Coin Bureau

⚠️ALERT: Core DAO's $CORE plunges 12% to an all time low after an attacker drains 97 MILLION tokens. That's 99.8% below its 2023 peak of $6.14, and down over 22% this week alone. The attacker drained the CORE, worth $1.47 MILLION, from Bitcoin staking protocol b14g on October 31. They emptied 91 staking orders by asking to withdraw 0 CORE from each, which the staking code read as everything, per Bitquery.

🚨HUGE: Goldman data shows hedge funds wiped out ALL their AI buying since 2025 in just 5 days. The bank's prime brokerage desk saw them net sell global AI stocks for five straight sessions, reversing all their AI buying since the start of 2025. They also sold about $20 BILLION of tech stocks in two weeks. Most of it was selling what they owned, at 3.5 times the pace of new bets against AI. Goldman's basket of hedge funds' favorite stocks fell 4.2% on October 22, its worst day since 2011. Across all stocks, hedge funds cut about 7.8% of their total exposure, the biggest drop in Morgan Stanley data going back to 2016, per Steno Research. Memory giants Samsung, SK Hynix, Micron and SanDisk lost more than $700 BILLION in under two weeks. Chip stocks fell 15.6% in October, while the S&P 500 fell less than 1%.

🚨Tesla owners say they're canceling FSD after its latest update over veering and sudden braking. Owners of older HW3 Teslas say update 2026.38.5.11 to Full Self Driving, which began rolling out on October 24, has their cars veering off the road and braking hard on highways for no reason. One says his car "tried to kill me 4x" in a single day before he canceled. Another user shared a clip of a Tesla driving into a barrier at 69 mph, with the driver saying FSD never saw it. Others say they've had no issues, and that FSD still requires supervision.

BREAKING: 🇺🇸🇮🇷Iran says the Strait of Hormuz could reopen in 48 HOURS, as oil continues to surge. Foreign Minister Abbas Araghchi says the plan, reached with Qatari mediators, depends on the US meeting Iran's conditions: 1. Lifting the sanctions imposed after the July deal collapsed 2. Reducing US forces in the region 3. Restoring oil waivers 4. Releasing frozen Iranian funds, including those held in Qatar 5. Recognizing Iran's new shipping route with Oman and closing all others 6. Ending the war on all fronts, especially Israel's attacks on Lebanon Iran's offer was 7 days in September and 6 days last month. Meanwhile, Brent crude jumped 13.6% in October to its highest level since April, and WTI rose 15.2%. Brent is now up more than 60% from its prewar level. Oil trading reopens Sunday evening in New York.

⚠️ALARMING: Using an OLD iPhone as a cold wallet may not be as safe as you think, OneKey founder Yishi Wang warns. Following several public iPhone jailbreak demos over the past two weeks, he highlighted a risk for crypto holders. Wiping the device and enabling airplane mode does not remove chip vulnerabilities affecting iPhone 11 and earlier models, including the second-gen SE. The BootROM flaws cannot be fixed through iOS updates. THE RISKS: - A phone accessed while unattended or borrowed may look normal when returned. This is known as an “evil maid” attack. - An attacker could use specialized USB tools to run code before iOS starts. No internet connection is needed. - Outdated software, short PINs and weak wallet passwords could make an attack easier. If an encrypted wallet file is extracted, attackers could keep guessing its password offline. - Yishi cites ChoiceJacking, a separate technique that can approve data-access prompts on vulnerable older software. Apple addressed it in iOS 18.4. Yishi recommends generating a completely new seed in a trusted environment and transferring funds. A new address under the old seed is not enough. Of note, users with recent, updated iPhones have LESS reason for concern.

🔥Top crypto firms on HIGH ALERT Exchanges and stablecoin issuers are STEPPING UP their response after the FBI blamed North Korea-linked $6.3B Binance heist. - Coinbase: Tightened cold storage controls as a precaution to protect customer assets. - Kraken: Is reviewing its security systems following the attack. - Binance: Revoked affected authorisations and enlisted blockchain investigators and law enforcement to trace stolen funds. - OKX: CEO Star Xu proposed real-time industry alerts to flag attacks, coordinate responses and track suspicious funds. - Tether: Froze approximately $1.57 BILLION linked to the attack. - Circle: Froze another $800 MILLION, bringing the combined amount blocked to roughly $2.37 BILLION.

