10, almost a month before the story went public on Oct. 9. So much for 'not your keys, not your coins': the box you bought the keys in can be the problem.
▪️ Police advisory, published Wednesday: preliminary probes found malicious hardware components inside Ledger wallets bought from some retail stores in Singapore.
▪️ First public signal on Oct. 9: losses tied to devices sold through CryptoBilis, an authorized Ledger reseller in Indonesia, Malaysia and the Philippines.
▪️ Former Mt. Gox CEO Mark Karpelès said a Ledger Flex bought at Singapore's airport contained a spy implant.
▪️ Another user said his device from local IT retailer Challenger was tampered with. Ledger later sent him a new one.
▪️ On Oct. 13 Ledger asked retailers in seven countries to suspend sales while investigations run: Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia and Hong Kong.
▪️ Ledger is reviewing the affected cases. Police say their investigation is ongoing and they are in contact with Ledger.
📊 Combined losses, Singapore police:
📊 Earliest reported case:
📊 Countries with sales suspended:
🔮Who bought the cheap spy-chipped units, who got the replacements, and why did the warnings sit for a month?
@hivenetwork
Singapore police say users lost S$3.5M (about $2.7M) after Ledger hardware wallets bought from local retailers were tampered with. The first reports date back to Sept. 10, almost a month before the story went public on Oct. 9. So much for 'not your keys, not your coins': the box you bought the keys in can be the problem.
▪️ Police advisory, published Wednesday: preliminary probes found malicious hardware components inside Ledger wallets bought from some retail stores in Singapore.
▪️ First public signal on Oct. 9: losses tied to devices sold through CryptoBilis, an authorized Ledger reseller in Indonesia, Malaysia and the Philippines.
▪️ Former Mt. Gox CEO Mark Karpelès said a Ledger Flex bought at Singapore's airport contained a spy implant.
▪️ Another user said his device from local IT retailer Challenger was tampered with. Ledger later sent him a new one.
▪️ On Oct. 13 Ledger asked retailers in seven countries to suspend sales while investigations run: Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia and Hong Kong.
▪️ Ledger is reviewing the affected cases. Police say their investigation is ongoing and they are in contact with Ledger.
📊 Combined losses, Singapore police:
S$3.5M📊 Earliest reported case:
Sept. 10📊 Countries with sales suspended:
7If you hold a Ledger or know someone who bought one through a retailer in those seven countries, the box is now a suspect, not a guarantee. Ledger is reviewing the cases, police are still digging, and the company's handling of the early implant warnings is already being questioned, as Karpelès put it. Expect more victim reports to surface as the review and the probe widen.
🔮
@hivenetwork
🚀 HYPE pumps 13% on an ICE deal with no launch date and no approvals
HYPE jumped to roughly $91 on Thursday after Intercontinental Exchange, the owner of the NYSE, signed a deal to bring Hyperliquid-based perpetual futures to the United States. The product that's supposed to be sold to Americans can't be traded by them yet: there's no launch date and it still needs regulatory approvals. The market priced it in anyway.
▪️ The deal: ICE becomes the exclusive operator of Trade[XYZ]'s regulated markets and takes a strategic stake in the company.
▪️ Trade[XYZ] already runs 24/7 perpetuals on stocks, equity indices, commodities and currencies for users outside the US, with Hyperliquid as the infrastructure.
▪️ Perps have no expiry and let you trade with borrowed money, so every pump on this product comes with leverage stacked on top.
▪️ ICE will build a dedicated retail market and clearing structure, distributed through its OKX joint venture, where OKX's own approvals are still pending.
▪️ US plumbing: verified customers connect through futures commission merchants, and identity checks under KYC and AML rules are mandatory.
▪️ Price path: opened at $80.69, spiked to $92.10 on KuCoin, and is still about 7% under the September record near $98.
📊 HYPE market cap:
📊 ICE's valuation of OKX when it bought in (March):
💬 «I am excited to be an investor in trade(xyz) as they partner with ICE to bring 24/7 perpetual futures on Hyperliquid to the United States.» — Stan Druckenmiller
🔮When retail finally gets access, who's buying the top: new traders or the ones who bought the headline?
@hivenetwork
HYPE jumped to roughly $91 on Thursday after Intercontinental Exchange, the owner of the NYSE, signed a deal to bring Hyperliquid-based perpetual futures to the United States. The product that's supposed to be sold to Americans can't be traded by them yet: there's no launch date and it still needs regulatory approvals. The market priced it in anyway.
▪️ The deal: ICE becomes the exclusive operator of Trade[XYZ]'s regulated markets and takes a strategic stake in the company.
▪️ Trade[XYZ] already runs 24/7 perpetuals on stocks, equity indices, commodities and currencies for users outside the US, with Hyperliquid as the infrastructure.
▪️ Perps have no expiry and let you trade with borrowed money, so every pump on this product comes with leverage stacked on top.
▪️ ICE will build a dedicated retail market and clearing structure, distributed through its OKX joint venture, where OKX's own approvals are still pending.
▪️ US plumbing: verified customers connect through futures commission merchants, and identity checks under KYC and AML rules are mandatory.
▪️ Price path: opened at $80.69, spiked to $92.10 on KuCoin, and is still about 7% under the September record near $98.
