Crypto & Web3 — November 2, 2026 Weekly
Crypto & Web3 news & updates — every claim linked to a primary source.
Key Findings
Executive Summary (5)
- •The Binance hack — $6.3 billion stolen by North Korea's TraderTraitor, the largest exchange breach in crypto history — is the defining event of the week and a structural inflection point: it demonstrates that state-sponsored actors can now breach the world's largest centralized exchange, not just DeFi protocols, and the FBI's direct request to DeFi operators to block stolen-fund addresses signals that U.S. law enforcement is beginning to treat permissionless protocols as compliance actors with o…
- •The simultaneous DTCC tokenization launch with 20 Wall Street firms and Ripple's OCC bank approval represent the institutional adoption narrative advancing on schedule even as the security environment deteriorates — the two tracks are running in parallel, with institutional infrastructure deepening while the exchange and DeFi security layer remains structurally vulnerable to nation-state-level attacks.
- •Ethereum's Glamsterdam upgrade accumulated a second and third security issue this week — a staking deposit routing bug and a certificate authority failure — on top of the gas rule postponement from the prior period, extending the timeline uncertainty and widening the competitive gap with networks that have shipped major upgrades on schedule. The pattern suggests Glamsterdam's path to mainnet is measured in months, not weeks.
- •The OKX-ICE tokenized stock plan's rejection by eight major corporations — including the issuers of the stocks being tokenized — versus DTCC's successful launch with the same Wall Street firms illustrates that tokenized equity adoption depends on issuer alignment: infrastructure that preserves existing custody and shareholder rights (DTCC model) is advancing, while infrastructure that creates synthetic exposure without issuer consent (OKX-ICE model) faces structural resistance.
- •The stablecoin market's 1.38% weekly contraction to $296.16B, combined with RLUSD's 8.83% growth and the OCC's call for community banks to enter stablecoin payments, signals a rotation within the stablecoin market: major incumbents (USDT, USDC) are contracting while regulated, bank-aligned issuers gain share — a dynamic that the GENIUS Act compliance deadline will accelerate.
Key Points (14)
- 1.Binance lost over $6.3 billion in a hack on October 30, attributed by TRM, Chainalysis, ZachXBT, and confirmed by the FBI to North Korea's TraderTraitor group; crypto liquidations reached $1.57 billion and DeFi TVL fell 5.65% in a single day [6].
- 2.The FBI listed over 600 Ethereum addresses, just under 20 Bitcoin addresses, and a single Solana address, asking DeFi operators including THORNode operators, RPC node operators, and instant exchanges to block transactions from these addresses [15].
- 3.Binance arranged $6.34 billion to cover losses, said it had replaced 90% of stolen crypto by October 31, and began phased withdrawal restarts on November 1 [6].
- 4.Stablecoin issuers froze over $2.4 billion of stolen Binance funds; Chainalysis CEO said attackers had already used thousands of addresses and expected tens of thousands over coming weeks [15].
- 5.DTCC launched its tokenization service on October 28 on Canton Network and its private Besu blockchain, covering approximately $30 trillion in market value with 20 Wall Street firms signed up including JPMorgan, Citi, Morgan Stanley, Bank of America, and UBS [16].
- 6.The OCC approved Ripple National Trust Bank on October 27; RLUSD expanded to Robinhood Chain and grew 8.83% over the week to $2.61B [6].
- 7.Ethereum's Glamsterdam Hoodi activation remains postponed; developers fixed a bug that could have sent staking deposits to builders and addressed a security failure at an Indian certificate firm [6].
- 8.DeFi TVL fell from $88.75B to $85.25B over the week, with Aave losing over $1.1B and Lido falling to $22.04B; total stablecoin market cap declined to $296.16B [7].
- 9.Polygon Open Money Stack added Solana support on October 29; the Monerium EURe/frxUSD onchain FX pool went live on Uniswap v3 on Polygon [10].
- 10.ICE, the NYSE's parent, took steps to bring Hyperliquid perpetual futures to the U.S. through a planned ICE[XYZ] venue offering 24/7 perpetual futures on stocks, commodities, and crypto, pending CFTC approval [6].
