Global crypto & Web3 news, explained clearly. No hype, no price predictions. Not financial advice.
Global
Joined October 2026
- Tweets328
- Following75
- Followers32
- Likes248
Pinned Tweet
MABOnChain is live.
Global crypto & Web3 news, explained clearly. Sourced reporting and plain-English explainers on Bitcoin, Ethereum, DeFi, regulation and markets. No hype. No price predictions.
mabonchain.com
#Crypto #Web3
Wednesday, in three:
• A judge let Kalshi's stock perps keep trading but said the CFTC likely lacked authority
• First tokenized US stock trades settled under the SEC's Innovation Exemption
• Mercado Bitcoin set a phased reopening from Nov. 9
Daily: mabonchain.com/newsletter/
Crédit Mutuel Arkéa confirms a cyberattack enabled fraudulent transactions, hours after ZachXBT named the bank as the victim of a suspected $133M+ theft. Its statement says clients' assets weren't hit. Per AFP, it hasn't confirmed the amount.
mabonchain.com/news/credit-m…
#Crypto
Three from Tuesday:
• Kraken restricts accounts linked to a suspected $133M+ theft from an unnamed EU entity
• The CFTC clears perpetual futures on single US stocks
• Tether's CEO says it holds about 150,000 BTC
Get it daily: mabonchain.com/newsletter/
If you run a BTCPay Server store with a hot wallet, updating may not be enough. The project's Nov. 2 advisory says #Bitcoin and Litecoin were stolen from hot wallets on servers running 2.4.1 or earlier. What it tells operators to do:
On 2.4.1 or older, even if you've updated since the Nov. 1 warning: sweep what's left in the hot wallet to a new wallet with a new seed, take the old server offline, and rebuild on a fresh machine. Replace hosting, SSH, API and Lightning credentials too.
BTCPay says it has seen no impact on servers already on 2.4.2 or later when it issued the warning, and funds in wallets whose keys sit off the server, like hardware wallets, weren't affected. It hasn't given a loss total.
mabonchain.com/news/btcpay-s…
MABOnChain retweeted
Binance hourly deposits EXCEED withdrawals. 👀
According to public reports, only 6-10% of withdrawals went to other CEX. Majority went to self-custody wallets, and have not interacted with a DEX yet. Stay safe. 🙏
MABOnChain retweeted
INSIGHT: @cz_binance says the @Binance run on withdrawals never came.
Outflows hit about $3.6 billion, roughly 2% of holdings, versus the 10%-30% he had expected.
Monday's three to know:
• Mercado Bitcoin pauses deposits and withdrawals after a security incident
• BTCPay Server says the hot-wallet thefts hit servers on 2.4.1 or older
• NEAR's House of Stake votes to cut max issuance to 1.6%
Daily Brief: mabonchain.com/newsletter/
MABOnChain retweeted
A little something that's not mentioned, and ppl may not even think about:
Binance did not borrow money
Binance did not sell assets
Binance did not raise money
Binance covered from its balance sheet.
This differs from other incidents that people keep wanting to compare to. 🙏
Aave has frozen its $136M tBTC market after Threshold paused minting and Bitcoin redemptions on Oct. 30. About 1,760 tBTC sits there, roughly 42% of supply. What it means for holders 🧵
Threshold says tBTC is fully backed: about 4,320 BTC in its bridge wallets against roughly 4,185 tBTC, with no funds lost and no unauthorized minting seen. It hasn't given a reopening date yet.
On Aave, existing loans can still be repaid and collateral withdrawn, and liquidations continue at a 78% threshold. Threshold asks users not to send BTC to old deposit addresses or resubmit pending requests.
mabonchain.com/news/aave-fre…
Monday, in three lines:
• Aave freezes its $136M tBTC market as Threshold pauses redemptions
• 50 companies, Nvidia and Nike among them, object to OKXICE stock tokens
• China's Communist Party targets graft run through crypto
Get the Daily Brief: mabonchain.com/newsletter/
12 DeFi front ends, including Flap, Kintsu and Pickle Finance, sent visitors to a wallet drainer on Oct. 31 after their domains were hijacked at the registrar, per Blockaid. The websites were the target, not the contracts. 🧵
All 12 domains were registered through Name.com, which says the affected domains are restored and the accounts secured. The Block traced about $138K to three wallets on EVM chains, a partial tally that leaves out Solana and Aptos.
Kintsu's advice for anyone who connected or signed during the hijack: check token approvals, revoke what you don't recognize, and move funds if you signed something harmful. Disconnecting alone doesn't cancel an approval.
mabonchain.com/news/chainaly…
Your Sunday catch-up:
• Iron Fish ends support for its network after a 2019 inflation bug
• 12 DeFi sites were DNS-hijacked to serve a wallet drainer
• b14g pauses contracts after 97M CORE was withdrawn without authorization
Daily Brief, free: mabonchain.com/newsletter/
Trezor chose to warn before its lab has the device: one Safe 5 bought from CryptoBilis in August reportedly hid an extra board that could read the seed off the screen. Buyers since March 2026 are told to move funds to a new seed. No losses reported so far.
CryptoBilis update
We've been made aware, through responsible disclosure, of a single hardware implant in a Trezor Safe 5 device bought from the reseller CryptoBilis in August 2026.
No CryptoBilis buyer has reported a loss of funds to us.
IMPORTANT: If you bought a Trezor from CryptoBilis from March 2026 onwards, we know this is unsettling. Here’s what to do:
Already using it?
Move your funds to a newly created wallet with a new seed as soon as possible. Do not reuse the old seed in any wallet, hardware or software. If you don’t have another secure hardware wallet available, we recommend temporarily migrating your funds to a software wallet or an exchange you are familiar with.
Not set up yet? Don’t set it up, and never enter your existing wallet backup on it.
We haven’t received the device to confirm this report, but based on the customer’s description, we’re treating it as credible and sharing it now so customers who purchased a Trezor via CryptoBilis can secure their funds as a precaution. Our security team will examine the device as soon as it arrives.
On October 9, 2026, we removed CryptoBilis as a reseller following reports of tampered Ledger devices sold through it. Since then, we have been inspecting Trezor devices that customers bought from CryptoBilis and have found no signs of tampering on any of the four devices we’ve received so far.
NEVER share your wallet backup (recovery phrase) with anyone. Trezor Support will never ask for it.
If you are affected by this incident, please keep your CryptoBilis device and contact Support to receive a new Trezor hardware wallet: trezor.io/support#open-chat
We're investigating and will post updates here as soon as we know more. Thank you to the customer who reported this through our responsible disclosure program, and to @SEAL_911 for working alongside our teams on the response. Reports and engagement like this help us protect everyone else.
For more information, visit our blog: trezor.io/blog/news/implant-…