📊 HYPE market cap:
$22.4B📊 ICE's valuation of OKX when it bought in (March):
$25BRetail is the new business here: ICE says over 99% of its participation today is institutional, so you're the market they just discovered. Hyperliquid is still geofenced for Americans, and Trump said in August the CFTC was working on letting it operate legally in the US. The token priced in a US product nobody can trade yet, which is exactly how these headline pumps usually go.
💬 «I am excited to be an investor in trade(xyz) as they partner with ICE to bring 24/7 perpetual futures on Hyperliquid to the United States.» — Stan Druckenmiller
🔮
@hivenetwork
🚨 Binance suspected hack: $5.57B out, Tether and Circle hit the freeze button
On-chain trackers put a suspected outflow from Binance at about $5.57 billion across three blockchains, and Binance says it is investigating a potential security breach. Tether and Circle have frozen stablecoins to stop the money from walking, and the hunt for the wallet is already on.
▪️ The $5.57B is an on-chain tally, not a Binance statement. Binance confirmed only that it is investigating a potential security breach.
▪️ Binance's founder says the suspected hack appears safe for user funds. Check your own balance and read the fine print of that word 'appears'.
▪️ BitGo froze USD1 at an address linked to the stolen funds, so the suspected hacker's stablecoins are now stuck.
▪️ Aave froze its Avalanche lending markets to block the suspected Binance hacker from borrowing against what they took.
▪️ The suspected hacker's wallet holds a big UNI position, and other top altcoin positions are surfacing in the same wallet.
▪️ BNB dropped as much as 9% on the reports, and Ethena says its collateral sits off-exchange, not on Binance.
📊 Suspected outflow, three chains:
📊 Stablecoins frozen by Tether and Circle:
📊 Tether freeze range reported:
📊 Reported leaving Binance wallets:
🔮Exchange says user funds look safe. Funny how 'appears safe' always comes right after a multi-billion bleed.
@hivenetwork
On-chain trackers put a suspected outflow from Binance at about $5.57 billion across three blockchains, and Binance says it is investigating a potential security breach. Tether and Circle have frozen stablecoins to stop the money from walking, and the hunt for the wallet is already on.
▪️ The $5.57B is an on-chain tally, not a Binance statement. Binance confirmed only that it is investigating a potential security breach.
▪️ Binance's founder says the suspected hack appears safe for user funds. Check your own balance and read the fine print of that word 'appears'.
▪️ BitGo froze USD1 at an address linked to the stolen funds, so the suspected hacker's stablecoins are now stuck.
▪️ Aave froze its Avalanche lending markets to block the suspected Binance hacker from borrowing against what they took.
▪️ The suspected hacker's wallet holds a big UNI position, and other top altcoin positions are surfacing in the same wallet.
▪️ BNB dropped as much as 9% on the reports, and Ethena says its collateral sits off-exchange, not on Binance.
📊 Suspected outflow, three chains:
$5.57B📊 Stablecoins frozen by Tether and Circle:
~$1.8B📊 Tether freeze range reported:
$971M to $1.567B📊 Reported leaving Binance wallets:
$2.77BLook at the freeze list, because that is the real story. Tether, Circle and BitGo can lock a wallet's stablecoins with one click, so the 'decentralized' money on your screen has an issuer kill switch attached. Aave freezing its Avalanche markets shows DeFi is not immune either. The sources do not say how the breach happened, so there is no attack vector to trade on yet. Anyone parking funds on an exchange should be asking the same question Ethena's answer hints at: where does my collateral actually sit?
🔮
@hivenetwork
🚨 Binance outflow suspected at ~$5.57B, both majors red, market in Fear
Morning, sheep. BTC and ETH are bleeding, and the reason isn't a meme. On-chain trackers put about $5.57B leaving Binance across three blockchains, and Binance says it's investigating a potential security breach.
▪️ Winners: PARTI +45.5% on $42M volume, HYPE +17.4% on $196M after ICE signed with Trade[XYZ] to bring Hyperliquid-based perps to US regulated markets
▪️ Losers: INTCB -23.4% on $36M and SOXLB -13.8%, with FET and WLD sliding too. Thin tapes are where the forced sellers live
▪️ Binance: Tether and Circle froze about $1.8B in stablecoins, Aave froze Avalanche lending markets, BitGo froze USD1 tied to the suspected hacker
▪️ BNB dropped as much as 9% after reports of $2.77B leaving Binance wallets. Ethena says its collateral sits off-exchange, which is the line everyone will be reading
▪️ Axis Robotics: ZachXBT says suspected insiders sold 42M AXIS while price fell about 40%, pointing at weak token lock-up agreements
▪️ US restrained over $1B in crypto tied to overseas scam networks. The alleged Madagascar dating scam got Americans to connect wallets to fake investment sites
📊 BTC:
📊 ETH:
📊 Fear & Greed:
🔮Fear at 30 on a $5.57B question mark. Who's buying this dip, and who already left the room?
@hivenetwork
Morning, sheep. BTC and ETH are bleeding, and the reason isn't a meme. On-chain trackers put about $5.57B leaving Binance across three blockchains, and Binance says it's investigating a potential security breach.