- 11.JPMorgan, Coca-Cola, Dell, Wells Fargo, Cisco, Marvell, Walmart, and Eli Lilly all objected to the OKX-ICE tokenized stock trading plan [6].
- 12.The BIS CPMI published a report on October 29 on central bank money and payments, examining how technological innovation is transforming payment systems [12].
- 13.South Korea weighed a fourth delay on its crypto gains tax to 2029; Canada opened a consultation on draft stablecoin rules maintaining a ban on yields; the OCC called on community banks to enter the stablecoin payments market [6].
- 14.Bitcoin traded between $77,138 (October 30 low) and $81,000 (October 27 high), ending near $78,058 on November 1; the $77K level held as support despite the largest exchange hack in history [6].
Market Trends
Binance Hack Triggers Sharpest DeFi TVL Drop of the Year
The $6.3–6.4 billion hack of Binance on October 30 — attributed by blockchain analytics firms TRM, Chainalysis, and ZachXBT to North Korea's TraderTraitor group, and confirmed by the FBI on October 31 — sent bitcoin to $77,138 and triggered $1.57 billion in crypto liquidations, the largest single-day liquidation event of the reporting period [6]. DeFi TVL collapsed from $88.7B to $83.5B on October 30 alone, a 5.65% single-day drop, before partially recovering to $85.25B by November 1 [7]. The ha…
Tokenized Securities Reach Mainstream Market Infrastructure via DTCC
DTCC went live with its tokenization service on October 28, supporting select large-cap stocks from the Russell 1000 index, ETFs, and U.S. Treasury bills, notes, and bonds on the Canton Network and its private Besu blockchain. The service covers approximately $30 trillion in market value across 34 eligible securities, with 20 Wall Street firms including JPMorgan, Citi, Morgan Stanley, Bank of America, and UBS signed up [16]. Citi analysts projected tokenized securities will reach a $5.5 trillion…
Stablecoin Supply Contraction Deepens Amid Hack-Driven Risk-Off
The total stablecoin market cap fell from $300.36B at the start of the period to $296.16B by November 1, a 1.38% weekly decline, with USDT dropping to $179.67B and USDC to $71.86B [8]. The Binance hack accelerated the contraction: stablecoin issuers froze over $2.4 billion of stolen funds, and USDT and USDC supply kept shrinking through the week [7]. Despite supply contraction, Polygon's Open Money Stack added Solana support on October 29 and Ripple's RLUSD expanded to Robinhood Chain, with RLUS…
RWA Onchain AUM Declines as Hack Fallout Hits Ethereum-Based Protocols
Total RWA active AUM tracked by DeFi Llama fell from $30.88B on October 27 to $29.98B by November 1, a decline driven primarily by Ethereum-based protocol outflows following the Binance hack [9]. Stellar gained $425.3M in RWA onchain AUM over 30 days (+15.3%), while Ethereum lost $1.6B (-11.3%) and ZKsync Era lost $328.2M (-21.4%) over the same period. Morpho Blue remained the largest RWA DeFi protocol at $865.6M. The chain-level divergence — Stellar and Base gaining while Ethereum and ZKsync Er…
Bitcoin Holds $77K–$81K Range Despite Record Exchange Hack
Bitcoin traded between approximately $77,138 (October 30 low following the Binance hack) and $81,000 (October 27 high following Ripple's bank approval) across the reporting period, ending near $78,058 on November 1 [6]. The $77,000 level held as support even as crypto liquidations reached $1.57 billion and institutional investors rushed to pull funds from exchanges [6]. Wall Street analysts urged investors to buy crypto stocks after the hack, and Binance said it had replaced 90% of stolen crypto…
Competitor Trends
Ethereum Glamsterdam Bug Fixed; Testnet Timeline Still Unresolved
Ethereum developers fixed a Glamsterdam bug that could have sent staking deposits to builders, as reported on October 27 [6]. The Hoodi testnet activation remains postponed with no new date set following the October 22 postponement [5]. Separately, a security failure at an Indian certificate firm affected Ethereum, requiring developers to rush out fixes on October 29 [6]. The pattern of sequential security issues — gas rule risk, staking deposit routing bug, certificate authority failure — illus…
