In its initial report on the Oct. 29 theft, the exchange describes a months-long campaign that ended with a stolen deployment token and an Ethereum EIP-7702 trick on an MPC hot wallet.

No institution has come forward, and ZachXBT says funds kept leaving exchanges after his first alert.

The Brazilian exchange said it has already blocked $11 million with partners including Tether and Circle, and that deposits and withdrawals stay suspended until security is fully restored.

A new snapshot covering more tokens is set for Nov. 4, while the exchange says the last 5% of affected funds sits in less liquid assets.

The state’s Bureau of Securities withdrew the order without ruling on its merits, and Coinbase’s Molly Abraham named four more states as “next.”

The proxy-voting company is one of four transfer agents the New York Stock Exchange added to its blockchain-based trading venue, which still needs regulatory approval.

Trezor’s Nov. 1 update lets most of its hardware wallets take passphrases up to 128 characters, and the company opened the announcement with the Coldcard seed failure.

Ubuntu had not shipped a patched kernel for CVE-2026-98432 by Monday afternoon. The flaw can let a remote attacker run code on a server, and AWS and Red Hat say the workarounds available until a fix lands don’t fully protect against it.

Answering the FBI’s TraderTraitor finding, Pyongyang said a look at who ends up with any recovered Binance crypto may offer “a clue about who is behind the hacking incident.”

THORChain says the refund flaw a one-block Ethereum reorg exposed could let attackers pull funds from its vaults after future reorgs, and most of its chains are still halted.