Today’s roundup covers a range of security and governance developments: the FBI identified a North Korean actor behind a major Binance theft, multiple DeFi project websites were hijacked, Chainalysis disclosed a client-data exposure, Zcash’s grants committee proposed a major treasury reallocation, and the Bitcoin white paper reached its 18th anniversary.
FBI links TraderTraitor to Binance theft
On October 31, 2026 the FBI attributed the theft of more than $6 billion from Binance to a North Korean group it calls “TraderTraitor.” The agency published a list of addresses that it urged THORChain nodes, RPC providers, exchanges and DeFi services to block; the list contains over 600 Ethereum addresses, just under 20 Bitcoin addresses and one Solana address. According to the FBI, the stolen funds are primarily being converted into ETH. Binance said on the same day that it had replenished 90% of the stolen assets, up from roughly 80% the previous day, and reiterated a target of resuming withdrawals on November 1.
DeFi websites hijacked using 'Step Drainer' malware
On the evening of October 30, 2026 hackers compromised the websites of twelve decentralized finance projects, including Flap, Kintsu and Pickle Finance, deploying so-called “Step Drainer” malware. Blockaid reported that the malware tricks site visitors into approving transfers from their own wallets. All twelve affected domains were registered through Name.com. Investigators have traced about $138,000 in stolen funds to three wallets on EVM-compatible chains. Some projects, Kintsu and Origami Finance among them, noted that the issue appears to be linked to Vercel hosting, and emphasized that their smart contracts themselves were not altered.
Chainalysis reports client-data exposure but no case files accessed
Chainalysis announced on October 30, 2026 that an attacker using AI agents accessed client names, email addresses and job roles. The company described the exposed information as non-sensitive and said there was no evidence the attacker accessed case files or passwords. Chainalysis said it has engaged external experts and is using language models to help identify system vulnerabilities as part of the response.
Zcash grants committee proposes major treasury reallocation
On October 29, 2026 the Zcash Community Grants committee proposed reallocating 36,200 ZEC, reported as worth about $46 million, from its treasury toward future mining rewards, while relinquishing roughly 62,000 ZEC in future funding; the combined total was presented as approximately $124 million. The proposal would extend funding through the 2032 halving instead of ending at the conclusion of 2028. The plan drew criticism: Mert Mumtaz of Helius described it as insufficient and Tyler Winklevoss questioned the committee’s accountability.
Bitcoin marks 18th anniversary of the white paper
October 31, 2026 marked the 18th anniversary of the Bitcoin white paper, first published by Satoshi Nakamoto on October 31, 2008. In an opinion piece concurrent with the anniversary, Onramp CEO Michael Tanguma argued that small businesses still bore costs associated with bailouts and suggested entrepreneurs could safeguard part of surplus capital by holding it in Bitcoin. The piece noted historical business closures in 2008 and 2024 as context.
What these stories show about crypto infrastructure and governance
Taken together, the events of the past days highlight continuing risks across custody, web infrastructure and governance. The FBI’s address list and Binance’s replenishment effort underscore how law enforcement coordination and exchange actions interact during large thefts. Website compromises demonstrate that decentralised application front ends and hosting relationships remain attack surfaces even when contracts are intact. The Chainalysis disclosure shows that data holdings by service providers can be targeted without necessarily exposing case work or credentials, while the Zcash proposal reflects ongoing debate in token-governed projects about how to balance treasury support and long-term incentives.
CRYPTONEA 24 will continue to monitor remediation efforts, any changes to withdrawal timelines at exchanges, and community responses to governance proposals as these stories develop.