Polygon team's associated addresses have transferred a total of 20 million POL, worth approximately $3.5 million

According to HTX market data, Ethereum’s rebound sentiment was stronger than Bitcoin’s over the past 24 hours. The ETH/BTC exchange rate rose 0.79% to 0.02921. Ethereum is currently trading at $2,273, with a 24-hour gain of 1.28%; Bitcoin is at $77,816, up 0.51% in the same period. The total market capitalization of cryptocurrencies has rebounded to $2.705 trillion, with a 24-hour increase of 0.2%, and 24-hour trading volume stands at $682.063 billion.

SOON Foundation announced that abnormal withdrawal activities were detected on two cross-chain bridges—svmBNB and SOON Mainnet—at approximately 11:00 UTC on October 31, 2026. The foundation identified the anomaly at 14:00 UTC the same day and immediately shut down the affected bridge services. Officials noted that the cross-chain bridges have now been secured, and an in-depth investigation is underway. Until the probe is completed, both bridges will remain suspended, with additional updates to be released as the investigation progresses. The announcement has not yet disclosed the scale of assets involved in the abnormal withdrawals or specific losses.

US President Donald Trump has repeatedly stated publicly recently that he gets along well with North Korean leader Kim Jong Un, emphasizing that maintaining good relations with nuclear-armed countries is a wise move. This approach aligns with his summit diplomacy toward North Korea during his first term and matches his current second-term preference for keeping communication channels open with leaders of nuclear-armed states. Trump responded to the Binance hack incident today, noting it is currently unclear whether the attack on Binance was carried out by North Korea. If a link to North Korea is ultimately confirmed, the U.S. will engage with Pyongyang. However, the FBI previously issued a statement formally attributing the October 29, 2026 Binance security breach to North Korea, with the virtual assets involved valued at over $60 billion. The FBI has named this North Korean malicious cyber operation "TraderTraitor". If the U.S. pursues negotiations, possible steps include using third parties, intelligence channels, or public pressure to demand the freezing or return of the assets. Trump’s past approach to North Korea has leaned toward "direct communication + personal relations"—whether this will hold in this case remains to be seen. Binance’s connections to Trump family-related businesses (such as stablecoins) may also lead the White House to pay closer attention to the case. Meanwhile, the outlook for a formal U.S.-North Korea summit remains uncertain: Trump previously expressed a desire to meet within the year, but that has cooled recently, and North Korea has not responded actively. If the FBI’s attribution is confirmed and the stolen funds are used for nuclear weapons or missile programs (the U.S. has long accused North Korean hackers of funding its weapons programs), this could become a new issue or friction point in U.S.-North Korea communications.

THORChain co-founder Chad Barraford stated in a post that all information held by THORNode operators is public and accessible in real time, meaning law enforcement does not need to obtain such information via subpoenas. He noted this is the ideal scenario for investigations. Previously, the FBI, U.S. Secret Service (USSS), and Criminal Investigation Division of the U.S. Internal Revenue Service (IRS-CI) called on THORNode operators, RPC node operators, instant swap platforms, and DeFi service providers to block transactions involving addresses linked to North Korean hacker group TraderTraitor, as well as fund flows originating from these addresses. The request is tied to the $6 billion+ Binance asset theft incident.

Chainalysis stated in a recent publication that THORChain’s operations were disrupted by an Ethereum chain reorganization incident, which delayed the money laundering process for stolen funds from the Binance hack. The chain reorganization led THORChain to incorrectly issue duplicate refunds to a user who had deposited 10 ETH, triggering an emergency protocol pause that temporarily blocked all cross-chain swaps for all users—including money launderers associated with the North Korean hacking group. Chainalysis noted that prior to THORChain’s service resumption, attackers and other users were unable to perform swaps via most of its cross-chain bridges. Earlier, the U.S. Federal Bureau of Investigation (FBI), U.S. Secret Service (USSS), and IRS Criminal Investigation (IRS-CI) jointly called on THORNode operators, RPC node operators, instant swap platforms, DeFi service providers, and other virtual asset service providers to block transactions with addresses linked to the Binance hack, as well as fund flows originating from these addresses. The announcement also disclosed wallet addresses directly or closely tied to the relevant North Korean hacking activities.

According to monitoring by an AI analytics tool, a VVV whale with a cost basis as low as $3.77 has deposited tokens to Coinbase after a 19-day gap. The address transferred 100,000 VVV tokens roughly 3 hours ago, valued at around $2.32 million. Data shows that since June 2026, this address has deposited a total of 663,374 VVV tokens to the exchange, with an average cost of approximately $21.53. If all these tokens were sold, total profit would be around $11.786 million, representing a return of roughly 471.2%. Since June 2026, the address has reportedly offloaded VVV tokens worth about $14.28 million, though on-chain deposit activity does not directly confirm the tokens have actually been sold.