Daily Check-in: November 2, 2026

On-chain investigator ZachXBT says an unnamed EU entity is suspected of losing more than $106M in USDC and USDT from exchange accounts on Nov. 1; the loss is unconfirmed. Separately, Brazil's Mercado Bitcoin suspended deposits and withdrawals after suspicious outflows that Hypernative put above $40M. Tether froze over 4.5M USDT, and the exchange says no customer lost funds. Trezor says a customer reported an extra board in a Safe 5 bought via CryptoBilis that sends out the recovery phrase over a mobile network. The device has not yet reached its lab. Meanwhile, BTCPay Server urged operators to shut down instances after attackers with administrator access drained hot wallets on version 2.4.1 or older. Losses remain undisclosed. According to Crypto.news, XRP Ledger has moved closer to activating a Nov. 4 fix for a flaw that can let accounts authorized only to burn issued tokens create new ones under certain conditions. The flaw concerns issued tokens, including stablecoins, without affecting XRP's native supply, and developers warn issuers against delegating PaymentBurn permission until the correction becomes active. CoinDesk also reported on the fix. According to Crypto.news, Trade.xyz restored its GitBook documentation after identifying unauthorized activity on Nov. 2, while warning users to avoid links within the pages as its investigation continues. Also according to Crypto.news, Premia Labs reportedly lost $464,600 in an Arbitrum vault exploit, with funds moved through Ethereum, Chainflip and NEAR Intents into BTC. RugPull News covered that incident earlier. According to Crypto.news, Trezor expanded its wallet passphrase limit to 128 characters after Coldcard thefts exposed weak recovery phrases, while warning users about passphrase risks. One practical step: buy hardware wallets only directly from the manufacturer or an authorized reseller, and avoid clicking links in project documentation or announcements until the team confirms they are safe.