Ripple Secures National Trust Bank Approval; XRP Ecosystem Expands
The Office of the Comptroller of the Currency approved Ripple National Trust Bank (RNTB), with CEO Brad Garlinghouse announcing the approval on October 27 [6]. In the same week, Franklin Templeton added $150 million in fund shares to the XRP Ledger in a single wallet, RLUSD expanded to Robinhood Chain and Bitstamp, and XRP Ledger developers proposed creating wallets with zero XRP for stablecoin payments [6]. Ripple's bank approval is the most significant regulatory milestone for the XRP ecosyste…
Polygon Open Money Stack Expands Multi-Chain Payments Reach
Polygon Open Money Stack added Solana support on October 29, following TRON support added on October 8 [10] (company announcement — may reflect promotional framing). The Monerium EURe/frxUSD onchain FX pool went live on Uniswap v3 on Polygon, enabling MiCA-compliant euro-to-dollar exchange directly on the network [17]. Polygon's strategy of adding major chains to its Open Money Stack — now supporting Solana, TRON, and its own chain — positions it as a multi-chain payments middleware layer rather…
NYSE Owner ICE Moves to Bring Hyperliquid Perpetuals to U.S.
ICE, the NYSE's parent company, took steps to bring Hyperliquid perpetual futures to the U.S. through a planned ICE[XYZ] venue offering 24/7 perpetual futures on stocks, commodities, and crypto, pending CFTC approval [6]. ICE is investing in Trade[XYZ]. Separately, the DTCC tokenization service went live on Canton Network, where ICE is also a participant. The ICE-Hyperliquid partnership represents the most direct bridge yet between traditional exchange infrastructure and onchain perpetuals, pote…
DTCC Tokenization Service Live; OKX-ICE Tokenized Stock Plan Faces Corporate Pushback
DTCC's tokenization service went live on October 28 on Canton Network and its private Besu blockchain, with 20 Wall Street firms signed up [16]. In contrast, the competing OKX-ICE tokenized stock trading plan faced growing corporate resistance: JPMorgan, Coca-Cola, Dell, Wells Fargo, Cisco, Marvell, Walmart, and Eli Lilly all objected to the plan [6]. The divergence between DTCC's successful launch — backed by existing DTC custody and shareholder protections — and the OKX-ICE plan's corporate re…
Regulatory Trends
FBI Confirms North Korea Behind Binance Hack; DeFi Community Asked to Block Addresses
The FBI confirmed on October 31 that North Korea's TraderTraitor hacking group was behind the $6 billion Binance theft, listing over 600 Ethereum addresses, just under 20 Bitcoin addresses, and a single Solana address, and urging THORNode operators, RPC node operators, instant exchanges, DeFi services, and blockchain analytics firms to block transactions from these addresses [15]. Chainalysis CEO Jonathan Levin said the attackers had already used thousands of addresses and expected tens of thous…
SEC Enforcement Refocuses on Fraud; FY2027 Priorities Active
The SEC's Fiscal Year 2027 Examination Priorities, announced October 23, remained active throughout the reporting period [1]. The SEC charged two entities in a $130 million fraud scheme that used false SEC filings to boost investor confidence on October 29 [1]. The SEC also issued exemptive relief from Treasury clearing requirements for certain inter-affiliate and non-U.S. repo transactions on October 30 [1]. Chairman Atkins' podcast with Enforcement Director David Woodcock emphasized getting 'b…
BIS CPMI Publishes Central Bank Money and Payments Report; Stablecoin Competition Framed
The BIS Committee on Payments and Market Infrastructures published a report on October 29 examining how technological innovation, changing user demand, and new types of entities are transforming payment systems and the implications for central banks [12]. The report addresses how central banks support payment system safety, efficiency, and trust in money in a rapidly changing ecosystem. The BIS General Manager Pablo Hernández de Cos also addressed deposit insurance challenges from technological …
Multi-Jurisdictional Crypto Regulatory Actions Continue