▪️ Winners: PARTI +45.5% on $42M volume, HYPE +17.4% on $196M after ICE signed with Trade[XYZ] to bring Hyperliquid-based perps to US regulated markets
▪️ Losers: INTCB -23.4% on $36M and SOXLB -13.8%, with FET and WLD sliding too. Thin tapes are where the forced sellers live
▪️ Binance: Tether and Circle froze about $1.8B in stablecoins, Aave froze Avalanche lending markets, BitGo froze USD1 tied to the suspected hacker
▪️ BNB dropped as much as 9% after reports of $2.77B leaving Binance wallets. Ethena says its collateral sits off-exchange, which is the line everyone will be reading
▪️ Axis Robotics: ZachXBT says suspected insiders sold 42M AXIS while price fell about 40%, pointing at weak token lock-up agreements
▪️ US restrained over $1B in crypto tied to overseas scam networks. The alleged Madagascar dating scam got Americans to connect wallets to fake investment sites
📊 BTC:
$78,629.82 (-2.29% 24h)📊 ETH:
$2,250.01 (-3.65% 24h)📊 Fear & Greed:
30 (Fear), yesterday 51Fear dropped from 51 to 30 in a day, so the crowd panicked on a Binance headline before anyone knew the full number. Anyone with funds parked on Binance or holding BNB is the exposed group right now. If Binance confirms the breach and the freezes hold, the bounce will be the first thing to fade; if the outflow tally keeps climbing, expect more freezes and BNB to break next.
🔮
@hivenetwork
🧊 US froze $1B+ in crypto tied to scam compounds, and the grift is going global
US authorities have restrained more than $1 billion in crypto linked to overseas scam networks, and the new Madagascar case is a masterclass in robbing retail with a smile. Six defendants are charged over a fake-dating operation that allegedly hit about 800 American victims. FBI investigators traced roughly 74 wallets, and the stolen money allegedly ended up in accounts tied to China-based actors.
▪️ The hook: alleged 'women' looking for a relationship chat up Americans, then pitch crypto investing and push them to fraudulent investment websites.
▪️ The trap: victims connect their wallets to those sites and fund them. Then the wallets are secretly drained. Free money for the bosses, zero for the hamsters.
▪️ Infrastructure: the Justice Department's Scam Center Strike Force seized 700 fraudulent crypto investment websites and Telegram channels that supported the schemes.
▪️ Madagascar: compounds allegedly opened in early 2025. In August the FBI backed local police raids on 13 of them and seized more than 3,200 electronic devices.
▪️ Boss math: Chui Kok Wa, the alleged leader, is charged with conspiracy to commit wire fraud. His phones held overnight work schedules matched to US hours and bonuses tied to stolen funds.
▪️ Staff: a material witness warrant targets 15 employees who accused Wa of trafficking and abuse. They're believed to still be jailed in Madagascar.
📊 Strike Force freezes, seizures and forfeitures in first 3…:
📊 Cumulative restraints after the Xinbi Guarantee operation:
📊 Scam accounts Meta reportedly removed:
📊 Wallets tied to the Madagascar scheme:
💬 «My Strike Force will expand and grow, and follow the scammers to Africa, India, Europe, and wherever they try to plant their operations.» — Jeanine Ferris Pirro
🔮Frozen is not returned. Who actually gets the money back, and how long will that take?
@hivenetwork
US authorities have restrained more than $1 billion in crypto linked to overseas scam networks, and the new Madagascar case is a masterclass in robbing retail with a smile. Six defendants are charged over a fake-dating operation that allegedly hit about 800 American victims. FBI investigators traced roughly 74 wallets, and the stolen money allegedly ended up in accounts tied to China-based actors.
▪️ The hook: alleged 'women' looking for a relationship chat up Americans, then pitch crypto investing and push them to fraudulent investment websites.
▪️ The trap: victims connect their wallets to those sites and fund them. Then the wallets are secretly drained. Free money for the bosses, zero for the hamsters.
▪️ Infrastructure: the Justice Department's Scam Center Strike Force seized 700 fraudulent crypto investment websites and Telegram channels that supported the schemes.
▪️ Madagascar: compounds allegedly opened in early 2025. In August the FBI backed local police raids on 13 of them and seized more than 3,200 electronic devices.
▪️ Boss math: Chui Kok Wa, the alleged leader, is charged with conspiracy to commit wire fraud. His phones held overnight work schedules matched to US hours and bonuses tied to stolen funds.
▪️ Staff: a material witness warrant targets 15 employees who accused Wa of trafficking and abuse. They're believed to still be jailed in Madagascar.
📊 Strike Force freezes, seizures and forfeitures in first 3…:
$580M+📊 Cumulative restraints after the Xinbi Guarantee operation:
$938M📊 Scam accounts Meta reportedly removed:
17.3M📊 Wallets tied to the Madagascar scheme:
74If you ever connected a wallet to a site promising 10x in a week, you're the exact hamster this case is built around. A restraint is not a refund: the assets are frozen pending legal proceedings and possible victim compensation, so the people who got drained are waiting in line. Pirro is also announcing the Strike Force will chase these operations into Africa, India and Europe, which means more clones, more fresh websites and more Telegram channels. The old rule still holds: a site that asks you to sign a transaction to 'invest' is a drain, not a yield.
