If tensions in the Middle East escalate into a broader conflict, markets could face a serious risk-off move.
Oil would likely be one of the first assets to react sharply higher, while equities and crypto could come under heavy pressure.
For Bitcoin, I wouldn’t rule out a move toward $62K or even lower if liquidity dries up and fear takes over.
This is exactly why risk management matters more than conviction.
Geopolitics can change the market narrative in minutes. Stay flexible. 👀
Oil would likely be one of the first assets to react sharply higher, while equities and crypto could come under heavy pressure.
For Bitcoin, I wouldn’t rule out a move toward $62K or even lower if liquidity dries up and fear takes over.
This is exactly why risk management matters more than conviction.
Geopolitics can change the market narrative in minutes. Stay flexible. 👀
🔥1
Live trading - NY session. join
https://youtube.com/live/oc5LrSU-NaY?feature=share
https://youtube.com/live/oc5LrSU-NaY?feature=share
YouTube
Live XAUUSD/GER40/NQ/Forex - GOLD - My Trading Strategy
This stream showcases a professional trader, formerly a portfolio manager
WTF Trading is an Exclusive Trading Academy founded by a group of Private Portfolio Managers. We have a winrate of 72,4 % while maintaining reasonable Risk-Management (this is what…
WTF Trading is an Exclusive Trading Academy founded by a group of Private Portfolio Managers. We have a winrate of 72,4 % while maintaining reasonable Risk-Management (this is what…
🔥1
AlmenioTrader
Live trading - NY session. join https://youtube.com/live/oc5LrSU-NaY?feature=share
1 b/e and 1 tp during today’s stream
🔥2
Forwarded from Watcher Guru
BREAKING: World's largest crypto exchange Binance hacked with over $5.6 billion stolen:
• $1.45 billion $BTC
• $875 million $ETH
• $234 million $TRX
• $50 million $XAUT
• $1.57 billion $USDT
• $823 million $USDC
• $75 million $WBETH
• $88.5 million $RLUSD
+ $447.5 million additional cryptocurrencies
This is the largest hack in crypto history.
@WatcherGuru
• $1.45 billion $BTC
• $875 million $ETH
• $234 million $TRX
• $50 million $XAUT
• $1.57 billion $USDT
• $823 million $USDC
• $75 million $WBETH
• $88.5 million $RLUSD
+ $447.5 million additional cryptocurrencies
This is the largest hack in crypto history.
@WatcherGuru
🔥2
On October 29, 2026, Binance suspended withdrawals during a $6.3 billion attack. However, the attacker’s authorization to control assets from one of the exchange’s major Ethereum wallets remained active for more than 90 minutes afterward.
This is the largest theft in the history of the crypto industry — more than four times the size of the Bybit hack in February 2025.
Binance’s preliminary investigation points to a compromised engineer’s laptop, which may have allowed the attacker to access the exchange’s internal withdrawal service. Binance says it has found no evidence that private keys were leaked.
How the attacker obtained valid signatures remains unclear. The attacker may have copied a key, or alternatively, manipulated Binance’s legitimate signing infrastructure into approving malicious instructions.
According to Blockaid, at 20:20 UTC a transaction containing 50 signed authorizations for Binance 14 — one of the exchange’s major hot wallets — was submitted to the Ethereum network.
The authorizations covered a sequence of consecutive transaction nonces. Meanwhile, the wallet continued processing customer withdrawals, causing its nonce counter to keep increasing.
An authorization only becomes valid when its nonce matches the wallet’s current nonce at the moment the transaction is included in a block. In this case, the attacker’s programmed sequence was successfully executed.
Once activated, the authorization allowed the attacker to transfer all assets from the wallet and potentially capture subsequent incoming funds without requiring additional signatures.
This type of delegation is enabled by EIP-7702, a feature introduced to Ethereum with the Pectra upgrade in May 2025.
EIP-7702 allows a standard externally owned account, controlled by a private key, to temporarily assign smart-contract code to itself and execute that code as if it were part of the wallet.
The signatures show that someone obtained authority that the Ethereum network recognized as valid.
The same on-chain footprint could have been produced either by a copied private key or by Binance’s legitimate signing system being manipulated into approving malicious instructions.
On other blockchains, the stolen funds were transferred through ordinary signed transactions. TRM Labs believes this points to a compromise of Binance’s hot-wallet signing infrastructure.
The authorization was revoked shortly after midnight UTC on October 30, almost four hours after it had first been installed.
TRM also recorded another outflow at 23:56 UTC on October 29, shortly before the authorization was revoked.
This means that even after Binance had stopped its withdrawal service, the attacker still retained the ability to move assets directly through the blockchain.
The attack also affected Aave.
One of the attacker’s wallets deposited 60 million USDT into the protocol and borrowed approximately $44.6 million worth of wrapped Ether (WETH).
By using stablecoins — which can potentially be frozen by their issuer — as collateral, the attacker was able to obtain an asset that cannot be frozen in the same way.
In response, Aave disabled new deposits and borrowing across nearly 300 markets spanning two versions of the protocol.
TRM Labs says with high confidence that the theft is linked to the North Korean group TraderTraitor. Chainalysis has reportedly reached the same conclusion.
Binance has not yet publicly identified the attackers.
There is currently no public evidence that a group of autonomous AI agents was involved in the attack.
Binance says that, with the help of partners, approximately $3 billion has already been frozen.