⚡️JUST OUT: Binance announced to RESUME withdrawals in phases TODAY, starting between 06:00 and 09:00 UTC. Access will reopen progressively as each asset and network completes security checks. Temporary delays are expected. "PHASE ONE" covers 15 networks, including Bitcoin, Ethereum, BNB Smart Chain and Solana. Ten major digital asset balances are fully backed, according to Binance. Deposits remain open. Binance says it will absorb all losses, with NONE passed on to users. The exchange reassured that it has covered about 95% of the amount impacted by the exploit.

BULLISH: 🇰🇷SK hynix ($SKHY) Q3 revenue surpassed ₩100 TRILLION for the FIRST TIME, hitting ₩104.6 trillion, about $78.5 BILLION. Operating profit reached $62.5 BILLION at an 80% margin. Net profit hit $29.8 BILLION. Long-term deals already cover over HALF its 2027–28 production capacity. Including demand still under discussion, its DRAM and HBM memory supply is effectively SOLD OUT through 2029. The company expects memory SHORTAGES through 2030, with computing and AI demand outpacing supply for years. The stock closed 7.95% lower at $149 last Friday closing amid a broader tech sell-off.

⚡️NEW: $GOOG is in talks with the Pentagon to help secure data for Golden Dome, the $185 BILLION missile defense program, Bloomberg reports. The system would use space-based and ground-based infrastructure to detect, track and intercept ballistic, hypersonic and cruise missiles. Google’s potential role would focus on protecting data feeding military software from cyberattacks and communications disruptions.

🚨North Korea is now blamed for more than 3 of EVERY 4 dollars hacked in crypto. Here's its share of all crypto stolen in hacks each year: 2020: 7% 2021: under 10% 2022: 22% 2023: 37% 2024: 39% 2025: 63% 2026: 85% (so far) In total, its hackers have stolen $12.8 BILLION in crypto since 2017, per TRM Labs. In just nine months of 2025, its hackers stole at least $1.65 BILLION, per 11 governments. That's 3.5 times what North Korea earned from ALL of its legal exports that year. Those governments say the money funds its weapons programs. The FBI also blamed it for the $1.5 BILLION Bybit hack in February 2025. Its hackers work in units run by North Korea's main spy agency, per the US Treasury. The most infamous ones: Lazarus Group: tied by the FBI to the $620 MILLION Ronin hack in 2022 Andariel: one alleged member has a $10 MILLION US bounty over ransomware attacks on hospitals TraderTraitor: the FBI's name for the hackers behind the Bybit, DMM Bitcoin and Binance thefts And it isn't just crypto. Governments have also blamed it for: Sony Pictures: thousands of computers knocked out in 2014 Bangladesh's central bank: $81 MILLION stolen in 2016 WannaCry: about 300,000 computers hit in 150 countries, including Britain's NHS NASA and two US Air Force bases: breached, per a 2024 US indictment US hospitals: hit with ransomware, with one Kansas medical center paying about $100,000 Sanctions keep coming, but North Korea's hackers haven't slowed down.

🚨BREAKING: FBI officially confirms North Korea was behind the $6.3 BILLION attack on Binance. The FBI says North Korea was responsible for stealing more than $6 BILLION in crypto from Binance on or around October 29. It blames the same hacking group it calls TraderTraitor, which it also tied to the $1.5 BILLION Bybit hack. The FBI is urging exchanges and DeFi services to block the hackers' addresses as they try to launder the funds. Binance says its users won't pay for the theft, and it has already covered 90% of the losses ahead of reopening withdrawals on Sunday.

