Blockchain & Digital Assets Briefing — October 30, 2026

Top stories

The breach and its market fallout dominate the last 24 hours.

Binance says $6.34 billion is set aside after a $6.3 billion breach, the largest crypto theft on record
Attackers drained an estimated $6.3 billion from Binance hot wallets across several chains late Thursday, mostly in bitcoin, ether, USDT and USDC, in a burst that lasted about 20 minutes. Binance's initial investigation points to a compromised DevOps engineer's laptop that gave an attacker access to a service container used to submit unauthorized withdrawals; the exchange says it has found no evidence of a private-key leak. It has reserved more than $6.34 billion of company money — including $5 billion already held in the exact tokens that were taken — and is buying the remaining roughly $1.3 billion in the market. Withdrawals are suspended while deposits continue.

Why it matters: The size is the point: Binance's SAFU reserve has typically held around $1 billion, so covering this from company funds is a solvency and liquidity test, not a goodwill gesture. Partners have frozen about $3 billion, with Tether freezing over $1.57 billion in USDT, Circle more than $800 million in USDC and Ripple about $200 million — stablecoin issuers are acting as the de facto onchain police. The verification to watch is the re-published proof of reserves once remediation is done; until then "user funds are safe" is a company statement, not a verified balance.

How EIP-7702 turned one stolen signature into a $2.5 billion sweep on Ethereum
A Binance wallet signed an authorization on Thursday letting an attacker-controlled contract operate it, and less than four minutes later roughly $2.5 billion in ether and tokens was gone — the Ethereum leg of the wider $6.3 billion loss. The mechanism is EIP-7702, shipped in the May 2025 Pectra upgrade, which lets an ordinary private-key wallet borrow smart contract code by signing a delegation.

Why it matters: Attribution matters here. Blockaid's Ido Ben-Natan told Cointelegraph the theft was probably possible without 7702, but that the upgrade let attackers do it "in one sweep" and may have bypassed checks that would otherwise have required separate transactions; Ambire's Ivo Georgiev argued it made little difference because the attackers already had signing authority. Either way the lesson is the same: a delegation is a standing permission, so exchange hot-wallet key custody now includes whatever code the wallet is allowed to delegate to. Watch for exchanges and wallet vendors restricting 7702 delegations to audited, allowlisted contracts.

Bitcoin slides to $77,000 as $1.57 billion of leveraged bets are wiped out
Bitcoin traded near $77,100 at 15:00 UTC, down about 5% in 24 hours, with ether at roughly $2,234 (-4.6%), solana down 7.1% and BNB down 6.7% on its own exchange's breach. Liquidations reached about $1.57 billion. The move landed alongside a broader risk-off session: the Nasdaq fell more than 2%, Intel dropped 28%, gold slipped below $4,000 an ounce and the 10-year Treasury yield fell to 4.90%.

Why it matters: Two independent shocks hit at once. The macro one is an AI-capex unwind that is repricing every long-duration asset; the crypto-specific one is a custody-trust shock, which behaves differently — it pressures exchange balances and stablecoin redemptions rather than just price. Crypto equities took the sharper hit on Friday, with Coinbase down 12%, Strategy down 11% and Circle down 9.5%, which tells you the market is pricing platform and counterparty risk, not only bitcoin beta. The reset in funding is the setup for a bounce; ETF flow data early next week is the cleaner read on whether allocators agree.

Markets & institutional adoption

Earnings, treasury-company funding and the tokenized-equity sandbox.

Coinbase's $719 million quarter was a crypto-mark gain, not an operating rebound
Coinbase reported third-quarter net income of $718.7 million, up from $432.6 million a year earlier, but the figure is almost entirely a $715.0 million gain on crypto assets held for investment. Adjusted net income was $77.7 million. Total revenue fell 35% to $1.216 billion and missed consensus of about $1.233 billion, with transaction revenue down 44% as consumer spot volume fell 59%. Subscription and services reached 49% of net revenue, and prediction markets passed $200 million in annualized revenue.

Why it matters: Several outlets ran the quarter as "net income up 66%", which is the wrong read: the operating business shrank, and the bottom line was a mark-to-market on the company's own crypto holdings. The real signal is mix. Prediction markets, derivatives and USDC balances (average $22 billion, a record) are what held revenue roughly flat quarter over quarter even as spot trading fell 10%, and trading market share rose to 10.7% for a fourth straight quarter of gains. That is a company transitioning from a spot-fee business into a diversified brokerage — a slower, less cyclical story than the headline.

