Canton Coin (CC), the native token of the institutional Canton Network, received a no-action letter from the SEC Division of Corporation Finance that treats it as a digital commodity.

The division said it would not recommend enforcement action if CC keeps being created and distributed through the network's automated processes without securities registration. The relief covers tokens earned by validators and application providers for helping operate the blockchain.

Staff reasoning: CC's value comes from the network's programmatic operation and supply and demand, not from the managerial efforts of others, and the network has no centralized controlling party.

The letter reflects a staff enforcement position based on facts submitted by Canton, not a legal conclusion on whether CC is a security. It still gives validators and institutional users on the network a clearer US compliance footing.

Gelephu Mindfulness City, Bhutan's special administrative region in the south of the country, is turning its financial regulator into a full central bank. King Jigme Khesar Namgyel Wangchuck signed a Royal Decree granting central banking powers to the Gelephu Financial Services Office, which will become the Gelephu Central Bank.

The new institution will run monetary policy, foreign reserves, payment systems and financial supervision within GMC. The decree also opens a path to a GMC currency, including a possible digital form, subject to the King's concurrence.

The Gelephu Central Bank will be authorised to invest reserves in digital assets and cryptocurrencies alongside conventional assets.

The authority does not commit the bank to any specific token, and rules on custody, risk and reserve composition are still to be published. The transition timetable and coordination with the Royal Monetary Authority, Bhutan's national central bank, have not been outlined yet.

Everything that moved crypto today, in one card.

Today's headliners: CFTC, SEC, New Jersey, South Korea, Hong Kong, Binance, Arbitrum, Kraken, NEAR, Blockstream

GitBook, the documentation platform behind docs sites of many crypto projects, disclosed a targeted attack using AI agents that gave an attacker access to some of its infrastructure credentials on November 2. The company says it detected the intrusion immediately and found no evidence that hosted content was modified.

Potentially exposed data includes API tokens, integration tokens, Git Sync secrets linking docs to code repositories, and questions submitted to GitBook's AI assistant. GitBook has not said how the AI agents were used or how the credentials were obtained.

GitBook revoked personal API tokens and asked customers to rotate keys, replace third-party integration secrets and re-authenticate its MCP server.

PancakeSwap briefly took its docs offline as a precaution, stating its app was not affected, then moved documentation to infrastructure under its own control. Since many projects publish official instructions on GitBook, users should treat any docs page asking to connect a wallet or approve tokens as a phishing risk.

AlphaNode cut its price and opened its Network: one plan for miners now costs 99 USDT per 30 days, down from the 249 USDT activation. On the Network, traders subscribe to mined formulas and miners earn from every subscription.

• For some, it’s a store of ready-made signals. Trader (Buyer)

• For others, it’s a platform where you can monetize your own algorithms. Miner (Seller)

AlphaNode is a strategies marketplace. Mine, buy, trade.

92 strategies are already live on the Network, and miners can publish their own. Code DIFFER for 20% discount activation at alphanode.tech

Brazil's largest crypto exchange detected a breach in one of its systems early on November 2 and froze all deposits and withdrawals. A day later, Mercado Bitcoin said customers will not bear the cost of the hack and that client balances remain recorded in their accounts.

The exchange puts the assets involved at about $38 million and says $11 million has already been blocked with help from Tether, Circle, Paxos, BRL1 and Chainalysis. Outside estimates run higher: Hypernative flagged more than $40 million in suspicious transfers across at least 10 blockchains, Arkham traced at least $46 million and Chainalysis about $49 million. Tether separately froze more than $4.5 million in USDT tied to the incident.

Deposits and withdrawals remain suspended with no restart date, and the exchange has not disclosed how the attackers got in.

The incident follows the $6 billion Binance theft on October 29 that the FBI attributed to North Korea's TraderTraitor group. Mercado Bitcoin has not linked the two attacks. Like Binance, it has promised to absorb the losses itself, though neither pledge can be verified from the outside.

Funds from the record October 29 Binance exploit are moving again: an address linked to the hacker deposited 8,567 SOL into Privacy Cash, a privacy mixer on Solana.

The deposit is worth about $798K, and multiple other hacker-linked addresses show similar activity.

The $6.3B theft is the largest crypto heist on record and has been attributed to the North Korea-linked group TraderTraitor (North Korea denies involvement). Roughly $3B in stolen stablecoins was frozen, and Binance has pledged to cover all user losses.

Routing funds through a mixer breaks the on-chain trail, which makes tracing and recovering the remaining unfrozen assets harder for investigators.

Co-CEO Yi He shared the figure on November 3 in a detailed incident report on the October 29 breach, which reportedly took about $6.34 billion in digital assets from the exchange.

The blocked attempts relied on social engineering, tampered software packages and fake job interviews, all aimed at reaching sensitive data and planting malware on internal systems. Binance attributed the breach to North Korea's TraderTraitor group, the unit also tied to the February 2025 Bybit hack.

Binance froze or intercepted roughly $2.85 billion of the stolen assets and has pledged to replenish affected user funds.

Withdrawals, paused after the attack, have been restored in phases since November 1. North Korea rejected the accusations. The case shows that employee-targeted schemes like fake hiring now sit on the front line of exchange security.

The theft took 4 minutes, the setup took 5 months. Binance's incident report traces it to a poisoned Homebrew install in June and a fake job interview in September that put a 0-day on a work laptop.

On October 20, an internal AI tool led the attackers to two wallet engineers and a deploy token. On October 29, 233M XRP left the hot wallets, followed by SOL, OP and 18,270 BTC.

Pausing withdrawals didn't stop it: an EIP-7702 delegation kept moving funds on-chain for ~4 hours, until it was cleared at 00:10 UTC.

$2.85B is frozen, and the FBI names North Korea's TraderTraitor.

The motion is the latest turn in Tron founder Justin Sun's lawsuit over his frozen WLFI tokens. In a statement on X, Sun said his lawyers asked the court to sanction World Liberty Financial and its lawyers for disclosing only months into the case that the company is a UAE citizen.

World Liberty's original filing in April listed Florida as its sole citizenship. On August 26, days after a hearing that kept some of Sun's claims in federal court, the company named 22 entities in its ownership chain and citizenship in Florida, Delaware, Puerto Rico and the UAE, then argued the federal court could no longer hear the case.

Sun, who put $45 million into WLFI, says fighting the company's arbitration request cost him hundreds of thousands of dollars in legal fees.

Sun plans to refile his claims in California state court once the sanctions motion is resolved. World Liberty has rejected his earlier allegations over the token freeze.