🚨 NEW: Justin Sun holds more $PEPE than any other individual, Arkham reports. His official and Arkham-predicted wallets collectively hold nearly 3% of PEPE’s supply, worth $51.25 MILLION, following massive inflows over the past 10 days. Two withdrawals from Poloniex alone delivered $48.76 MILLION in PEPE on October 17 and 26. Before October 17, Sun held just $267,000 worth. Sun also transferred $77 MILLION in stablecoins to Poloniex between October 15 and 25. Only exchange wallets hold larger balances. His combined 2.82% stake puts him ahead of every other individual holder identified in Arkham’s analysis.

Reddit just showed what AI is doing to the internet. It lost over $7 BILLION in a day after warning Google's AI is cutting its traffic. Its stock closed down 29.2% on Friday, its worst day ever, and is now down 41% in eight straight sessions. The reason came out on its earnings call. CEO Steve Huffman said Google's bots are still reading Reddit's pages as much as ever. But instead of sending people to Reddit, Google's AI Mode now answers their questions directly. He said AI Mode doesn't drive traffic to Reddit, or to anyone else as far as he knows. Reddit lost over 1 MILLION visits a week from search in October. It now warns its daily users could fall by a low double digit percentage this quarter if the decline continues. And it isn't just Reddit. Chegg has lost over 99% of its value since 2021. Stack Overflow's monthly questions fell from over 200,000 at their peak to just 3,862 last December. For over 25 years, Google was how people found the rest of the internet, and that era may now be ending.

🇷🇺BREAKING: Russia, which proposed BANNING crypto in 2022, is opening Bitcoin to ALL investors from December 1. The Moscow Exchange plans to launch Bitcoin, Ethereum and USDT trading on December 1, from 7am to midnight Moscow time, per Izvestia. Russia's central bank pushed for that ban, but a law legalizing regulated crypto trading officially took effect on September 1 instead. Everyday investors must pass a test and face a proposed cap of 300,000 rubles a year per broker. Under the new rules, qualified investors can trade any coin, with no limit.

Remember when we warned the internet was going into LOCKDOWN? October is almost over, and "Black October" has lived up to its name. This is going to be a long one. It started with PHP, the software behind roughly 7 in 10 websites. On October 20, two critical flaws were revealed in it, letting attackers take over servers without logging in. Within 2 hours, Cloudflare saw hundreds of thousands of attack attempts, and soon after, MILLIONS. Governments in the UK, the Netherlands, France, Denmark and Finland took websites offline as a precaution. On October 26, the US cyber agency CISA confirmed the flaws were being exploited and gave federal agencies three days to patch. At the same time, a wave of data breaches hit, and Japan took the worst of it. SourceNext exposed 22.5 MILLION records, Skyticket 14.6 MILLION, Capcom 11.8 MILLION and Burger King Japan 11.2 MILLION. Denmark's population register was breached, exposing data on 8.8 MILLION people. But the real thread running through Black October was AI. Wall Street giants like JPMorgan and Schwab are now blocking outside AI agents, with Schwab's CEO saying a single agent can try to log in "30, 40, 50 times" a week. Attackers also went after AI tools and AI keys, hijacking LiteLLM, downloaded 23 MILLION times a week, and breaching Railway, OpenCode and Fireworks AI. Then came October 29. Binance was hacked for $6.3 BILLION and has already covered 90%, with withdrawals set to reopen on November 1. The same day, Polymarket paused trading after a compromised third party script drained about $2.7 MILLION from its users. Bitcoin is down about 7% for October, heading for its second red October in a row, and Ethereum is down about 16%. These stock markets turned blood red in October: 🇮🇩 Indonesia 🔻16.7% 🇰🇷 South Korea 🔻16.2% 🇧🇷 Brazil 🔻9.9% 🇨🇳 China 🔻6.3% 🇹🇼 Taiwan 🔻5.7% 🇭🇰 Hong Kong 🔻5.4% 🇺🇸 Nasdaq 🔻5.3% 🇸🇬 Singapore 🔻5.3% 🇯🇵 Japan 🔻5.2% 🇪🇸 Spain 🔻4% 🇮🇹 Italy 🔻3.6% 🇪🇺 Euro Stoxx 50 🔻2.2% 🇲🇾 Malaysia 🔻2.2% 🇻🇳 Vietnam 🔻1.5% 🇺🇸 S&P 500 🔻0.9% Intel had its worst day since 1974, and Alphabet its worst since its 2004 IPO, losing about $482 BILLION. Oil touched $110, and US inflation climbed to 3.7%. October tested the internet, global markets and crypto all at once. All three took heavy hits, and all three are still standing. But AI is now at the center of the fight, and that won't end with October.