Strategy's CFO exits as a $4.83 billion cash cushion reframes the bitcoin-treasury trade
Strategy disclosed the resignation of CFO Andrew Kang alongside third-quarter results and closed the quarter with $5.07 billion in dollar assets, including a $4.83 billion cash reserve that analysts at StoneX and TD Cowen say covers roughly 3.2 to 3.4 years of preferred dividends and debt interest. The company spent about $2 billion repurchasing its STRC preferred to bring it back near $100 par, and bitcoin per share is down 3.7% year to date. The stock fell about 11% on Friday.

Why it matters: The treasury-company trade is being repriced on funding structure rather than bitcoin beta. Strategy chose to build a cash buffer and defend its preferred securities instead of buying more bitcoin, which is the conservative choice and also the reason its bitcoin-per-share metric went backwards. Daily dividend accrual starts Nov. 1 for STRC and Jan. 1 for the other three series, a feature management frames as a step toward round-the-clock, tokenized-style instruments. StoneX kept a $435 target and TD Cowen $260, so the bull case now rests on the company resuming accumulation with a stabilized balance sheet.

Walmart and 37 other companies block their shares from the OKX-ICE tokenized stock venue
Walmart, Eli Lilly, Cigna, Carnival and Arcos Dorados objected to having their shares traded on OKXICE TSV, the 50-50 joint venture between NYSE parent ICE and OKX's U.S. holding company, per the venue's Oct. 28 notice. The objector list has grown from nine on Oct. 15 to 38, spreading from tech and finance into retail, health care and travel. Under the SEC's innovation exemption, a written objection within 30 days bars a venue from listing a third-party tokenized version of that stock.

Why it matters: This is the binding constraint on tokenized equities, and it is legal rather than technical. The venue plans 24/7 trading through permissioned Uniswap v4 pools on OKX's XLayer, capped at 75 large caps at 0.25% of average daily volume and 250 others at 2.5% — a deliberately small sandbox. But the SEC order hands issuers a veto, and issuers are using it: more than quadrupling the objection list in two weeks tells you corporate counsel treats a third-party token as a liability, not distribution. Watch which large issuers opt in voluntarily; that, not throughput, determines whether tokenized stocks become a market.

Protocols, products & regulation

Security incidents in the wallet and vendor layer, and what they change.

Trezor warns CryptoBilis buyers to move funds after a reported hardware implant
Trezor said a customer in Indonesia reported an extra circuit board inside a Trezor Safe 5 bought in August 2026 from reseller CryptoBilis via Tokopedia. The reported implant sits between the main board and the screen, carries a cellular module and antenna, and according to the disclosure reads what the screen displays — including the recovery phrase — and transmits it over a mobile network. Trezor has not yet examined the device but is treating the report as credible. No losses have been reported, and the reseller was dropped on Oct. 9 during Ledger's parallel tampering investigation.

Why it matters: Self-custody's weakest link is the supply chain, not the firmware. The mitigation Trezor gives is the uncomfortable one: create a brand-new wallet with a new seed, because reusing the old backup on clean hardware does not undo exposure. Trezor says four other devices from that channel showed no tampering and it is offering replacements, but it also concedes seals and packaging are not sufficient on their own. The practical rules are to buy direct from the manufacturer, treat discounted marketplace listings as suspect, and expect a phishing wave aimed at CryptoBilis buyers.

Polymarket resumes trading after a $2.65 million third-party breach
Polymarket halted trading on its international venue on Oct. 29 after users reported balances withdrawn without approval. The company said one of its third-party providers had been compromised, that the issue was identified and fixed, that affected users would be made whole and that the matter was referred to law enforcement. Losses tracked by DeFiLlama came to just under $2.7 million — slightly below the roughly $3 million taken in a June breach of a different vendor — and trading has since resumed.

Why it matters: Prediction markets are the fastest-growing product in crypto right now, and this is the second vendor-layer compromise to hit the category leader in five months. The pattern is the message: settlement and resolution can be onchain while account authorization still runs through offchain vendors, so the security budget has to follow the offchain path. For users the takeaway is that "non-custodial" describes where assets sit, not who can move them; for the category it is a reminder that growth in event contracts is attracting the same intrusion crews that target exchanges.

Bottom line

One theme runs through today: the largest theft in crypto history came through operations, not cryptography — a laptop, a signing service and a delegation permission — and the market repriced counterparty risk rather than the technology, with bitcoin near $77,000, $1.57 billion liquidated and crypto equities down double digits. The institutional build-out did not stop: Coinbase is diversifying away from spot fees, Strategy is trading bitcoin-per-share growth for a funded balance sheet, and tokenized stocks are live in a small sandbox. But Walmart and 37 other issuers just demonstrated that the gate on tokenized equities is issuer consent, not engineering. Next checkpoints: Binance's re-published proof of reserves and withdrawal reopening, whether exchanges restrict EIP-7702 delegations, and Monday's ETF flows.

As of

October 30, 2026, 15:05 UTC