TLDR Crypto 2026-11-02

Binance has reached 90% replenishment of the $6.3B drained from its hot wallets on October 29, when attackers compromised a DevOps engineer's laptop to access internal signing services. All top-10 assets (BTC, ETH, USDT, BNB, SOL, USDC, XRP, USD1, RLUSD, and ZEC) are now 100% backed. The remaining 10% covers less-liquid tokens outside the top 10 that are harder to source at volume. Binance funded the replenishment through partial SAFU deployment, a portion of the Futures insurance fund, and corporate treasury, and took a new Proof of Reserves snapshot at October 31 00:00 UTC, with the ZK proof expected by November 3. Withdrawal services are scheduled to reopen November 1, with Binance absorbing all financial losses and users facing no shortfall.

An unidentified AI-assisted hacker accessed “non-sensitive” customer data, including user IDs, full names, emails, and role labels. Chainalysis says it has found no sign that investigation content, query results, plaintext passwords, MFA secrets, or session tokens were accessed. It did not say when the intrusion occurred, how many customers were affected, or how AI agents were used. It says the breach is unrelated to the Binance hack. Separately, Chainalysis puts the Binance theft at $6.4B, attributed to North Korean groups. It says the attackers are using automation to cycle funds between addresses and using JustLend on Tron to get around stablecoin freezes. About $2.8B in stablecoins has already been frozen.

A proposed "L1.5" pattern for Ethereum separates stateless compute from state by placing user secrets in wallets and commitments, nullifiers, and verifiers on L1, so rollup-style execution can run without any long-lived operator holding user state. Three forthcoming EIPs enable this: EIP-8141 frame transactions let contracts self-pay fees after verifying a proof, EIP-8250 keyed nonces repurpose privacy nullifiers to reject double spends, and EIP-8288 aggregates proofs so the block carries a single recursive proof checked once per node. Any prover can take an L1.5 job (a stateless function over L1 state and user inputs) so long as its output is checked by L1, its fee is paid without linking payer identity, and submission requires no dedicated sequencer. Target applications include gasless payments via threshold-blind-signed tickets, fair exchange for private RPC and PIR queries, and stealth privacy pools, with a three-step migration path for existing L2 apps: move owned state into wallets, enable contracts to issue their own VERIFY-frame transactions, and open proving and submission to any party.

Stripe's Bridge platform now powers USDC deposits into OnePay, Walmart's consumer financial services app, letting select US customers fund checking accounts from external wallets or exchanges across 12 chains, including Base, Solana, and Ethereum. Bridge handles deposit address generation, compliance checks, and USDC-to-USD conversion, with balances credited within moments and no conversion fees at launch. The integration targets gig workers and cross-border earners who receive USDC and want to access those funds through a mainstream banking product without holding a separate stablecoin balance. OnePay describes this as the first of several stablecoin-enabled features planned for the platform, signaling a broader buildout of crypto rails inside Walmart's fintech stack.

A key neobank use is avoiding FX fees, since paying in another currency often costs over 1%, and local stablecoins with multi-currency settlement can remove that. The main problem is fragmentation, with many issuers per currency, such as six for the real, three for the yen, and three for the Swiss franc, plus several for EURC-type euro coins. Questions remain around how many guarantee 1:1 backing or can be verified in real time, and the industry may benefit from less issuer competition.

On October 29, a hacked DevOps laptop gave attackers access to Binance's internal signing system, which approved an EIP-7702 delegation handing hot wallet control to the attacker's contract, draining $6.3B with no private key compromise required and $3B since frozen. The same vector cost Bitget $350M a month earlier, both exploiting signing systems configured with blocklists rather than allowlists that permit only known-good transactions. Hyperliquid holds $5.6B of its $6.5B USDC in a Coinbase-controlled treasury address moved by unsigned system transactions, meaning a single key or validator compromise reaches the bulk of user funds. Lighter ($1B, Ethereum) uses ZK proofs to verify withdrawals with a 14-day forced-exit escape hatch, the only DEX among four analyzed where server compromise alone cannot drain balances, though its 4-of-7 security council bypassed upgrade-notice requirements five times in October.

RWA.xyz's analysis of $6.1B in Morpho variable-rate stablecoin lending identifies supply, not borrowing demand, as the binding growth constraint, with five curators (Steakhouse, Sentora, Gauntlet, SparkDAO, and RockawayX) overseeing 80%+ ($5.0B) of deployed capital. Of the $2.6B traced to specific funding sources, platform earn integrations and Sky-authorized protocol balance sheets each account for $1.1B, with issuer reserve lending via Ethena and similar protocols contributing the rest. Platform earn integrations offer the most expandable near-term growth vector, while credit limits cap protocol balance sheet allocations and redemption liquidity requirements constrain issuer reserve portfolios. For tokenized collateral, transfer restrictions, redemption terms, and secondary-market liquidity under stress set the ceiling on lender capacity.

Base's Denim upgrade, its fourth network update of 2026, was deployed to Sepolia ahead of a November 5 mainnet activation that cuts block times to 200ms. Card spend settled on Base hit $243M in October, an 80% increase from March, and Coinbase Tokenized Stocks crossed $4B in all-time DEX trading volume on the network. FalconX launched an institutional USDC credit facility on Base, Ripple deployed RLUSD liquidity, and PeerXYZ opened an Alipay beta for USDC acquisition against CNY payments. Y Combinator paid a $500K MochaTrade investment in USDC on Base and published a Crypto Request for Startups targeting AI agents, stablecoins, capital raising, and trading.

50 companies have objected to tokenized versions of their shares on OKXICE, up from 26 four days earlier, with 12 added in the latest notice.

Polygon's Open Money Stack, which handles bank pay-in to stablecoin balance to payout through one API, is now live on Solana, joining Polygon, Ethereum, Base, BNB Chain, and Tron.

Aave October revenue is annualizing at about $77M.

Net income rose to $719M from $433M a year earlier, but it includes a $715M gain on crypto held for investment.