An unnamed entity in the European Union is suspected of losing more than $106 million from several centralized exchange accounts on Nov. 1, according to ZachXBT, with the funds withdrawn as USDC and USDT. The attacker then swapped stablecoins for ETH, used instant exchanges, converted some funds to Monero and bridged assets across blockchains to obscure their trail. ZachXBT published 11 Ethereum addresses tied to the theft and said with “a high degree of confidence” that the attacker is not Lazarus Group, setting it apart from the $6.4 billion Binance hack, in which stablecoin issuers moved to freeze funds within minutes. It is unclear whether any funds from this case have been frozen.
Summary written by Upside AI from the original article. Read the source for full details.
Read the original on Decrypt ↗
Keywords
cryptocybersecurityBinancestablecoins
Open a keyword to see other news on the same topic.
Related tickers and likely impact
BNB/USDT
▼ Likely negativeBNB
Relevance: low
| Market | Crypto |
|---|---|
| Exchange | Binance |
| Sector | Exchange tokens |
| Market cap | $92.9B |
| Close on 11/01/2026 | 712.69 |
| Change that session | +1.24% |
BTC/USDT
• NeutralBitcoin
Relevance: low
| Market | Crypto |
|---|---|
| Exchange | Binance |
| Sector | Layer 1 |
| Market cap | $1.6T |
| Close on 11/01/2026 | 78,354.00 |
| Change that session | +1.00% |
Impact is scored by AI from the headline and may be wrong. It is not investment advice.
Related news
- Crypto investigators flag suspected $106M theft, $786K Solana bot drain
Blockchain investigator ZachXBT said an unidentified EU entity may have lost more than $106 million from accounts on several crypto exchanges on Sunday, with the funds withdrawn as USDC and USDT and then moved through multiple cryptocurrencies and blockchains. The attacker remains unidentified, and ZachXBT said the fund flows did not point to a link with North Korea's Lazarus Group. Separately, a wallet tied to King, a Solana arbitrage bot, may have lost about $786,000 on Monday, according to Onchain Lens, which said the funds moved through Solana wallets and were transferred to Ethereum via Mayan. King's operator has not confirmed a compromise. These incidents follow the $6.3 billion Binance hack on Oct. 29, which the FBI attributed to North Korean hackers known as TraderTraitor.
- North Korea Is Laundering Binance Hack Loot at One New Wallet Every 25 Seconds
According to Elliptic, North Korean hackers spread the $6.43 billion stolen from Binance across about 12,000 wallets on 11 blockchains in under four days, with more than 40,000 transactions. Thanks to fast freezes by Tether and Circle, about 44% of the funds, or $2.85 billion, has been frozen or seized, compared with roughly 3% after the $1.5 billion Bybit hack in February 2025, though about $786 million in stablecoins still got away. About $3.24 billion remains in linked addresses, and Elliptic expects the funds to be cashed out over months through over-the-counter brokers. The FBI has attributed the attack to TraderTraitor, a North Korean state-linked hacking group.
- Brazil's Largest Exchange Mercado Bitcoin Halts Withdrawals After $40 Million Hack
Brazil's largest crypto exchange, Mercado Bitcoin, suspended deposits and withdrawals on Monday after a security incident in one of its systems, saying no customers lost money and no data leaked. Blockchain security firm Hypernative flagged more than $40 million in suspicious transfers across at least 10 blockchains, a figure the exchange has not confirmed, and the exchange has not disclosed how the attackers got in. Mercado Bitcoin published destination addresses on five networks so the funds can be tracked on-chain. Tether CEO Paolo Ardoino said the issuer froze more than 4.5 million USDT linked to the incident, though a freeze does not by itself return funds to their owner. The incident follows a theft of more than $6 billion from Binance on October 29, which the FBI attributed to North Korea's TraderTraitor group; Mercado Bitcoin has not linked the two and has given no date for resuming services.
- The Biggest Crypto Hack in History Just Happened. Here's What the $6.3 Billion Breach Means for the Crypto Market.
Binance said on Oct. 29 that hackers had stolen about $6.3 billion, which the article describes as the biggest crypto hack in history. After the announcement, Bitcoin fell 5.6% within 24 hours and BNB dropped 6.2%. Binance had a rainy-day fund worth around $1 billion and has set aside more than $6.3 billion of its own capital to restore affected customer balances, so direct losses appear covered. Tether froze more than $1.5 billion of USDT and Circle froze $800 million of USDC tied to the theft, and the article says the major blockchains themselves were not breached. More than $3.3 billion was lost to hacks and scams in 2025, and more than $8.7 billion has been lost in 2026 so far.
- Coinbase and Kraken Ramp Up Security After Massive Binance Hack
Crypto exchanges including Coinbase and Kraken moved to strengthen security and called for faster information-sharing after a record hack of Binance worth $6.3 billion, which analysts attribute to North Korea. Binance halted withdrawals and said it will use company funds to cover losses, with initial findings pointing to a compromised engineer's laptop that gave an attacker access to a service container. Tether froze nearly $1.57 billion linked to Binance and Circle froze $800 million, while Binance said about $3 billion in assets is frozen so far. Binance expects withdrawals to resume within 48 hours of its Friday update.
