Jumper, best known as a cross-chain swap and bridge app, has moved into derivatives with Jumper Perps, a perpetual futures front end built on Hyperliquid that routes trades to several venues from one interface.

At launch the aggregator connects Hyperliquid, Lighter and Ondo Perps, with Jumper handling deposits and moving funds to the selected venue. Every market ships with TradingView charts, including 100+ indicators and drawing tools, at no extra cost.

Traders earn a share of a weekly points pool based on their trading volume, distributed automatically every week and tracked separately from Jumper's existing swap and bridge points.

The move puts Jumper in direct competition with other perp aggregators and Hyperliquid builder-code front ends, a segment where distribution and incentives decide who captures order flow.

Fixed rates are one of the few standard lending products DeFi's largest money market still lacks. To close that gap, Aave Labs has bought the team and technology behind Avon, a protocol built around fixed- and floating-rate lending markets.

The deal covers Avon's fixed- and floating-rate lending protocols, its onchain order book, domains and related assets. Financial terms were not disclosed. Founder Prince Sinha and Ayush Kaul join Aave Labs' engineering team, while Omar el-Ashaal moves into business development.

Aave holds more than $30B in deposits and over $12B in active loans.

The Avon team will start with fixed-rate lending. Stani Kulechov framed it as a step toward bringing Aave to institutions, fintechs and everyday users, who expect predictable borrowing costs rather than variable rates.

On November 3, monitoring systems at the crypto debit card provider detected unauthorised access to the B2C platform that runs Gnosis Pay-branded cards. Certain customer information was exposed, while user funds were not affected.

Containment began within two hours of detection, the affected credentials were replaced and the vulnerability was addressed. The enterprise platform that powers the company's white-label card programmes was not affected.

The breached system was already scheduled for retirement on December 20, 2026. Until then, 3D Secure verification is mandatory for all online card payments and monitoring of card activity and wallets has been increased.

Every affected customer was emailed a list of exactly what data was taken, and the breach was reported to partners, the card issuer and data protection authorities. Users are warned to expect phishing that may include their real details or purchases.

Everything that moved crypto today, in one card.

Today's headliners: CFTC, China, Nigeria, Kalshi, Binance, Base, Zcash, World Liberty, JTX, Bitcoin

Eight days after the October 29 theft, roughly half of the stolen funds still sit in wallets linked to the attackers, mostly in ETH and Bitcoin. Elliptic says the $3.11B is very likely still held by North Korea, and only a negligible amount has been cashed out.

About $2.85B, or 44% of the haul, has been frozen or seized, mostly stablecoins blocked by Tether and Circle within an hour of the theft. After the $1.5B Bybit hack in February 2025, only about 3% was frozen.

The laundering is clearly automated: more than 20,000 wallets across 16 blockchains, at least 36 services and 65,000 transactions. About $124M has been converted into Bitcoin, largely via THORChain, while the 18,270 BTC taken from Binance has not moved since the day of the hack.

The FBI attributes the theft to North Korea's TraderTraitor group, which Pyongyang denies. The remaining ETH is expected to be swapped for Bitcoin and cashed out through OTC brokers over months. Binance aims to reopen withdrawals for all tokens on restored networks by the end of next week.

Every API model is served by a third-party provider, and some quietly serve a smaller version or break tool calls. Mira's new Sterling router tests those providers and sends requests only to the ones that pass its checks.

Developers pick a model, get one API key and change the base URL, with no other code changes. For launch, Sterling offers Claude, GPT and Gemini at up to 50% below list price, paid as you go in USDC via x402 or in $MIRA.

Checks run throughout the day on five dimensions: model identity against a reference, tool calls, honoured parameters, silent failures and declared context. Scores are public per model and per provider, and a provider that fails is routed to last.

Mira points to a four-month study of 189 endpoints that found 37 undisclosed changes across 29 of them. The product is in beta, and scores reflect automated test results only.

The six biggest airdrops that went live in October handed out ~$44M. As of November 5, all six trade below their claim-day price. Median: -20%, BTC: -7% over the same window.

• NeoSoul $DNA: $17.1M, 6% of supply, -44%. The largest drop of the month.

• Axis Robotics $AXIS: $10.8M, 4%, -54%. An OTC counterparty sold ecosystem tokens a week after TGE. Buyback started November 5.

• USD.AI $CHIP (Season 2): $10.0M, 2.25%, -18%.

• Genius $GENIUS (Season 2): ~$3.6M, -3.5%. Users could take fee refunds instead, and 5.8% of supply was burned from the 7% pool.

• Cambria $RSGP: $1.5M, 15%, -15%. Backed by BITKRAFT, 1kx and Sky Mavis.

• Ritual $RITUAL: $1.2M, 0.5%, -22%. Listed on Coinbase at mainnet launch.

The only drop holding up is the one that burned most of its own pool. Next month: Predict.fun, whose 7% claim was delayed with its Binance listing.

Greek parliament approved a 10% tax on crypto gains for private investors. It applies from 2027, and gains up to €500 a year stay untaxed. Staking and DeFi income will be taxed at 15%.

That's one of the lowest rates in Europe. Only Cyprus (8%) and the 0% countries are lower: Switzerland, Slovenia and Malta.

Taking profit costs the most in Denmark (up to 57%), Germany (up to 47.5%) and Luxembourg (up to 45.8%). But Germany drops the tax to 0% after a 1-year hold, Luxembourg after 6 months. Portugal, Croatia and Czechia work the same way.

Six assets are still locked on Binance a week after its record $6.3B hack. The exchange now aims to reopen withdrawals for HYPE, INJ, APT, PLASMA, NEAR and LTC by the end of next week.

The same deadline applies to every token on networks that are already back online, including BSC, Ethereum, Polygon, Arbitrum and Optimism. Deposits have not been affected by the incident.

Binance began restoring withdrawals in phases on November 1 and says it has replenished about 98% of the stolen assets from its own funds. HYPE has been left out of the recovery batches so far, keeping holders of the six tokens unable to move them off the exchange.

Patrick Steven Yaroch, 37, worked on the FBI's counterintelligence side with access to bureau systems holding wallet credentials gathered during investigations. He has now pleaded guilty to wire fraud and money laundering in federal court in Alexandria, Virginia.

Starting no later than December 2024, Yaroch made about 100 fraudulent transfers using credentials from 35 separate FBI cases, draining wallets tied to investigation subjects, nation-state actors and at least one wallet the FBI created for an operation. He swapped and moved the funds to hide their origin, and parts went to credit cards and car loans.

About $2.47M in crypto was stolen across 35 FBI investigations.

Planning a move abroad, he asked ChatGPT where to live in the EU and then hired Portuguese lawyers to get a tax ID after it suggested a vineyard in Portugal. He self-reported in July, agents recovered about $925K (including funds parked in Sui lending protocol Suilend), and he faces up to 20 years at sentencing on March 4, 2027.