South Korea weighed a fourth delay on its crypto gains tax, potentially pushing it to 2029 [6]. Canada opened a consultation on draft stablecoin rules, maintaining a ban on yields [6]. The OCC called on community banks to enter the stablecoin payments market [6]. KuCoin exited Russia and Belarus as crypto exchanges withdrew from Western-sanctioned markets [6]. HTX exited the UK after settling with the FCA [6]. The Thai Supreme Court ruled bitcoin is property after a thief challenged a conviction…
Sources Activity
Since last week
Binance $6.3B Hack — Largest in Crypto History, North Korea Confirmed
Binance lost over $6.3 billion in a hack on October 30, attributed by TRM, Chainalysis, ZachXBT, and confirmed by the FBI to North Korea's TraderTraitor group. Stablecoin issuers froze over $2.4 billion of stolen funds. Binance arranged $6.34 billion to cover losses and said it had replaced 90% of stolen crypto by October 31, with phased withdrawal restarts beginning November 1 [6]. The FBI listed hundreds of addresses and asked DeFi operators to block transactions [15]. Crypto liquidations reac…
DTCC Tokenization Service Goes Live with 20 Wall Street Firms
DTCC launched its tokenization service on October 28 on Canton Network and its private Besu blockchain, covering approximately $30 trillion in market value across 34 eligible securities including Russell 1000 stocks, ETFs, and U.S. Treasuries. Twenty firms including JPMorgan, Citi, Morgan Stanley, Bank of America, and UBS signed agreements to access the service [16]. The service builds on a December SEC no-action letter and targets 15-minute or less tokenization processing times during business …
Glamsterdam Security Issues Continue; Hoodi Activation Still Postponed
Following the October 22 postponement of the Glamsterdam Hoodi activation, developers fixed a bug that could have sent staking deposits to builders (reported October 27) and addressed a security failure at an Indian certificate firm that affected Ethereum (October 29) [6]. The Hoodi testnet activation remains postponed with no new date set [5]. This is an update to the prior period's 'Glamsterdam Hoodi Activation Postponed Indefinitely' change — the security scope has widened beyond the original…
Ripple Receives OCC Approval for National Trust Bank
The OCC approved Ripple National Trust Bank (RNTB), with CEO Brad Garlinghouse announcing the approval on October 27 [6]. In the same week, RLUSD expanded to Robinhood Chain and Bitstamp, and Franklin Templeton added $150 million in fund shares to the XRP Ledger. RLUSD grew 8.83% over the week to $2.61B [8]. The bank approval enables Ripple to offer regulated custody and trust services directly.
DeFi TVL Falls 4.6% on Week; Aave and Lido Lead Outflows
DeFi TVL declined from approximately $88.75B at the start of the period to $85.25B by November 1, a 4.6% weekly decline, with Aave losing over $1.1B to reach $16.41B and Lido falling to $22.04B [7]. The Binance hack on October 30 caused a single-day 5.65% TVL drop to $83.5B before partial recovery. This is an update to the prior period's DeFi TVL decline trend — the pace of outflows accelerated sharply due to the hack, with Aave temporarily restricting nine assets' collateral borrowing power [7]…
Watchlist — Upcoming Deadlines
DeFi Llama hack prediction market earliest resolution: Will there be a $1M+ hack this week (opened Oct 30)
Source: DeFi LlamaSEC event: Machine-Understandable Data in the Age of Super Intelligence (SI)
Source: SEC Official WebsiteDeFi Llama yields API migrates to new endpoints — integrations must update before this date
Source: DeFi LlamaSEC 2026 Compliance Outreach Program National Seminar for Investment Advisers and Investment Companies (virtual)
Source: SEC Official WebsiteFSB consultation on regulatory and supervisory modernisation principles feedback deadline
Source: Financial Stability BoardStrategic Insights (9)
- 1.The FBI's request to DeFi operators to block Binance hack addresses is the most consequential regulatory action for permissionless DeFi this week: it creates a de facto compliance expectation for THORNode operators, RPC nodes, and instant exchanges that has no clear legal basis in current U.S. law, setting up a confrontation between law enforcement expectations and the technical reality of censorship-resistant protocols [15].
