Market Updates

BlockBeats news, November 2, according to Token Unlocks data, tokens such as BTW, KITE, and MMT will undergo large unlocks this week, with times (UTC+8) as follows: Bitway (BTW) will unlock approximately 101 million tokens on November 2 at 4 PM, accounting for 3.37% of circulating supply, valued at approximately $114 million; Kite (KITE) will unlock approximately 640 million tokens on November 3 at 9 PM, accounting for 17.42% of circulating supply, valued at approximately $75.6 million; Momentum (MMT) will unlock approximately 252 million tokens on November 4 at 8 AM, accounting for 294.38% of circulating supply, valued at approximately $32.3 million; Ethena (ENA) will unlock a total of approximately 134 million tokens this week, equivalent to approximately $25.4 million. Among them, approximately 40.63 million tokens will be unlocked on November 2, valued at approximately $7.7 million; approximately 93.75 million tokens will be unlocked on November 5, valued at approximately $17.7 million; Avalanche (AVAX) will unlock approximately 1.67 million tokens on November 8 at 8 AM, accounting for 0.30% of circulating supply, valued at approximately $14.7 million.

BlockBeats news, November 2: Quote Markets team member filo published a post reviewing the XPL flash crash on Hyperliquid on November 1, stating that at 04:32 (UTC) on November 1, XPL fell 18% on Hyperliquid within a single minute from the opening price to its lowest point, while Bitcoin's lowest price during the same period was only 0.04% below its opening price. Before this volatility occurred, 16 associated wallets established large XPL long positions through 4 groups of fund transfer networks and concentratedly withdrew margin before the price decline. Among them, 12 wallets completed 20 withdrawals between 04:24 and 04:32, withdrawing a cumulative approximately $2.0386 million, while another 7 withdrawals were rejected due to insufficient balances. Data shows that these wallets exhibited similar fund flows, withdrawal testing, and phased buying behavior, and analysis suggests they may have been controlled by the same operator or multiple participants acting in coordination. As of before the price decline, these 16 wallets collectively held approximately 269 million XPL long positions, worth about $23.09 million, accounting for a considerable proportion of the increase in open interest during the same period. At 04:32:43, Hyperliquid triggered the first related liquidation; at that time, XPL had already fallen about 6% from the previous minute on both Binance and Hyperliquid, indicating that the price decline occurred earlier than the start of Hyperliquid liquidations. Subsequently, the HLP liquidation vault took over approximately 160 million XPL, worth about $12.177 million, and lost about $555,800 during the subsequent selling process of about 75 minutes. Of this, about $282,400 came from the difference between the takeover price and the Binance market price, about $260,300 came from further declines in XPL during the selling period, and another about $5,218 came from trading fees. This loss accounted for about 0.33% of HLP's total funds, but was equivalent to 55.6% of the liquidation vault's own funds. The overall trading result of these 16 wallets on Hyperliquid was still a loss of about $711,000, and there is no evidence showing that they profited on this platform through this operation. Although the chronological order of the early fund withdrawals and the liquidation is clear, public on-chain data cannot confirm whether these wallets directly caused the XPL price decline, nor can it determine the identity of the actual sellers and whether they established hedge positions on other trading platforms. The report also emphasizes that the relevant conclusions are based only on public data from Hyperliquid and Arbitrum; account and complete trading data from other trading platforms are not visible, so the possibility that the relevant wallets profited on other platforms cannot be ruled out.

BlockBeats news, November 2: The NFT marketplace Talis Protocol officially stated that on October 31, an attacker exploited vulnerabilities in its Injective marketplace and auction contracts, stealing approximately 5,700 escrowed NFTs and selling them through public collection offers. The platform has currently suspended new listings and auctions on Injective and will return over 26,000 NFTs in the contracts to their original holders. New listings and auctions on other chains have also been suspended, while existing offers can still be canceled. The repaired contracts are undergoing pre-deployment review. The platform is developing a plan to return the affected NFTs to their original holders and compensate bidders of completed offers.