- Binance hackers raced to move billions before it could be frozen
Hackers stole an estimated $6.3 billion from Binance in the largest crypto attack on record, which began at 8:04 pm UTC Thursday and is linked to the North Korean group behind last month's Bitget hack. The attackers quickly converted USDT and USDC, which issuers can freeze, into BTC and ETH, with $325 million of USDT sold to market makers for ETH before 20:59 UTC. Tether froze around $1.567 billion in USDT and Circle around $823 million in USDC, and Binance said about $3 billion of the $6.3 billion has been frozen. On Aave, the attackers deposited $60 million in USDT and borrowed $44.6 million of WETH about 40 minutes before the first freeze, and Aave said the position remained overcollateralized. Elliptic estimated $2.84 billion was frozen by 7:00 am UTC Friday while the attackers still controlled around $3.33 billion, and freezing does not automatically return funds.
Related markets
Latest news
- Stock Market Today, Nov. 2: Amazon Rallies on Phillip Securities Buy Upgrade and $330 Target
Amazon (AMZN) closed at $245.63, up 2.20%, after Phillip Securities upgraded the stock to “buy” and raised its price target by $10 to $330. Analyst Helena Wang raised her rating and fiscal 2027 revenue estimates, citing strong cloud demand: AWS sales jumped 39% year over year to $46 billion, the fastest growth in nearly five years, and operating income rose 61%. Trading volume reached 57.7 million shares, about 51% above the three-month average of 38.3 million. The stock had slid after last week's earnings report, where heavy AI-related capital spending and cash outflows triggered an initial negative reaction. Broader markets declined, with the S&P 500 down 0.50% to 7,542 and the Nasdaq Composite down 1.07% to 25,164.
- Wesdome Expands High-Grade Zones at Eagle River, Highlighting Growth Potential near Existing Infrastructure
Wesdome Gold Mines (TSX: WDO) reported drilling results from its Eagle River mine near Wawa, Ontario. A hole in the western extension of the 800 Zone intersected 8.3 g/t gold over 10.6 metres, while mineralization was found more than 200 metres below the current zone model. A 500 Zone hole returned 96.2 g/t gold over 2.2 metres (uncapped), and the 700 Zone showed 20.2 g/t gold over 5.7 metres, outlining an interpreted 200 x 100 metre growth area near existing infrastructure. The 2026 near-mine program comprised 21 underground drill holes and one deep surface hole, totalling about 8,000 metres, with four underground exploration drills continuing through 2027. The company said shallower zones near infrastructure could reduce access development and transport distances, offering more options for where and when to mine.
- Apple Posts Fiscal Q4 Beat On Strong iPhone, Services Sales
Apple beat Wall Street's targets for its fiscal fourth quarter, with strong iPhone and services sales. Its stock was flat in extended trading after the report was released late Monday.
- Why Indivior Pharmaceuticals Stock Topped the Market Today
On Monday, Indivior Pharmaceuticals (INDV) shares rose more than 3% on their final day as a standalone company, after its merger with Supernus Pharmaceuticals (SUPN) closed. The combined business describes itself as a leading diversified central nervous system (CNS) biopharmaceutical company and will operate under the Supernus name and ticker. Under the deal terms, Supernus shareholders receive just over 1.5 Indivior shares for each Supernus share they own, while Indivior shareholders receive a one-time special cash dividend of $1 billion before the merger closed. Indivior shareholders are expected to hold about 56.5% of the combined business, and the companies aim to reach $125 million in annual cost synergies.
- Apple Sales Rise 12%; Tariff Refunds Pad EPS: Rapid Earnings Reaction
Apple posted record September-quarter revenue of $114.5 billion for fiscal 2026's fourth quarter, up 12% year over year, while shares were roughly flat after hours. Tariff refunds, a one-time item, added about 1 percentage point to gross margin and $0.05 to EPS; without them, EPS growth would be about 11%, slightly below sales growth. Diluted EPS rose 14% to $2.10, gross margin reached 47.9%, and operating cash flow was $28 billion, with $28 billion returned to shareholders. The holiday quarter is the next test, as Apple launches the iPhone Duo, new home hardware, touch on the Mac and a rebuilt Siri; high early production costs could pressure margins. The article suggests watching gross margin excluding refunds, with holding near 47% indicating the new lineup is not eating into profit.
- Elizabeth Warren Wants to Break Up UnitedHealth, and One Day Later a Nonprofit Called It Undervalued
Senator Elizabeth Warren criticized UnitedHealth Group's (UNH) $3.3 billion purchase of Amedisys, arguing it gives the company more power to raise costs and deny care, and called for breaking up the company. On November 2, 2026, the nonprofit BetterInvesting named UnitedHealth its “Undervalued Stock” in its January–February 2027 issue, stating the list is for educational purposes and is not an endorsement by NAIC/BetterInvesting. UnitedHealth shares traded at $399.90, down 1.74% on the day and 4.35% over the week, though still up 23.51% this year. Third-quarter adjusted EPS came in at $4.69, above the $4.15 estimate, and the company raised its 2026 adjusted EPS guidance to at least $20.50. Medicare Advantage membership has fallen by 935,000 since year-end 2025, and Warren co-sponsored the Patients Before Monopolies Act (S. 4509).
Get the briefing on Telegram or Zalo
Join the Upside Telegram channel or Zalo group for the Vietnam stocks and gold briefing at 8:00 and 19:00 (Vietnam time) on trading days, plus a weekly wrap on Saturday morning.