💬 «My Strike Force will expand and grow, and follow the scammers to Africa, India, Europe, and wherever they try to plant their operations.» — Jeanine Ferris Pirro
🔮
@hivenetwork
📉 BTC at $77K, ETH at $2.2K, and the leverage crowd is bleeding
254,045 crypto traders got liquidated in 24 hours, with $1.67B in leveraged positions wiped out while BTC sits at $77,232.64 (-1.78%). ETH is at $2,240.51 (-0.42%), so the bleed is concentrated in leverage, not spread across the whole market.
▪️ BEAMX +39.0% on $29M volume is the standout green move. A 39% candle on that volume is where you check who's holding the bag before you chase it.
▪️ SNDKB -11.7% on $55M is the heaviest volume on the red side. That's where the selling is actually sitting, not in the quiet dips.
▪️ SOXLB -11.1% on $23M and INTCB -9.2% on $34M: the red is broad, not one name bleeding out alone.
▪️ LINK +2.6% on $38M and AAVE +2.1% on $20M: the grind-up kind of green that moves on volume, not hype.
▪️ HYPE -4.9% on $43M: real volume on a mid-size drop. Watch whether it holds or becomes the next liquidation magnet.
▪️ Recap: the liquidation wave is tied by our newsroom to high leverage in volatile markets, with forced closures doing the damage, not a single news trigger.
🔮Fear at 30, same as yesterday: calm or the pause before the next flush?
@hivenetwork
254,045 crypto traders got liquidated in 24 hours, with $1.67B in leveraged positions wiped out while BTC sits at $77,232.64 (-1.78%). ETH is at $2,240.51 (-0.42%), so the bleed is concentrated in leverage, not spread across the whole market.
▪️ BEAMX +39.0% on $29M volume is the standout green move. A 39% candle on that volume is where you check who's holding the bag before you chase it.
▪️ SNDKB -11.7% on $55M is the heaviest volume on the red side. That's where the selling is actually sitting, not in the quiet dips.
▪️ SOXLB -11.1% on $23M and INTCB -9.2% on $34M: the red is broad, not one name bleeding out alone.
▪️ LINK +2.6% on $38M and AAVE +2.1% on $20M: the grind-up kind of green that moves on volume, not hype.
▪️ HYPE -4.9% on $43M: real volume on a mid-size drop. Watch whether it holds or becomes the next liquidation magnet.
▪️ Recap: the liquidation wave is tied by our newsroom to high leverage in volatile markets, with forced closures doing the damage, not a single news trigger.
Fear & Greed sits at 30 (Fear), unchanged from yesterday. A flat fear reading after a leverage flush means the market is still pricing in pain, not finished capitulating. If you're running leveraged longs, you're the group that gets picked off on every dip, and the bounce that follows goes to whoever kept their margin.
🔮
@hivenetwork
📊 Green tape, scared crowd: LSK pumps, TRX bleeds, drainers keep working
BTC sits at $77,851 (+0.81% in 24h) and ETH at $2,268 (+1.23%), so the majors are green. Fear & Greed is 34 (Fear), up from 30 yesterday: the price is drifting up while the crowd stays scared.
▪️ LSK +13.9% on just $24M volume, the biggest green candle of the day. Our data gives no catalyst. A 14% pop on thin liquidity is exactly where exit liquidity comes from.
▪️ TRX -4.3% on $87M, the heaviest volume among the losers. That is real selling, not noise, and it's the one loser worth watching.
▪️ PEPE +2.9% on $45M, second-largest volume among the gainers behind NEAR's $69M. Memecoin money is still moving.
▪️ StepDrainer hit 10 more websites, and LaunchOnSF is back online after being hit. The attack works through user interactions on web platforms, so front ends are the target.
▪️ North Korea-linked hackers moved $38M through Relay Protocol's cross-chain system in seven hours. Expect this to feed stricter regulation and compliance scrutiny across crypto.
🔮Green majors, scared crowd, and TRX bleeding on size. Who is selling into this?
@hivenetwork
BTC sits at $77,851 (+0.81% in 24h) and ETH at $2,268 (+1.23%), so the majors are green. Fear & Greed is 34 (Fear), up from 30 yesterday: the price is drifting up while the crowd stays scared.
▪️ LSK +13.9% on just $24M volume, the biggest green candle of the day. Our data gives no catalyst. A 14% pop on thin liquidity is exactly where exit liquidity comes from.
▪️ TRX -4.3% on $87M, the heaviest volume among the losers. That is real selling, not noise, and it's the one loser worth watching.
▪️ PEPE +2.9% on $45M, second-largest volume among the gainers behind NEAR's $69M. Memecoin money is still moving.
▪️ StepDrainer hit 10 more websites, and LaunchOnSF is back online after being hit. The attack works through user interactions on web platforms, so front ends are the target.
▪️ North Korea-linked hackers moved $38M through Relay Protocol's cross-chain system in seven hours. Expect this to feed stricter regulation and compliance scrutiny across crypto.
A green tape with Fear at 34 means nobody is buying the rally with conviction. Drainers hitting front ends means the risk today sits in the signing screen, so read every approval before you click. Cross-chain bridges are the lane North Korean hackers just used, and that's where the compliance hammer lands next.