BlockBeats news, November 2 — During the week of November 2 to 8, global markets will see a series of major events. The U.S. midterm elections, earnings reports from Apple and AMD, and October nonfarm payrolls data will be the focus of market attention. In addition, interest rate decisions from the Bank of England and the Reserve Bank of Australia, the results of Israel's parliamentary election, and progress in trilateral negotiations among Russia, the U.S., and Ukraine are also worth watching. On the tech stock front, Apple and AMD will release their latest earnings reports, serving as an important test after confidence in AI trading was hit. The market expects Apple's revenue at about $113 billion, and this will be the first earnings report since new CEO Ternus took office; the market expects AMD's revenue at about $13 billion, with attention on the progress of the Helios rack and MI450 chips. In addition, Qualcomm, Super Micro Computer, Coherent, Lumentum, and Berkshire Hathaway will also report results. Separately, reports say Marvell is in talks to acquire Lumentum, with an announcement possibly coming as soon as this week. Apple's test of integrating Alibaba's Qwen into Apple Intelligence is planned to open on November 4. On the geopolitical front, the U.S. midterm elections on November 3 will elect all 435 House seats and 35 Senate seats, and the results will affect the room for advancing the Trump administration's fiscal, tariff, and industrial policies over the next two years. The final results of Israel's parliamentary election are expected to be announced on November 4, and trilateral negotiations among Russia, the U.S., and Ukraine are also planned to restart in Abu Dhabi this week. On the macroeconomic data front, the U.S. October nonfarm payrolls report will be released. Previously, September nonfarm payrolls added only 29,000 jobs, and the market expects an increase of 65,000 in October. If the employment data is strong, it may further strengthen market expectations for a Federal Reserve rate hike in December and affect the dollar, U.S. Treasuries, and gold.

BlockBeats news, November 2nd, according to Onchain Lens monitoring, Binance transferred approximately 21,750 bitcoins (BTC) from cold wallets to hot wallets, valued at about $1.69 billion. This fund transfer may be related to the platform's preparation to compensate for user losses, but the specific purpose has not yet been officially confirmed.

BlockBeats news, November 2nd, according to Ember monitoring, 10 minutes ago, an address spent 34.69 million USDC to buy 15,216 ETH on the chain, with an average purchase price of about $2,279. The USDC used for the purchase was only withdrawn from Kraken this morning.

BlockBeats news, November 2 - On-chain analyst and Security Alliance (SEAL) contributor SomaXBT stated that North Korean hackers laundered approximately $242 million in stolen Binance funds within two days. Meanwhile, the U.S. Federal Bureau of Investigation (FBI) is pressuring THORChain and others to block related transactions. SomaXBT stated that the stolen funds were transferred through multiple cryptocurrency cross-chain bridges, with Relay processing $48 million in outflows, THORChain processing $44 million, Chainflip processing $32.1 million, and Symbiosis processing $16 million, totaling approximately $140 million. However, the final destination of these funds has not yet been identified.

BlockBeats news, November 2, according to Bitget market data, Kioxia's Japanese stock plummeted about 14%.

BlockBeats news, November 2, according to Bitget market data, South Korea's KOSPI index opened down 1.62%, Samsung Electronics fell 2%, SK Hynix slightly declined.

BlockBeats news, November 2, according to official sources, StandX announced that DUSD airdrop claiming will open on November 2 at 8:00 (Beijing time) and will end on December 31 at 16:00.

BlockBeats news, November 1 — The U.S. FBI has formally determined that the theft of over $6 billion from Binance was carried out by the North Korean hacker group TraderTraitor. This group is also the mastermind behind the approximately $1.5 billion Bybit theft in February 2025, which the FBI had already explicitly attributed to TraderTraitor at the time. Blockchain analysis firms TRM Labs, Chainalysis, and others previously pointed out that the Binance case's methods were highly similar to those of the Bybit case, and that some of the stolen funds were commingled with funds from the approximately $387 million Bitget theft in September 2026, indicating the involvement of the same network. To date, the two largest thefts in cryptocurrency history (Binance and Bybit) were both carried out by the same North Korean hacker group. TraderTraitor is widely regarded as a core branch of the notorious "Lazarus Group," which has long raised funds for the North Korean regime through cryptocurrency theft. Its major large-scale thefts are as follows: · DMM Bitcoin (Japan, May 2024): approximately $308 million (4,502.9 BTC). The FBI, the U.S. Department of Defense Cyber Crime Center, and Japanese police formally attributed it to TraderTraitor. Method: fake LinkedIn job recruitment lured an employee of wallet software company Ginco to run malicious code. · Bybit (February 2025): approximately $1.5 billion. The FBI formally issued a public statement explicitly attributing it to TraderTraitor. It once set the record for the largest single theft in crypto history. · KelpDAO (April 2026): approximately $292 million. Analysis firms such as TRM Labs pointed out that the methods (including small Tornado Cash deposits, pre-prepared signatures, etc.) closely matched TraderTraitor's past operations. · Bitget (September 2026): approximately $350 million–$387 million. Multiple analysis firms (TRM, Chainalysis, ZachXBT, etc.) strongly linked it to TraderTraitor/the same North Korean network through fund commingling, overlapping money-laundering networks, and other factors. · Binance (October 2026): approximately $6.3 billion. The FBI has formally confirmed it was carried out by TraderTraitor, setting a new all-time record. · Earlier stages (2020–2022) also involved malicious crypto apps named "TraderTraitor" (Electron/Node.js framework) and phishing campaigns targeting developers.

