Today’s crypto headlines were dominated by the fallout from a major Binance incident and continued laundering activity, a high‑severity Linux vulnerability affecting Cardano stake pools, and Polygon’s move to extend its payments and custody stack to Solana.
Binance restarts withdrawals as outflows surge
Binance resumed withdrawals at 06:00 UTC on November 1, 2026, after the incident that triggered large customer movements. Initial figures showed $4.6 billion in withdrawals against $1 billion in deposits, while DeFiLlama recorded net outflows of $5.8 billion over a 24‑hour period. Binance said this activity is stabilizing and represents a small fraction of roughly $171 billion in client assets held across 15 networks, consisting primarily of USDT, USDC and Bitcoin.
Law enforcement and blockchain intelligence firms reported progress on tracking and seizing stolen funds. Elliptic confirmed that $2.85 billion has been frozen or seized, which it says is about 44% of the $6.43 billion it estimates was taken. Analyst SomaXBT estimated hackers laundered roughly $242 million via the Tron network over two days, with about $140 million routed through bridges and cross‑chain services including Relay, THORChain, Chainflip and Symbiosis following Tether’s freezing of 378.7 million USDT. THORChain co‑founder Chad Barraford has not indicated whether addresses identified by the FBI will be blocked.
Ongoing laundering highlights bridge and stablecoin risks
The incident underscored persistent vulnerabilities in cross‑chain bridges and the role of stablecoins in large value transfers. Tether’s action to freeze specific USDT holdings was part of tracing and containment efforts, while reported use of multiple bridges and services to move funds illustrates how attackers exploit fragmentation across networks to obfuscate flows. The reporting points to continued enforcement and chain‑analysis activity as authorities and firms attempt to recover assets.
Cardano warns of high‑severity Linux vulnerability
On October 30, 2026, the Cardano team warned operators about a high‑severity Linux vulnerability, CVE‑2026‑98432, that affects stake pool operators and could allow attackers to disrupt or take control of network nodes. The vulnerability concerns pools that collectively hold about 21.5 billion ADA in stake, roughly 58% of the circulating supply. Cardano noted that ADA remains in owners’ wallets and can be spent, and that no attacks on pools have been reported to date. The eventual impact depends on whether operators apply the required security updates.
The notice recalled a prior incident last November in which a different bug temporarily caused Cardano to split into two separate chains, highlighting the operational risks that infrastructure software vulnerabilities can pose to proof‑of‑stake networks. Stake pool operators are the key actors responsible for implementing fixes to preserve network availability and security.
Polygon extends payments stack to Solana after Tron expansion
Polygon Labs announced on October 29, 2026, that it is extending its Open Money Stack, a package that connects bank accounts, crypto wallets and payments, to the Solana network. The expansion follows Polygon’s recent rollout on Tron. Businesses on Solana will be able to accept funding via banks, cards and cash, provide wallets to customers, and process payments, with Kira named among the first clients. Polygon’s acquisition of Coinme gave it a portfolio of money transmitter licences and exemptions across U.S. states, which supports its payments push.
Network activity figures provide context for the move: Token Terminal showed Solana recorded about $5.76 trillion in stablecoin transfers between January 1 and October 27, 2026, compared with $6.94 trillion for Tron. Polygon’s integration aims to connect traditional payment rails to ecosystems with large stablecoin volumes.
The day in brief: confidence, infrastructure and payments
Market and user confidence is being tested by large withdrawals and ongoing laundering after the Binance incident, even as firms and authorities report asset freezes and seizures. At the same time, the Cardano vulnerability serves as a reminder that node and OS‑level bugs can threaten network operations unless promptly patched. Finally, Polygon’s expansion to Solana reflects continued industry focus on bridging on‑ and off‑ramp infrastructure and stablecoin payments across multiple chains.
This coverage is informational and not investment advice. CRYPTONEA 24 notes sources may contain name or reference errors due to the creator’s disclosed dyslexia.