🔮
@hivenetwork
🧨 Thorchain bug freezes swaps while FBI asks nodes to block Binance hack money
The money from Binance's theft, the one North Korea's Tradertraitor pulled off on Oct. 29, was supposed to be washed through Thorchain. Then a one-block Ethereum reorg created 10 ETH out of thin air, and Thorchain slammed the emergency brake on most of its routes. The launderers got locked out along with everyone else, which is the cruelest irony the market has served up this week.
▪️ Ethereum reorganized a single block, dropping a 10 ETH deposit meant for a Thorchain vault. That deposit never made it back onto the canonical chain.
▪️ Thorchain's observers had already seen the deposit and credited the vault. The linked swap failed its price conditions, so the protocol refunded 10 ETH the vault never actually received.
▪️ Another deposit from the same wallet was refunded too, leaving the vault about 10 ETH short. Solvency protections kicked in and halted Ethereum processing.
▪️ Trading and new swaps stopped on 12 of 13 supported external networks. Some previously initiated outbound payments kept running.
▪️ No malicious intent was found. The cause was a collision between Ethereum's reorg and Thorchain's deposit verification procedures.
▪️ On Oct. 31 the FBI, with the U.S. Secret Service and IRS Criminal Investigation, asked infrastructure providers to block wallets tied to the Binance theft.
💬 «No subpoenas required, a best-case scenario for investigations.» — Chad Barraford
🔮Launderers got stuck behind a bug, not a sanction. Next time the bug might come with a federal request attached.
@hivenetwork
The money from Binance's theft, the one North Korea's Tradertraitor pulled off on Oct. 29, was supposed to be washed through Thorchain. Then a one-block Ethereum reorg created 10 ETH out of thin air, and Thorchain slammed the emergency brake on most of its routes. The launderers got locked out along with everyone else, which is the cruelest irony the market has served up this week.
▪️ Ethereum reorganized a single block, dropping a 10 ETH deposit meant for a Thorchain vault. That deposit never made it back onto the canonical chain.
▪️ Thorchain's observers had already seen the deposit and credited the vault. The linked swap failed its price conditions, so the protocol refunded 10 ETH the vault never actually received.
▪️ Another deposit from the same wallet was refunded too, leaving the vault about 10 ETH short. Solvency protections kicked in and halted Ethereum processing.
▪️ Trading and new swaps stopped on 12 of 13 supported external networks. Some previously initiated outbound payments kept running.
▪️ No malicious intent was found. The cause was a collision between Ethereum's reorg and Thorchain's deposit verification procedures.
▪️ On Oct. 31 the FBI, with the U.S. Secret Service and IRS Criminal Investigation, asked infrastructure providers to block wallets tied to the Binance theft.
The FBI request is voluntary, not a court order, but it puts a permissionless protocol squarely in the crosshairs, and Thorchain operators have resisted selective transaction blocking before. The pause was an accounting fix, not a targeted freeze on Binance money, and developers are still investigating the malfunction. For anyone trading cross-chain routes, the lesson is blunt: one reorged block on Ethereum can take a bridge offline across most of its networks overnight.
💬 «No subpoenas required, a best-case scenario for investigations.» — Chad Barraford
🔮
@hivenetwork
🚨 SEC sues BG Wealth and DSJ Exchange over $130M from retail on fake-looking paperwork
The SEC has filed a civil complaint against BG Wealth Sharing and DSJ Exchange, alleging they raised more than $130 million from tens of thousands of retail investors. The pitch was crypto trading signals and risk-free returns, backed by filings that looked like government approval. The complaint was filed October 29 and detailed in an October 30 litigation release.
▪️ The product was an investment program built on purported crypto trading signals, sold with promises of extraordinary, risk-free returns.
▪️ The sales tool was false Form ADV and Form D filings, presented as proof of legitimacy. A link to an SEC database makes a pitch look official. It doesn't mean anyone approved it.
▪️ The SEC says neither entity was registered with it. The disputed filings have since been removed from the Commission's website.
▪️ The SEC is seeking injunctions, disgorgement and civil penalties.
▪️ These are allegations in civil proceedings. No final court finding, criminal conviction or confirmed investor recovery amount exists yet.
📊 Complaint filed:
🔮Tens of thousands of people saw a government database link and wired money anyway. Who sold them the 'verified' part?
@hivenetwork
The SEC has filed a civil complaint against BG Wealth Sharing and DSJ Exchange, alleging they raised more than $130 million from tens of thousands of retail investors. The pitch was crypto trading signals and risk-free returns, backed by filings that looked like government approval. The complaint was filed October 29 and detailed in an October 30 litigation release.
▪️ The product was an investment program built on purported crypto trading signals, sold with promises of extraordinary, risk-free returns.
▪️ The sales tool was false Form ADV and Form D filings, presented as proof of legitimacy. A link to an SEC database makes a pitch look official. It doesn't mean anyone approved it.
▪️ The SEC says neither entity was registered with it. The disputed filings have since been removed from the Commission's website.
▪️ The SEC is seeking injunctions, disgorgement and civil penalties.
▪️ These are allegations in civil proceedings. No final court finding, criminal conviction or confirmed investor recovery amount exists yet.
