Coinbase Research: Bitcoin Breaks Key Support, Market Possibly in Early Stage of Long-term Downtrend

According to Whale Alert monitoring, 1077 BTC were transferred from an unknown wallet to the OKX exchange, valued at approximately $84.72 million.

According to Yonhap News Agency, a report released by Microsoft Threat Intelligence on the 29th reveals that North Korean hacker groups are leveraging artificial intelligence (AI) to accelerate cyberattacks targeting South Korean users, expanding their tactics beyond customized phishing documents, fake job postings, and identity spoofing to include malicious code development and software supply chain attacks. Microsoft assessed the AI adoption levels of eight North Korea-related hacker groups: three have reached the highest "operationalized" stage, integrating AI into their daily attack workflows; four are in the "acceleration" phase, and one is in the "expansion" phase. The report notes that some groups generated over 100 targeted PDF lure documents for different targets between August and September this year, with cases of producing dozens of documents in just minutes. Between June 8 and 12, fake job offers were sent to AI, blockchain, and cybersecurity professionals using three spoofed companies. Additionally, Microsoft analysts found that North Korean hackers may be using AI programming tools like Cursor to assist with code generation, debugging, and evading detection. North Korea's Reconnaissance General Bureau-affiliated groups "Onyx Sleet" (referred to as Andariel by South Korea) and "Pearl Sleet" have been using the open-source AI penetration testing framework ARTEX in real-world operations since late October. Microsoft concluded that while these groups have boosted attack speed and efficiency through AI, they have not yet achieved fully autonomous attacks, and recommended that enterprises strengthen identity verification for job applicants, phishing protection, and malicious code detection.

Reserve released a statement regarding the Binance hot wallet breach, noting that the stolen RSR tokens have been sold, Reserve’s contracts remain unaffected, and RSR holders do not need to take any action. The attacker stole approximately 3.38 billion RSR from Binance, swapping all of it for 1,856 ETH on Uniswap v3, valued at around $4.1 million.

According to OnchainLens monitoring, trader Long Loyalist deposited 4.9 million USDC into Hyperliquid approximately one hour ago, and placed a buy order for around 9,630 ETH (valued at roughly $20 million). The trader currently holds about 4,860 ETH in long positions (worth ~$10.94 million), with unrealized profit and loss of approximately -$4.63 million across 39 open positions, and historical profit and loss of roughly -$4.29 million.

According to on-chain intelligence platform Arkham's monitoring, addresses linked to the so-called "Binance Hacker" have just transferred approximately $38.82 million worth of ETH to a new wallet. Arkham noted that it remains to be seen whether the funds will flow to mixing protocol Tornado Cash. Monitoring shows that after this transfer, the hacker address still holds roughly $1.12 billion worth of ETH on-chain. Arkham has opened a tracking entry for this address on its platform to facilitate continuous monitoring of subsequent fund movements.

Per OnchainLens monitoring, a Binance hacker address has just transferred approximately 17,260 ETH (valued at around $38.82 million) to a new wallet, intending to launder the funds through mixers such as Tornado Cash. The attacker still holds roughly 480,720 ETH (worth ~$1.08 billion) and cannot be frozen. New wallet: 0x03b....020ea.