The exchange has also stated that all losses will be covered using its SAFU insurance fund and Binance’s own reserves.
The investigation will now need to determine exactly how the attacker gained the ability to sign these authorizations — and why those permissions remained active even after withdrawals were suspended.
This is the largest theft in the history of the crypto industry — more than four times the size of the Bybit hack in February 2025.
Binance’s preliminary investigation points to a compromised engineer’s laptop, which may have allowed the attacker to access the exchange’s internal withdrawal service. Binance says it has found no evidence that private keys were leaked.
How the attacker obtained valid signatures remains unclear. The attacker may have copied a key, or alternatively, manipulated Binance’s legitimate signing infrastructure into approving malicious instructions.
According to Blockaid, at 20:20 UTC a transaction containing 50 signed authorizations for Binance 14 — one of the exchange’s major hot wallets — was submitted to the Ethereum network.
The authorizations covered a sequence of consecutive transaction nonces. Meanwhile, the wallet continued processing customer withdrawals, causing its nonce counter to keep increasing.
An authorization only becomes valid when its nonce matches the wallet’s current nonce at the moment the transaction is included in a block. In this case, the attacker’s programmed sequence was successfully executed.
Once activated, the authorization allowed the attacker to transfer all assets from the wallet and potentially capture subsequent incoming funds without requiring additional signatures.
This type of delegation is enabled by EIP-7702, a feature introduced to Ethereum with the Pectra upgrade in May 2025.
EIP-7702 allows a standard externally owned account, controlled by a private key, to temporarily assign smart-contract code to itself and execute that code as if it were part of the wallet.
The signatures show that someone obtained authority that the Ethereum network recognized as valid.
The same on-chain footprint could have been produced either by a copied private key or by Binance’s legitimate signing system being manipulated into approving malicious instructions.
On other blockchains, the stolen funds were transferred through ordinary signed transactions. TRM Labs believes this points to a compromise of Binance’s hot-wallet signing infrastructure.
The authorization was revoked shortly after midnight UTC on October 30, almost four hours after it had first been installed.
TRM also recorded another outflow at 23:56 UTC on October 29, shortly before the authorization was revoked.
This means that even after Binance had stopped its withdrawal service, the attacker still retained the ability to move assets directly through the blockchain.
The attack also affected Aave.
One of the attacker’s wallets deposited 60 million USDT into the protocol and borrowed approximately $44.6 million worth of wrapped Ether (WETH).
By using stablecoins — which can potentially be frozen by their issuer — as collateral, the attacker was able to obtain an asset that cannot be frozen in the same way.
In response, Aave disabled new deposits and borrowing across nearly 300 markets spanning two versions of the protocol.
TRM Labs says with high confidence that the theft is linked to the North Korean group TraderTraitor. Chainalysis has reportedly reached the same conclusion.
Binance has not yet publicly identified the attackers.
There is currently no public evidence that a group of autonomous AI agents was involved in the attack.
Binance says that, with the help of partners, approximately $3 billion has already been frozen.
The exchange has also stated that all losses will be covered using its SAFU insurance fund and Binance’s own reserves.
The investigation will now need to determine exactly how the attacker gained the ability to sign these authorizations — and why those permissions remained active even after withdrawals were suspended.
🔥2👍1
With EIP-7702, hot wallets now have a new type of blockchain-level permission that can remain active until it is explicitly revoked.
For exchanges, this incident highlights the need to secure the entire chain of asset access — from the moment a signature is issued to the on-chain revocation of permissions when an attack is detected.
For exchanges, this incident highlights the need to secure the entire chain of asset access — from the moment a signature is issued to the on-chain revocation of permissions when an attack is detected.
🔥2👍1
Going Live in 5 minutes for Weekly watchlist building session
https://youtube.com/live/OwsE2lpP06s?feature=share
https://youtube.com/live/OwsE2lpP06s?feature=share
YouTube
Live XAUUSD/GER40/NQ/Forex - GOLD - My Trading Strategy
This stream showcases a professional trader, formerly a portfolio manager
WTF Trading is an Exclusive Trading Academy founded by a group of Private Portfolio Managers. We have a winrate of 72,4 % while maintaining reasonable Risk-Management (this is what…
WTF Trading is an Exclusive Trading Academy founded by a group of Private Portfolio Managers. We have a winrate of 72,4 % while maintaining reasonable Risk-Management (this is what…
🔥3👍1
My trades and withdrawals for the past couple weeks , most trades were taken live on streams
🔥3❤1👍1
Live trading - NY session , join
https://youtube.com/live/vb2iOvjIfac?feature=share
https://youtube.com/live/vb2iOvjIfac?feature=share
YouTube
Live XAUUSD/GER40/NQ/Forex - GOLD - My Trading Strategy
This stream showcases a professional trader, formerly a portfolio manager
WTF Trading is an Exclusive Trading Academy founded by a group of Private Portfolio Managers. We have a winrate of 72,4 % while maintaining reasonable Risk-Management (this is what…
WTF Trading is an Exclusive Trading Academy founded by a group of Private Portfolio Managers. We have a winrate of 72,4 % while maintaining reasonable Risk-Management (this is what…
🔥2👍1
AlmenioTrader
Ger40 looks bearish for at least 1% move down
Done , now we have to wait for clear picture. Market is unpredictable atm
🔥2👍1