Russia's largest bourse is opening what it describes as the country's first organized digital currency market, with Bitcoin, Ether and Tether's USDT trading set to start on December 1. Pilot trades will begin as participants join the platform.

Trading will run on the existing stock-market infrastructure from 6:50 am to 11:50 pm Moscow time, with same-day and next-day settlement plus swap transactions, all cleared through the National Clearing Center (NCC).

Non-qualified investors must pass a test before buying and are capped at 300,000 rubles (about $3,700) per year through each broker.

The market operates under Russia's crypto law, in force since September 1, 2026, which allows regulated trading but keeps the ban on crypto payments for goods and services. Moscow Exchange and the NCC have been under US and UK sanctions since June 2024, and the EU added the exchange to its list in July 2026, which raises questions about demand and spreads.

While pushing ahead with its closure, restructuring and liquidation, BitMart has also had to deal with a security incident: founder Sheldon Xia confirmed the exchange was attacked by hackers a day earlier.

The amount involved was described as relatively small. The team launched an investigation and strengthened the platform's security defenses.

Preliminary findings point to the same group that attacked Brazilian exchange Mercado Bitcoin on the same day.

The breach comes in the middle of BitMart's wind-down, adding a security investigation to the ongoing restructuring and liquidation.

The EU institution behind a suspected crypto theft that drained multiple centralized exchange accounts on November 1 now has a name. On-chain investigator ZachXBT identified the victim as French bank Crédit Mutuel Arkéa, a lender with $235B in assets. The bank's role remains unconfirmed.

The attacker withdrew USDC and USDT from accounts at Kraken, Crypto.com and OKX. Estimated losses grew from $106M to $133M after another $27M in exchange withdrawals was identified, some of them made after the first public alert.

$62.98M in stablecoins was converted into 27,553 ETH within roughly four hours, then pushed through instant exchanges, Monero swaps and cross-chain bridges.

Kraken restricted the linked accounts and Crypto.com blocked related funds, while Tether froze $1.1M in USDT. ZachXBT argues the incident was covered up and that the missing disclosure let more than $30M be laundered before law enforcement could act. Laundering patterns do not match North Korea's Lazarus Group.

Canton Coin (CC), the native token of the institutional Canton Network, received a no-action letter from the SEC Division of Corporation Finance that treats it as a digital commodity.

The division said it would not recommend enforcement action if CC keeps being created and distributed through the network's automated processes without securities registration. The relief covers tokens earned by validators and application providers for helping operate the blockchain.

Staff reasoning: CC's value comes from the network's programmatic operation and supply and demand, not from the managerial efforts of others, and the network has no centralized controlling party.

The letter reflects a staff enforcement position based on facts submitted by Canton, not a legal conclusion on whether CC is a security. It still gives validators and institutional users on the network a clearer US compliance footing.

Gelephu Mindfulness City, Bhutan's special administrative region in the south of the country, is turning its financial regulator into a full central bank. King Jigme Khesar Namgyel Wangchuck signed a Royal Decree granting central banking powers to the Gelephu Financial Services Office, which will become the Gelephu Central Bank.

The new institution will run monetary policy, foreign reserves, payment systems and financial supervision within GMC. The decree also opens a path to a GMC currency, including a possible digital form, subject to the King's concurrence.

The Gelephu Central Bank will be authorised to invest reserves in digital assets and cryptocurrencies alongside conventional assets.

The authority does not commit the bank to any specific token, and rules on custody, risk and reserve composition are still to be published. The transition timetable and coordination with the Royal Monetary Authority, Bhutan's national central bank, have not been outlined yet.

Everything that moved crypto today, in one card.

Today's headliners: CFTC, SEC, New Jersey, South Korea, Hong Kong, Binance, Arbitrum, Kraken, NEAR, Blockstream

GitBook, the documentation platform behind docs sites of many crypto projects, disclosed a targeted attack using AI agents that gave an attacker access to some of its infrastructure credentials on November 2. The company says it detected the intrusion immediately and found no evidence that hosted content was modified.

Potentially exposed data includes API tokens, integration tokens, Git Sync secrets linking docs to code repositories, and questions submitted to GitBook's AI assistant. GitBook has not said how the AI agents were used or how the credentials were obtained.

GitBook revoked personal API tokens and asked customers to rotate keys, replace third-party integration secrets and re-authenticate its MCP server.

PancakeSwap briefly took its docs offline as a precaution, stating its app was not affected, then moved documentation to infrastructure under its own control. Since many projects publish official instructions on GitBook, users should treat any docs page asking to connect a wallet or approve tokens as a phishing risk.

AlphaNode cut its price and opened its Network: one plan for miners now costs 99 USDT per 30 days, down from the 249 USDT activation. On the Network, traders subscribe to mined formulas and miners earn from every subscription.

• For some, it’s a store of ready-made signals. Trader (Buyer)

• For others, it’s a platform where you can monetize your own algorithms. Miner (Seller)

AlphaNode is a strategies marketplace. Mine, buy, trade.

92 strategies are already live on the Network, and miners can publish their own. Code DIFFER for 20% discount activation at alphanode.tech

Brazil's largest crypto exchange detected a breach in one of its systems early on November 2 and froze all deposits and withdrawals. A day later, Mercado Bitcoin said customers will not bear the cost of the hack and that client balances remain recorded in their accounts.

The exchange puts the assets involved at about $38 million and says $11 million has already been blocked with help from Tether, Circle, Paxos, BRL1 and Chainalysis. Outside estimates run higher: Hypernative flagged more than $40 million in suspicious transfers across at least 10 blockchains, Arkham traced at least $46 million and Chainalysis about $49 million. Tether separately froze more than $4.5 million in USDT tied to the incident.

Deposits and withdrawals remain suspended with no restart date, and the exchange has not disclosed how the attackers got in.

The incident follows the $6 billion Binance theft on October 29 that the FBI attributed to North Korea's TraderTraitor group. Mercado Bitcoin has not linked the two attacks. Like Binance, it has promised to absorb the losses itself, though neither pledge can be verified from the outside.

Funds from the record October 29 Binance exploit are moving again: an address linked to the hacker deposited 8,567 SOL into Privacy Cash, a privacy mixer on Solana.

The deposit is worth about $798K, and multiple other hacker-linked addresses show similar activity.

The $6.3B theft is the largest crypto heist on record and has been attributed to the North Korea-linked group TraderTraitor (North Korea denies involvement). Roughly $3B in stolen stablecoins was frozen, and Binance has pledged to cover all user losses.

Routing funds through a mixer breaks the on-chain trail, which makes tracing and recovering the remaining unfrozen assets harder for investigators.