- 2.Binance's ability to replace 90% of stolen crypto within 48 hours and arrange $6.34 billion in coverage — while simultaneously managing phased withdrawal restarts — demonstrates that centralization, which made the hack possible via a compromised DevOps engineer's laptop, also enabled the rapid recovery response. The DeFi Llama brief noted this paradox directly: centralization made the hack possible but also saved $3 billion [7].
- 3.The DTCC tokenization service's use of existing DTC custody and shareholder protections — rather than creating new legal structures — is the key design choice that enabled 20 Wall Street firms to sign up at launch. By extending existing legal infrastructure onto blockchain rails rather than replacing it, DTCC avoided the issuer consent problem that is blocking the OKX-ICE plan [16].
- 4.Chainalysis CEO's statement that the Binance attackers are using 'novel automated laundering mechanisms' and will need 'tens of thousands' of addresses over coming weeks signals that the laundering operation is at a scale that exceeds the capacity of traditional blockchain analytics to track in real time — a qualitative escalation in the sophistication of state-sponsored crypto theft [15].
- 5.Ripple's OCC bank approval, combined with RLUSD's expansion to Robinhood Chain and Franklin Templeton's $150M XRP Ledger deployment, positions the XRP ecosystem as the most comprehensively regulated major crypto network this week — with a licensed bank, a MiCA-adjacent stablecoin, and institutional asset manager adoption all advancing simultaneously [6].
- 6.The BIS CPMI report on central bank money and payments, published the same week as the Binance hack, provides the analytical framework that central banks will use to justify expanded oversight of stablecoin issuers and payment system participants — the timing is coincidental but the policy implications are reinforcing [12].
- 7.Polygon's strategy of adding Solana to Open Money Stack — following TRON — positions it as a multi-chain payments middleware layer that abstracts away the underlying chain for payment applications. This is a fundamentally different competitive strategy than Ethereum L2s competing on throughput, and it may prove more durable as the payments market consolidates around a few dominant stablecoin rails rather than a single chain [10].
- 8.The ICE-Hyperliquid partnership for U.S. perpetual futures, pending CFTC approval, represents the regulatory legitimization pathway that Hyperliquid's founder proposed in the prior period — operator-level regulation rather than protocol-level regulation. If CFTC approves ICE[XYZ], it will establish a precedent that onchain perpetuals can operate under existing derivatives regulation through a licensed intermediary [6].
- 9.The DeFi Llama yields API migration to new endpoints on November 13, 2026 is a minor but operationally significant change for the DeFi data infrastructure layer — integrations that have not updated before that date will break, creating a coordination deadline for the dozens of protocols and data vendors that rely on DeFi Llama yield data [7a].
Trust Summary
18 sources cited this weekDetected across 15 monitored URLs you selected — one URL can surface multiple articles.
Each source is weighted by its trust level. Single-source claims are flagged as unverified during AI synthesis.
