Tether Says It Froze More Than $1.5B Linked to the Binance Theft
TL;DR: Tether said on November 2 that it froze more than $1.5 billion in USDT linked to the late-October Binance attack, working with investigators and industry partners. Tether’s announcement gives the company’s account of its involvement; it does not independently establish the ultimate ownership or recoverability of every frozen token. It is tempting to present…
Strategy Adds 811 Bitcoin and Repurchases $208.2M of STRC Shares
TL;DR: Strategy announced on November 2 that it had acquired another 811 Bitcoin for roughly $65.5 million and repurchased approximately $208.2 million of its STRC preferred shares. The dollar amounts are those disclosed by Strategy for the specified transactions. The timing is notable because the company had separately disclosed large Bitcoin holdings at the end…
BitMine Reports 6.06M ETH Holdings, With More Than 5.22M Staked
TL;DR: BitMine Immersion Technologies reported holdings of 6,060,506 ETH as of November 1 in a November 2 filing exhibit. Cryptocurrency balance sheets are sensitive to valuation dates. The filing’s detailed token count is valuable precisely because it can be compared with later disclosures. It also exposes a blind spot in quick “ETH treasury” comparisons: two…
Aave Freezes New tBTC Supply and Borrowing After Mint-and-Redeem Pause
TL;DR: Aave contributors said the protocol had frozen additional tBTC supply and borrowing in its Ethereum Core market after Threshold’s temporary pause of the token’s mint-and-redeem functions. It would be misleading to conclude that tBTC has lost its Bitcoin backing solely because mint and redemption were paused. This case demonstrates why collateral quality is more…
BTCPay Server 2.4.7 Security Release Adds Urgency for Self-Hosted Merchants
TL;DR: BTCPay Server’s 2.4.7 release published in late October includes security fixes following a broad review of reported issues. Disclosure of a serious issue is not proof that it has been exploited in the wild. The appeal of self-hosting is genuine control over funds and infrastructure. The hidden cost is that responsibility cannot be outsourced…
NYSE Adds Four Transfer Agents to Planned Tokenized Securities Venue
TL;DR: The New York Stock Exchange said on November 2 that Broadridge, Computershare, Equiniti and Superstate had joined the network supporting its proposed tokenized securities venue. There is a major distinction between an issuer-sponsored tokenized security and a synthetic token that tracks a stock price without representing an actual company share. Broadridge separately described plans…
Hong Kong Launches Post-Quantum Preparation Toolkit for Banks
TL;DR: The Hong Kong Monetary Authority and the Hong Kong University of Science and Technology announced a post-quantum cryptography assessment toolkit on November 2. Post-quantum migration is not the same thing as making every blockchain or bank system instantly quantum-secure. Good security planning is often unglamorous. Discovering where keys are issued, which partners rely on…
Coinbase Explains Multi-User Architecture as Crypto Accounts Become More Complex
TL;DR: Coinbase published an engineering account of its move toward multi-user infrastructure on October 29, describing how one account or organisation can involve several people with different privileges. A blog describing architecture cannot prove that every application and endpoint is free of bugs. Account controls rarely make headlines until something fails. But the ability to…
Chainalysis Describes Recovery Efforts After Mercado Bitcoin Security Incident
TL;DR: Chainalysis said on November 2 that it had supported tracing and containment efforts following a security incident involving Mercado Bitcoin. Incident estimates can differ between early reports, technical responders and the affected platform. The difference between “identified”, “frozen” and “returned” is easy to lose in fast-moving security coverage. It matters to victims because only…
Chainalysis Discloses Separate October 30 Security Incident Involving User Data
TL;DR: Chainalysis disclosed a security incident on October 30 affecting a subset of customer-related information, including names, email addresses and certain user or role labels, according to the company. “No evidence of compromise” is not proof that a particular system was mathematically impossible to access. The apparent boundary between identity information and investigative data is…