📊 Complaint filed:
October 29If you or someone you know bought into this program, the money is not back yet and nothing is confirmed. Disgorgement only matters if the SEC can find and freeze the assets, and that takes time most victims don't have. Next comes the asset tracing and the court calendar, not a payout. The lesson is cheap and old: a logo, a filing number or a 'verified' badge tells you nothing about who holds your cash.
🔮
@hivenetwork
🎰 $1.07B in Crypto Hit Sihanoukville Casinos Right Under the Sanctions Nose
Thirty-four casinos in Sihanoukville, Cambodia took in about $1.07 billion in crypto between January 1 and September 7, 2026, according to blockchain firm TRM Labs. Casinos tied to OFAC-designated networks got $687 million of it, 64% of the total. So much for the crackdown.
▪️ Entities linked to Xihu Resort Hotel received $184M from April 23 to September 7, months after the US designations.
▪️ Entities attributed to Huan Hai Bo Lai International Investment took another $129M over the same stretch.
▪️ A casino tied to Jin Bei Group still got $9M after the October 2025 designation of Prince Group and related entities.
▪️ Monthly inflows look smaller: about $148M a month in January to May, then roughly $95M in July and August. Designated casinos fell from $100M to about $48M a month.
▪️ TRM doesn't buy the dip. Operators keep changing wallet addresses, so some money may be moving through wallets investigators haven't identified yet.
▪️ Almost all of it is USDT on TRON. TRM credits low fees, deep liquidity and wide adoption across Southeast Asia.
📊 Total crypto received, Jan 1 to Sep 7, 2026:
📊 Tied to OFAC-designated networks:
📊 Xihu Resort Hotel-linked, Apr 23 to Sep 7:
📊 Huan Hai Bo Lai-linked, same period:
🔮Sanctions took the menu off the wall, not the kitchen out of business. Which wallet cluster is TRM not naming yet?
@hivenetwork
Thirty-four casinos in Sihanoukville, Cambodia took in about $1.07 billion in crypto between January 1 and September 7, 2026, according to blockchain firm TRM Labs. Casinos tied to OFAC-designated networks got $687 million of it, 64% of the total. So much for the crackdown.
▪️ Entities linked to Xihu Resort Hotel received $184M from April 23 to September 7, months after the US designations.
▪️ Entities attributed to Huan Hai Bo Lai International Investment took another $129M over the same stretch.
▪️ A casino tied to Jin Bei Group still got $9M after the October 2025 designation of Prince Group and related entities.
▪️ Monthly inflows look smaller: about $148M a month in January to May, then roughly $95M in July and August. Designated casinos fell from $100M to about $48M a month.
▪️ TRM doesn't buy the dip. Operators keep changing wallet addresses, so some money may be moving through wallets investigators haven't identified yet.
▪️ Almost all of it is USDT on TRON. TRM credits low fees, deep liquidity and wide adoption across Southeast Asia.
📊 Total crypto received, Jan 1 to Sep 7, 2026:
$1.07B📊 Tied to OFAC-designated networks:
$687M (64%)📊 Xihu Resort Hotel-linked, Apr 23 to Sep 7:
$184M📊 Huan Hai Bo Lai-linked, same period:
$129MSanctions on paper aren't sanctions on the money. If you trade USDT or follow TRON flows, this is the rail that keeps carrying scam-compound cash, and the enforcement headlines aren't cutting it off. Kok An, a Cambodian senator, and 28 related people and entities were sanctioned in April 2026 over scam centers that defrauded Americans, and the casinos kept receiving crypto anyway. The September license purge is the newest move, but the wallet-rotation problem TRM flagged means the monthly drop could be a mirage.
🔮
@hivenetwork
📊 Morning digest: BTC +0.61%, ETH +1.01%, and the crowd is still scared
BTC is at $78,326.18 (+0.61% in 24h) and ETH at $2,291.27 (+1.01%), so the grind is green but nobody's popping champagne. The market is still in the fear zone, which is exactly where retail gets fed the exit liquidity.
▪️ Green list: ZEC +2.0% on $105M volume, the loudest mover up. TRX +1.5% on $36M and UNI +1.1% on $43M follow, with BNB +0.8% and ETH +1.0% on heavier flows.
▪️ Red list: NEAR -3.2% on $44M is the worst of the day. LINK -2.7% and AVAX -2.7% dropped on only $22M and $20M, so the dips are moving on thin money.
▪️ Liquidations hit $12.5B in October 2026, with longs taking most of the damage. Leverage is the reason your 'safe' long got wiped.
▪️ Thorchain: a one-block Ethereum reorg caused a double refund of 10 ETH, triggering an emergency pause on cross-chain swaps.
▪️ SEC sued BG Wealth Sharing and DSJ Exchange over an alleged $130M+ scheme selling a 'crypto trading signals' program with official-looking filings and false trading claims.
▪️ TRM Labs: 34 Sihanoukville casinos got about $1.07B in crypto from January 1 to September 7, 2026. $687M (64%) went to casinos linked to OFAC-designated networks, despite the Cambodian crackdown.
📊 Fear & Greed today:
📊 Fear & Greed yesterday:
🔮Longs ate $12.5B in liquidations last month. Who is buying these green candles, and who is selling them to you?
