A full list of Major Upcoming Events, to be updated

A day after attackers drained its hot wallets, Binance laid out a recovery timeline in its second security incident update. Withdrawals stay suspended for now, while deposits and other unaffected services keep running.

The team aims to start resuming withdrawals within roughly 34 hours, in phases and subject to completed security checks. An initial Proof of Reserves snapshot is planned within 12 hours, with results due on Monday, November 2.

Binance has set aside more than $6.34B in company funds, about 80% of the loss already held in the stolen assets, and roughly $3B has been frozen on-chain.

The exchange says users will not bear the loss and that no wallet private key leak has been found, though the probe has uncovered additional points of breach beyond the compromised laptop. Further technical findings are expected within about 48 hours.

Everything that moved crypto today, in one card.

Today's headliners: Uber, FBI, Circle, Binance, Tether, Polymarket, Coinbase, Strategy, Jupiter, Celestia

Binance said on Friday it is cooperating with law enforcement worldwide after the record exploit, and a source named the FBI and the US Secret Service among the agencies involved. The exchange's own post did not specify which agencies it is working with.

The focus is recovery: about $3B of the stolen funds has already been frozen by industry partners, and Binance is working with authorities to get those assets back.

Binance has reserved more than $6.34B of company funds to cover the losses, with $5B already held in the exact tokens that were stolen.

US agencies have recovered exchange-hack loot before: in 2022 the FBI helped seize 94,000 BTC tied to the 2016 Bitfinex hack, then worth $3.6B.

The USDT issuer published its third quarter 2026 attestation, prepared by BDO and covering reserves as of September 30. USDT issuance held broadly steady at about $184B across the first three quarters of the year.

Net operating profit reached $1.5B in Q3, in line with the previous quarter, bringing the year-to-date total to $4.5B. Most of the income came from U.S. Treasury bills and reverse repurchase agreements.

The reserve buffer nearly doubled to $7.95B from $4.1B at the end of Q2, with total assets of $191.5B against $183.5B in issued tokens.

Direct and indirect holdings of U.S. Treasury bills total $132.4B, keeping the bulk of reserves in liquid, short-duration instruments meant to support redemptions.

Smart wallet developer Ambire has moved into hardware with Ice, a dedicated signing device built for Safe smart accounts. It works alongside Ambire's existing browser extension and mobile app and connects to Safe over USB, Bluetooth or QR out of the box.

The device decodes every Safe action on its own screen, including each step of a batch, and blocks handing Safe control to unknown code unless the target is on a short allowlist. A hardware switch cuts USB data and radio power, after which Ice signs only over animated QR codes. Firmware is built on Trezor's, keys are generated inside certified chips, and the case is fully transparent.

The first batch is limited to 200 devices at $119 instead of $159, reserved with a $10 deposit and expected to ship in 2-3 months.

Ambire positions Ice against blind signing, the failure behind the $1.4B Bybit hack in February 2025, when signers approved a Safe transaction their devices could not decode. Hardware and firmware are open source, board and case files are published for self-builds, and a post-quantum key can be added to a Safe once chains support it.

In a video address on Friday, CEO Richard Teng said Binance will cover all hack losses with its own money. The attack hit the exchange's hot wallet, while customer assets held mostly in cold storage were not touched.

Binance has set aside more than $6.34B, of which $5B is already held in the exact stolen tokens (USDC, USDT, BTC, ETH and BNB). The rest is being bought via market and OTC channels.

The attacker used an EIP-7702 delegation that bypassed Binance's normal approval controls and a self-destruct mechanism that wiped tooling and traces. TRM Labs and Chainalysis attribute the theft to North Korea's TraderTraitor group.

Binance aims to restore withdrawals by Sunday and publish a full proof of reserves by Monday. Funds are still moving: a Tron wallet tied to the hacker sent about 5.19M TRX ($1.73M) to 12 addresses on Friday.

The hackers took about $6.36B from Binance on October 29, the largest theft ever by value at the time. But a decade of rising coin prices changes the ranking. Re-price every stolen coin at today's BTC ($77.4K) and ETH ($2,235), and the old hacks look far bigger.

Mt. Gox, 2014: about 650,000 BTC lost for good (850,000 reported, 200,000 later found). About $470M then, $50.3B now. Not one stolen coin has been recovered.

LuBian, 2020: 127,426 BTC. $3.5B then, $9.9B now. The coins are now in a contested US forfeiture case.

Bitfinex, 2016: 119,754 BTC. $72M then, $9.3B now, 129x. US authorities seized 79% of it in 2022, and none has been returned yet.

The DAO, 2016: 3.64M ETH. $50M then, $8.1B now. Ethereum reversed it with a hard fork.

Binance, 2026: $6.36B then, $6.28B now.

Bitstamp, 2015: 18,866 BTC. $5.3M then, $1.46B now, 278x.

Go back further and it gets wilder. Six bitcoin thefts from 2011 and 2012 (MyBitcoin, Linode, Bitcoinica and others) were worth under $3M combined, by community records. The same coins are worth about $18B today.

Inflation barely matters here. Bitfinex's $72M is about $101M in today's dollars. The jump to $9.3B is all bitcoin.

Some hacks shrank instead. Coincheck lost $530M in NEM in 2018, and that NEM is worth about $170K today. Bybit's $1.46B in ETH is now $1.16B. Ronin's $624M is $413M.

And in 10 years? Not a forecast, just math. At $1M per BTC, the Mt. Gox loot would be worth $650B. The Binance hacker still holds 18,270 BTC and about 512K ETH, roughly $2.6B today. At BTC $1M and ETH $25K, that stash becomes $31B.

Celestia Labs is targeting machine-to-machine micropayments with Voyager, a new blockchain architecture for agentic commerce. It is the first execution layer built on Celestia Fibre, which went live on mainnet on October 19, and the first product since the July acquisition of Sovereign Labs.

In its first full benchmark, a single Voyager node averaged 21.2M transactions per second across 100M accounts over five hours, peaking at 21.6M and processing about 400B transfers.

The design splits processing into independent threads around a ring buffer, keeps payment logic built in rather than on a general-purpose VM, and publishes every transaction to Fibre so anyone can replay it. Execution ran on one CPU core with memory flat at about 48 GB.

The figure covers a single node: it does not yet compute state roots, replicate data to other machines or serve real-time status queries at this volume. Celestia says it is taking Voyager toward production, with those components next.

Large non-crypto companies are starting to test public blockchains for treasury management. Uber is the latest to join HSBC and Franklin Templeton in an onchain investing test.

Using HSBC tokenized deposits (bank funds represented as digital tokens on a blockchain), Uber bought a Franklin Templeton tokenized money market fund on a Thursday.

Running the trade on a public blockchain let Uber move its corporate cash over a weekend and capture higher returns, outside traditional banking hours.

Ant International ran a similar treasury sweep earlier with the same setup: HSBC tokenized deposits as the settlement rail and Franklin Templeton's Benji money market fund as the destination. Uber's entry extends the test from fintech to one of the largest US consumer tech companies.