BlockBeats news, November 1 - THORChain co-founder Chad Barraford stated in a post that all information held by THORNode operators is public and can be accessed in real-time, so law enforcement agencies do not need to obtain relevant information through subpoenas. He believes this is the most ideal situation for investigations. Previously, the FBI, the U.S. Secret Service (USSS), and the Internal Revenue Service Criminal Investigation (IRS-CI) called on THORNode operators, RPC node operators, instant exchange platforms, and DeFi service providers to block transactions with addresses associated with North Korean TraderTraitor attackers, as well as fund flows derived from these addresses. This request involves the theft of over $6 billion in assets from Binance.

BlockBeats news, November 1 — U.S. President Trump has recently stated publicly on multiple occasions that he gets along well with North Korean Supreme Leader Kim Jong Un, emphasizing that maintaining good relations with nuclear-armed countries is a wise move. This style is consistent with his first-term summit diplomacy toward North Korea and aligns with his current second-term preference for keeping communication channels open with "leaders of nuclear-armed states." Responding today to the Binance theft incident, Trump said it is not yet certain whether the attack on Binance was carried out by North Korea. If it is ultimately confirmed to be linked to North Korea, the United States will communicate with the North Korean side. The FBI had previously issued a notice formally attributing responsibility to North Korea for the Binance security incident that occurred on October 29, 2026, involving virtual assets worth more than $6 billion. The FBI designated this North Korean malicious cyber activity as "TraderTraitor." If the U.S. side pushes for negotiations, this could include demanding the freezing/return of assets through third parties, intelligence channels, or public pressure. Trump's past approach toward North Korea has leaned toward "direct communication + personal relationships," and whether this continues this time remains to be seen. Binance's connections to businesses related to the Trump family (such as stablecoins) may also make the White House pay closer attention to this case. Meanwhile, the prospects for a formal U.S.-North Korea summit remain uncertain: Trump has previously expressed a willingness to meet within the year, but this has recently cooled, and North Korea has not actively responded; if the FBI attribution is confirmed and the stolen funds are used for nuclear weapons/missile programs (the United States has long accused North Korean hackers of using proceeds to support weapons programs), this could become a new issue or point of friction in communications with North Korea.

BlockBeats news, November 1st: Chainalysis stated in a post that THORChain recently experienced an unexpected delay in the money laundering process of stolen funds from the Binance attack due to an Ethereum chain reorganization. This chain reorganization caused THORChain to erroneously issue duplicate refunds to a user who deposited 10 ETH, triggering an emergency pause of the protocol and temporarily preventing all users from conducting cross-chain swaps, including money launderers associated with North Korean hacker groups. Chainalysis said that before THORChain resumed service, attackers and other users were unable to swap through most of its cross-chain bridges. Previously, the U.S. Federal Bureau of Investigation (FBI), the U.S. Secret Service (USSS), and the Internal Revenue Service Criminal Investigation division (IRS-CI) jointly called on THORNode operators, RPC node operators, instant swap platforms, DeFi service providers, and other virtual asset service providers to block transactions involving addresses related to the Binance hack, as well as fund flows derived from those addresses. The announcement also published wallet addresses directly or closely associated with related North Korean hacking activities.

BlockBeats news, November 1 - According to monitoring by Aunt AI, a VVV whale with an entry cost as low as $3.77 has once again deposited to Coinbase after a 19-day hiatus. The address transferred 100,000 VVV, worth approximately $2.32 million, about 3 hours ago. Data shows that since June 2026, this address has cumulatively deposited 663,374 VVV to trading platforms, with an average cost of approximately $21.53. If all these tokens have been sold, the cumulative profit would be approximately $11.786 million, representing a return of about 471.2%. Since June 2026, this address is suspected to have sold off approximately $14.28 million worth of VVV, but on-chain deposits do not directly prove that the tokens have actually been sold.