@hivenetwork
BTC is at $78,326.18 (+0.61% in 24h) and ETH at $2,291.27 (+1.01%), so the grind is green but nobody's popping champagne. The market is still in the fear zone, which is exactly where retail gets fed the exit liquidity.
▪️ Green list: ZEC +2.0% on $105M volume, the loudest mover up. TRX +1.5% on $36M and UNI +1.1% on $43M follow, with BNB +0.8% and ETH +1.0% on heavier flows.
▪️ Red list: NEAR -3.2% on $44M is the worst of the day. LINK -2.7% and AVAX -2.7% dropped on only $22M and $20M, so the dips are moving on thin money.
▪️ Liquidations hit $12.5B in October 2026, with longs taking most of the damage. Leverage is the reason your 'safe' long got wiped.
▪️ Thorchain: a one-block Ethereum reorg caused a double refund of 10 ETH, triggering an emergency pause on cross-chain swaps.
▪️ SEC sued BG Wealth Sharing and DSJ Exchange over an alleged $130M+ scheme selling a 'crypto trading signals' program with official-looking filings and false trading claims.
▪️ TRM Labs: 34 Sihanoukville casinos got about $1.07B in crypto from January 1 to September 7, 2026. $687M (64%) went to casinos linked to OFAC-designated networks, despite the Cambodian crackdown.
📊 Fear & Greed today:
37 (Fear)📊 Fear & Greed yesterday:
34Fear at 37, up from 34, means the crowd is nervous but not capitulated, so this is not a bottom party. The green on ZEC and TRX came on modest volume, and the red on NEAR, LINK and AVAX came on even less, so don't read a tape like that as conviction. Watch whether the bounce holds once the bigger money shows up.
🔮
@hivenetwork
🚨 Mystery EU victim drained from exchange accounts days after Binance hack
An unnamed entity in the European Union lost more than $106 million from several centralized exchange accounts on Sunday, Nov 1, according to onchain sleuth ZachXBT. Neither the victim nor the exchanges have been named. Days after the Binance hack, the stolen money is already being laundered like it's a hobby.
▪️ The funds left the exchanges as USDC and USDT, the two stablecoins whose issuers can freeze them.
▪️ Within 24 hours the attacker swapped USDC into ETH to shake off the stablecoin trail.
▪️ Funds went through instant exchanges WellWallet and Kyrrex, which barely check who you are.
▪️ Part was converted into Monero through the Wagyu swap service. Monero hides senders, receivers and amounts.
▪️ Assets were bridged across several blockchains. ZachXBT has tied 11 wallet addresses to the funds.
▪️ ZachXBT says with 'a high degree of confidence' it isn't North Korea's Lazarus Group, citing multiple laundering indicators.
📊 Wallet addresses tied to EU theft:
📊 Solana arbitrage bot drain:
💬 «This pattern strongly suggests a potential wallet compromise.» — Onchain Lens
🔮Who holds $106M, parks it on EU exchanges, and needs it washed through Monero in a day? Open question.
@hivenetwork
An unnamed entity in the European Union lost more than $106 million from several centralized exchange accounts on Sunday, Nov 1, according to onchain sleuth ZachXBT. Neither the victim nor the exchanges have been named. Days after the Binance hack, the stolen money is already being laundered like it's a hobby.
▪️ The funds left the exchanges as USDC and USDT, the two stablecoins whose issuers can freeze them.
▪️ Within 24 hours the attacker swapped USDC into ETH to shake off the stablecoin trail.
▪️ Funds went through instant exchanges WellWallet and Kyrrex, which barely check who you are.
▪️ Part was converted into Monero through the Wagyu swap service. Monero hides senders, receivers and amounts.
▪️ Assets were bridged across several blockchains. ZachXBT has tied 11 wallet addresses to the funds.
▪️ ZachXBT says with 'a high degree of confidence' it isn't North Korea's Lazarus Group, citing multiple laundering indicators.
📊 Wallet addresses tied to EU theft:
11📊 Solana arbitrage bot drain:
$786KIf your stables sit on a centralized exchange, this is the reminder that the exchange is the weak link, not your conviction. The Binance precedent shows issuers can freeze fast: Tether froze stolen USDT in 37 minutes and Circle froze $823M in USDC, per Elliptic. It's unclear whether any EU funds have been frozen, and the attacker is already getting out of USDC and USDT. Meanwhile Brazil's Mercado Bitcoin halted withdrawals after a $40M hack of its own, and BTCPay Server told merchants to switch off their servers amid hot wallet attacks. Bots running on Solana should check their wallets before someone else does.
💬 «This pattern strongly suggests a potential wallet compromise.» — Onchain Lens
🔮
@hivenetwork
🔥 Binance got emptied, refilled 95%, and now the scammers are lining up in your DMs
Binance lost about $6.3 billion in crypto after an Oct 29 attack on its hot wallets. The exchange says 95% of the hit assets are already replaced from company money. Now it's warning that the second wave isn't a hacker, it's a fake Binance support agent sliding into the DMs of people waiting for their withdrawals.
▪️ Withdrawals reopened in phases from Nov 1. The next phase is Nov 3, and Binance hasn't said which coins and networks come back.