Sources
SEC FY2027 Examination Priorities active; $130M fraud scheme charges filed October 29; exemptive relief from Treasury clearing requirements issued October 30; Chairman Atkins enforcement focus on fraud and real investor harm; upcoming events include machine-understandable data and SI event November 9 and national compliance seminar November 19
Background on SEC Crypto Task Force, FinHub, and enforcement actions; no new changes detected this week; last reviewed November 19, 2025
Background on ESMA MiCA oversight, DLT monitoring, and digital finance activities; no new changes detected this week
Site content updated October 28; content categories include AI & crypto, stablecoins, tokens, CLARITY Act, and policy & regulation; site structure shows active content across engineering, research, podcast, and policy categories
Glamsterdam on Hoodi postponed October 22; previously scheduled for October 26 at epoch 132,352; new activation date not set; October 22 post supersedes October 16 Hoodi testnet announcement
Primary source for Binance $6.3B hack, North Korea attribution, FBI confirmation, DTCC tokenization launch, Ripple OCC bank approval, ICE-Hyperliquid perpetuals plan, OKX-ICE corporate pushback, Glamsterdam bug fixes, Polygon-Solana stablecoin partnership, South Korea tax delay, Canada stablecoin consultation, OCC community bank stablecoin call, bitcoin price action, and DeFi liquidations
DeFi TVL at $85.25B as of November 1, down from $88.75B at period start; single-day 5.65% drop on October 30 following Binance hack; Aave at $16.41B, Lido at $22.04B; Binance hack noted as dominant security story; Polymarket $2.7M supply-chain exploit logged; yields API migrating to new endpoints November 13, 2026
Total stablecoin market cap at $296.16B as of November 1, down 1.38% on the week; USDT at $179.67B with 60.66% dominance; USDC at $71.86B; RLUSD grew 8.83% over the week to $2.61B; USDS fell 4.80% on the week
Total RWA active AUM at $29.98B as of November 1, down from $30.88B on October 27; Stellar gained $425.3M over 30 days (+15.3%); Ethereum lost $1.6B (-11.3%) over 30 days; Morpho Blue largest protocol at $865.6M; RWA perps open interest at $19.94B
Polygon Open Money Stack added Solana support October 29; Monerium EURe/frxUSD onchain FX pool live on Uniswap v3 on Polygon; MiCA-compliant euro-to-dollar exchange enabled on Polygon network
LF Decentralized Trust Institutional Adoption Report 2026 featured; DTCC Tokenization Service launch noted as decade of open source innovation behind Besu becoming core financial market infrastructure; Besu Certified Professional certification available
CPMI published report on central bank money and payments October 29; BIS Bulletin No. 140 on AI infrastructure financing published October 27; IFC Report No. 19 on AI readiness in central banks published October 28; cross-border bank credit grew 11% year on year to $40.7 trillion at end-June 2026
FSB consultation on regulatory and supervisory modernization principles open with feedback due January 8, 2027; October 12 G20 note on global stablecoin cross-border vulnerabilities active; FSB AI sound practices finalized October 15; FSB Chair warned markets remain vulnerable to disorderly correction and cautioned on frontier AI model risks
Blockchain sleuths including ZachXBT, TRM, Chainalysis, and Blockaid attributed Binance hack to North Korea's TraderTraitor group with high confidence; attack vector traced to compromised DevOps engineer's laptop; Lazarus Group previously responsible for $1.46B Bybit hack in February 2025 and $292M KelpDAO exploit
FBI confirmed North Korea's TraderTraitor behind Binance hack; listed over 600 Ethereum addresses, under 20 Bitcoin addresses, one Solana address; asked DeFi community to block transactions; Chainalysis said thousands of addresses already used, expects tens of thousands; hackers converting stolen funds mainly into ether
DTCC tokenization service live on Canton Network and private Besu blockchain; 34 securities eligible at launch representing approximately $30 trillion market value; 20 firms signed up including JPMorgan, Citi, Morgan Stanley, Bank of America, UBS; Citi projects $5.5 trillion tokenized securities market by 2030; builds on December SEC no-action letter
Monerium EURe/frxUSD pool live on Uniswap v3 on Polygon; EURe is MiCA-compliant e-money token backed 1:1 by euro reserves; frxUSD backed 1:1 by cash-equivalent reserves including tokenized U.S. Treasury funds; Capa provides liquidity and FX infrastructure; enables euro-to-dollar exchange on same network as transfer
Hyperliquid October revenue exceeded $60M prediction resolved Yes; hack probability markets showing 96.1% chance of $1M+ hack this week; Robinhood Chain RWA market cap above $330M on October 31 resolved Yes; Pumpfun October revenue above $70M resolved No
Get Crypto & Web3 monitored every week
This report was built from primary sources only — no aggregators. Pick your themes and sources, and OriginBrief delivers a cited report like this every week. Start your 7-day free trial — plans from $33/mo.
Start your 7-day free trial