BlockBeats news, November 1st, according to Onchain Lens monitoring, North Korean hackers associated with the Binance attack incident transferred approximately $38 million in funds through the cross-chain protocol Relay within 7 hours, and the related transfers are still ongoing. Although Relay claims to have deployed a KYT (Know Your Transaction) risk control system, the relevant funds were still successfully transferred across chains through the protocol. The account stated that the attackers were previously unable to transfer funds so quickly through THORChain, while Relay failed to promptly block the related transactions. This fund movement was first discovered by @SpecterAnalyst. The relevant address is TNhpfKq83wufEKGjBhQFnT7jnxYmyBzH6F. The above claims currently come from on-chain monitoring accounts, and whether Relay has a risk control failure still requires further verification.

BlockBeats news, November 1st, according to market sources, U.S. President Trump stated that it is currently uncertain whether the Binance attack was carried out by North Korea. If it is ultimately confirmed to be related to North Korea, the United States will communicate with North Korea. BlockBeats reported earlier today that the FBI has identified a North Korean hacker group as responsible for the theft of over $6 billion from Binance.

BlockBeats news, November 1 - The U.S. Federal Bureau of Investigation (FBI) issued an announcement stating that it has officially identified North Korea as responsible for the Binance security incident that occurred on October 29, 2026, involving virtual assets valued at over $6 billion. The FBI has designated this North Korean malicious cyber activity as "TraderTraitor." The FBI stated that it has collaborated with the U.S. Secret Service (USSS) and the Internal Revenue Service Criminal Investigation (IRS-CI) to track the related funds, discovering that the attackers primarily converted the stolen assets into Ethereum (ETH), and are expected to further launder money through DeFi protocols and instant exchange services. The FBI, USSS, and IRS-CI call on THORNode operators, RPC node operators, instant exchange platforms, DeFi service providers, blockchain analytics firms, and other virtual asset service providers to block transactions with addresses used by TraderTraitor or fund flows derived from them. The announcement also published wallet addresses directly linked or closely related to the relevant North Korean hacking activities.

BlockBeats news, October 31 - Strive CEO Matt Cole stated that the approximately $6.3 billion theft incident at Binance has not changed his long-term investment judgment on Bitcoin. Considering the scale of the attack and overall market weakness, Bitcoin's decline was smaller than he expected, but it is still too early to determine whether the price has bottomed out at this stage. Currently, Bitcoin is priced at approximately $77,400, down about 4% from before the attack began on Thursday. Strive previously disclosed that it held 43,000 BTC as of October 23. Cole compared this wallet attack to a bank robbery rather than a failure of the Bitcoin network. Paul Chapman, Head of Financial Crime at Wirex, also emphasized that the attack targeted a company's systems, not the Bitcoin network itself. Regarding future trends, Cole believes the market is in an "early spring" style recovery phase, which may last another 6 to 9 months, with prices gradually rising rather than rapidly hitting new highs. He stated that within any reasonable timeframe, this incident will not change his investment logic on Bitcoin. In terms of historical market reactions, after the $1.5 billion attack on Bybit in 2025, combined with overall market volatility, Bitcoin fell from near $100,000 to approximately $95,000, a decline of about 5%. Additionally, according to CNBC citing Anchorage Digital data, after past attacks on crypto trading platforms, Bitcoin's average decline in the first 24 hours was 8.3%. The attack investigation is still ongoing. Blockaid CEO Ido Ben-Natan believes the attackers may have exploited Binance's transaction signing process. His analysis found an Ethereum transaction containing 50 signature authorizations, with matching authorizations allowing attacker-controlled code to execute through the wallet. Binance stated that as of Friday, no evidence of wallet private key leakage had been found.

BlockBeats news, October 31 - According to on-chain analyst Ai Yi (@ai_9684xtpa), the Binance SAFU wallet transferred out 7,500 BTC, worth approximately $580 million, half an hour ago. This transfer may be related to replenishing reserves for affected assets. After the transfer, the address still holds 7,500 BTC, about half of the balance before the transfer. Subsequently, Binance co-CEO Yi He stated that BTC, ETH, USDT, BNB, SOL, USDC, XRP, USD1, RLUSD, and ZEC have all restored 100% full reserve backing.