🚨This is CONCERNING. 12 DeFi websites were hijacked and turned into wallet drainers in just ONE night. Blockaid found the sites "actively serving" Step Drainer, a kit that fakes normal-looking wallet pop-ups to trick visitors into approving transfers. Step Drainer is sold to scammers as a ready-made kit and works across more than 20 blockchains. Once a victim approves, it goes after their most valuable tokens first. Researchers have even seen its prompt show a fake "+500 USDT" so the approval looks like money coming in. Affected projects include Flap, Kintsu, StonkFun, Pickle Finance, Echelon, Origami Finance, FluxBeam, StakePoint, SupSwap, Longbow, Shprd Finance and APEX. About $138,000 has been traced so far, and that excludes losses on Solana and Aptos. All 12 domains were registered with Name(.)com, though how they were hijacked is still unconfirmed. Name(.)com's only public response so far has been asking users to fill out its abuse form, per The Block. Not every affected team has confirmed its site is clean yet.

⚠️If you use Gmail, read this. Scammers are hiding their messages inside REAL Google security alerts, so the emails pass the checks that normally catch fakes. They type the scam text into the name of a Google app password, which makes Google send out a genuine, signed alert containing it. Then they forward that alert to you. One version flagged by the University of Michigan carried a fake $399 McAfee invoice and a phone number to call. The real Google buttons in the email just open your own account page, where nothing looks wrong because nothing was breached. That dead end is deliberate, leaving the scammer's phone number as the only "fix" left. If an alert like this lands in your inbox, treat any phone number, reply request or button inside it as a red flag. Even a genuine Google sender address is no longer proof that an alert is safe.

🚨MASSIVE: Wall Street legend Stan Druckenmiller backs the company bringing Hyperliquid-powered futures to the U.S In his first-ever X post, he disclosed an investment in trade[XYZ], which is partnering with NYSE owner ICE to bring Hyperliquid-powered, 24/7 perpetual futures to the United States. “I am excited to be an investor in trade(xyz),” he wrote, adding that he plans to use the product to “enhance my investment process.” Druckenmiller previously ran George Soros’s Quantum Fund and was a mentor to Treasury Secretary Scott Bessent. The proposed markets would cover crypto, equities, commodities and currencies. Hyperliquid supplies the infrastructure, trade[XYZ] develops the markets, and ICE operates the regulated exchange and clearing structure. U.S. access remains subject to regulatory approvals but one of Wall Street’s best-known investors is already backing the business and intends to become a customer.

We are living in the Golden Age of Hacks. Attackers are increasingly using AI to turn overlooked flaws into exploitable weaknesses. Binance’s $6.3 BILLION loss marked the largest crypto theft ever recorded. Now, even Chainalysis, one of the firms helping trace the stolen funds, has disclosed a breach of its own. October’s damage stretches much further: - Ledger reseller supply-chain attack: roughly $93 MILLION. - CoinDCX: $16 MILLION. - Bloom Trading Bot: approximately $953,000. - Railway: customer secrets, including API keys and database credentials, potentially exposed. Even before Binance, Blockworks reported more than 300 crypto exploits this year, up 111% year over year. Part of what makes this wave, dubbed “Black October,” different is AI’s ability to uncover weaknesses in software already used everywhere. Researchers used GPT-5.6 Sol to identify a critical PHP flaw. Railway says preliminary evidence suggests its attackers used models with safeguards removed and substantial computing resources. AI’s role is not established in every incident, but its ability to help discover and exploit weaknesses is becoming harder to ignore. The internet as we know it is entering a new era, the golden age of hacking.