A wave of security incidents and geopolitical activity shaped markets on November 1-2, 2026. The week saw renewed debate over attribution for a major exchange theft, a fresh breach at a Brazilian platform, a large loss linked to an EU entity, continued accumulation by corporate treasuries, and limited U.S. strikes on Iran’s Qeshm island that added geopolitical uncertainty.
Binance theft and North Korea’s denial
On November 2, Kim Yo Jong, sister of North Korean leader Kim Jong Un, publicly rejected the FBI’s attribution of the $6.3 billion theft from Binance to a North Korean-linked group. Speaking via KCNA, she described the claim as a political provocation and hinted, without providing evidence, that the United States could be responsible. Independent investigators including TRM Labs and other firms have linked the incident to a group named "TraderTraitor," citing behavioural similarities with prior thefts, but the attribution remains disputed.
New incident at Mercado Bitcoin
Brazil’s largest crypto exchange, Mercado Bitcoin, suspended deposits and withdrawals on November 2 after detecting a security incident. The company said no customer funds were affected and no data had been leaked. Security firm Hypernative reported detecting suspicious transfers totaling more than $40 million across at least 10 blockchains, a figure the exchange has not confirmed. Tether also froze over 4.5 million USDT in response to activity tied to the incident.
Large loss at an EU entity traced into ETH and Monero
Researcher ZachXBT reported that an unnamed entity within the European Union lost over $106 million on November 1, held in USDC and USDT on centralized exchanges. According to the account, some of the stolen funds were converted into Ethereum (ETH) and privacy coin Monero using instant exchange services and bridges. ZachXBT stated with high confidence that the Lazarus Group was not responsible for this theft.
Treasury buyers add Bitcoin and Ethereum
Several publicly disclosed treasury-focused firms continued to add crypto to their holdings in the same period. Strategy purchased 811 BTC for roughly $65.5 million between October 26 and November 1, bringing its total holdings to 849,327 BTC, and repurchased STRC shares valued at about $208.2 million. Strive acquired 124 BTC to reach a total of 43,124 BTC, placing it close to Metaplanet’s reported 44,000 BTC. BitMine added 8,573 ETH, lifting its total to 6,060,506 ETH. Market commentator Tom Lee noted that ETH fell around 4% following the Binance-related attack, compared with an 8% drop on the day of the Bybit theft.
U.S. strikes on Iran raise energy and election concerns
On November 2, U.S. forces carried out limited strikes on Qeshm island in the Strait of Hormuz; officials described the actions as defensive. The Wall Street Journal reported that similar strikes had been carried out covertly in the past. The strikes came in a fluid diplomatic context: earlier the same day, then-President Trump said an agreement with Iran could be reached; Ohio Senator JD Vance reported progress; and Iranian official Abbas Araghchi referenced indirect talks facilitated by Qatar and Pakistan. Oil prices rose in early Asian trading on November 3 ahead of U.S. midterm elections.
What this means for the market
The incidents underscore persistent security challenges across both centralized and cross-chain infrastructure, with high-value transfers, frozen stablecoins, and disputed attribution complicating incident response. At the same time, corporate treasury purchases of BTC and ETH indicate continued institutional accumulation. Meanwhile, limited military strikes and diplomatic signals around Iran added a geopolitical risk premium that showed up in oil markets and broader sentiment.
Readers should note the producer’s disclaimer: names or details in the episode may contain errors due to dyslexia, and the content is informational only, not investment advice. CRYPTONEA 24 may have financial relationships with entities mentioned.