▪️ The scam script: fake Binance staff in emails, DMs and group chats offer to speed up pending withdrawals or sell 'priority queue' access.
▪️ Other bait: fake compensation claims, fake proof-of-reserves sites, and 'move your coins to a secure wallet' instructions.
▪️ The killer move: you approve a malicious wallet permission, and the attacker moves your assets without asking you again. Nothing to reverse.
▪️ Binance says it doesn't charge fees to unlock withdrawals and never asks you to authorize wallet transactions to regain access. Anyone who does is the thief.
▪️ Refill split: 95% from company resources, the last 5% in less-liquid coins bought on the market and OTC. Tracing the stolen funds runs as a separate track.
📊 Replaced from company resources:
📊 Assets in Oct 31 reserve proof:
📊 Time to generate next proof (Nov 4 snapshot):
🔮Full refill or a nice shop window? The proof covers an Oct 31 snapshot, not today's books.
@hivenetwork
Binance lost about $6.3 billion in crypto after an Oct 29 attack on its hot wallets. The exchange says 95% of the hit assets are already replaced from company money. Now it's warning that the second wave isn't a hacker, it's a fake Binance support agent sliding into the DMs of people waiting for their withdrawals.
▪️ Withdrawals reopened in phases from Nov 1. The next phase is Nov 3, and Binance hasn't said which coins and networks come back.
▪️ The scam script: fake Binance staff in emails, DMs and group chats offer to speed up pending withdrawals or sell 'priority queue' access.
▪️ Other bait: fake compensation claims, fake proof-of-reserves sites, and 'move your coins to a secure wallet' instructions.
▪️ The killer move: you approve a malicious wallet permission, and the attacker moves your assets without asking you again. Nothing to reverse.
▪️ Binance says it doesn't charge fees to unlock withdrawals and never asks you to authorize wallet transactions to regain access. Anyone who does is the thief.
▪️ Refill split: 95% from company resources, the last 5% in less-liquid coins bought on the market and OTC. Tracing the stolen funds runs as a separate track.
📊 Replaced from company resources:
95%📊 Assets in Oct 31 reserve proof:
10📊 Time to generate next proof (Nov 4 snapshot):
40-50 hoursIf you have a pending withdrawal, the only real channels are the app and Binance's official verification service. Anyone in your DMs offering to unlock funds for a fee is working for the thieves. The proof covers balances at 00:00 UTC on Oct 31 and shows at least 1:1 backing for that snapshot. It does not show current solvency or audit the exchange, so don't let a PR tool stand in for a balance sheet.
🔮
@hivenetwork
📉 BTC at $76,844, ZEC bleeds 10.9% on $182M, and Fear sits at 26
Bitcoin is down 1.93% to $76,844.01 and Ether is down 1.65% to $2,253.98, so the whole board is red and the crowd is sulking. Zcash took the biggest drop among the high-volume names, while the rest of the tape just drifted lower with it.
▪️ ZEC -10.9% on $182M, the heaviest volume on the loser list. Somebody is getting shaken out with size.
▪️ NEAR -10.6% on $104M. SOXLB -15.4% on $35M is the deepest drop on the board, and INTCB -9.2% and SNDKB -9.1% are right behind it.
▪️ TRX is the only real green: +2.1% on $40M. USDC printed $1,656M in volume and went nowhere, which is just stablecoins doing their job.
▪️ An unidentified European entity lost more than $106M from centralized exchange accounts on Sunday, days after the Binance hack.
▪️ Binance's November 2 update says full proof for its $6.3B hack recovery is complete and replenishment stands at about 95%, with broader token coverage planned.
▪️ A Polymarket account bought the Arizona Cardinals at 1.4 cents when Arizona trailed Dallas by 10 with under four minutes left.
🔮Fear at 26 and falling. Who is buying this panic, and who is just holding the bag?
@hivenetwork
Bitcoin is down 1.93% to $76,844.01 and Ether is down 1.65% to $2,253.98, so the whole board is red and the crowd is sulking. Zcash took the biggest drop among the high-volume names, while the rest of the tape just drifted lower with it.
▪️ ZEC -10.9% on $182M, the heaviest volume on the loser list. Somebody is getting shaken out with size.
▪️ NEAR -10.6% on $104M. SOXLB -15.4% on $35M is the deepest drop on the board, and INTCB -9.2% and SNDKB -9.1% are right behind it.
▪️ TRX is the only real green: +2.1% on $40M. USDC printed $1,656M in volume and went nowhere, which is just stablecoins doing their job.
▪️ An unidentified European entity lost more than $106M from centralized exchange accounts on Sunday, days after the Binance hack.
▪️ Binance's November 2 update says full proof for its $6.3B hack recovery is complete and replenishment stands at about 95%, with broader token coverage planned.
▪️ A Polymarket account bought the Arizona Cardinals at 1.4 cents when Arizona trailed Dallas by 10 with under four minutes left.
Fear & Greed is at 26, Fear, down from 37 yesterday, so the room is scared and the sellers have the mic. Binance's second-wave warning is the thing to keep an eye on, because affected users are still waiting to see how the rest of the recovery gets handled.
🔮
@hivenetwork