

Quick summary
Binance hack used fake job interview malware, prompting $4.72 billion in net withdrawals
Democrats projected to control both US chambers, making crypto rules reliant on Democratic votes
NYSE recruits major transfer agents for planned tokenized securities platform covering most S&P 500
Bitcoin trades near $78,000 above long-term averages as ETFs see continued net outflows
Bitcoin traded at $78,077 at about 07:45 UTC on November 4, 2026, 38% below its $126,156 all-time high, after a November 3 close of $77,406. Price is still working through the range mapped in the Coinjuice LIVE session. The price did not move much through a night of election results. Meanwhile, custody trust is being repriced while institutions keep building rails that depend on it.
Binance Breach: A Fake Job Interview Opened a Months-Long Campaign
The November 2 Read covered the reopening and the first $3.64 billion of net withdrawals. New disclosures show how the attackers got in, and the withdrawal count has kept climbing:
The entry point: Binance said an engineer was approached in September through a legitimate job platform, then told to download a coding assignment carrying malware. BBC and TechTarget report the malware used obfuscation to evade endpoint detection.
The longer timeline: Binance also disclosed a tampered Homebrew incident from June, and co-CEO Richard Teng described a campaign “built over many months.”
The path to the wallet: On October 20, the attackers used a compromised device and internal AI tools to reach two other engineers’ devices and find a deployment token, per TechTarget. On October 29 they exploited EIP-7702 to gain execution permissions over a hot wallet, per CoinDesk.
The withdrawals: Customers had withdrawn a net $4.72 billion since the November 1 reopening as of 11:28 UTC on November 3, per CoinDesk. That is up from $3.64 billion over the first 9.5 hours.
The size of the loss: CoinDesk has reported the theft at both $6.3 billion and $6.4 billion but neither figure is confirmed final. Both reports put about $2.85 billion frozen or seized, and Binance says about 98% of affected tokens have been replenished with company funds.
The attribution dispute: North Korea denied involvement through state media. Elliptic said its on-chain evidence supports the FBI’s attribution to TraderTraitor, while AMLBot noted that wallet analysis can link addresses to one actor but cannot prove state sponsorship.
Separate incidents: Brazil’s Mercado Bitcoin puts its own loss at about $38 million, with $11 million frozen and all customer losses covered. CoinDesk says there is no public evidence linking it to the Binance hack. ZachXBT has flagged a suspected, unconfirmed $106 million loss at an unnamed EU entity and says he is highly confident it was not Lazarus.
Blue Congress: Crypto Rules Now Need Democratic Votes
The midterm result changes who writes the rules from January:
The outcome: NBC News, CBS News and AP project Democratic control of both the House and the Senate.
The Banking gavel: American Banker reports Elizabeth Warren will likely chair the Senate Banking Committee, which means SEC nominees will need Democratic support.
The Agriculture gavel: The Block notes Senate Agriculture holds jurisdiction over digital assets and prediction markets, and Sherrod Brown could chair it.
Spending did not decide Ohio: Brown won his Senate race after the crypto industry spent about $63 million opposing him, per CoinDesk.
A new starting point: CoinDesk notes Bitcoin traded about 5.2% above its 200-day simple moving average on election day. In 2014, 2018 and 2022 it sat about 35%, 9% and 22% below it.
History as context, not forecast: DWF Labs’ Martin Lee says the first months after a midterm have historically been choppy, though Bitcoin was higher 12 months later every time. That record covers three elections. For the calendar backdrop, see Coinjuice’s Bitcoin November seasonality data.
Tokenization Rails: Institutions Keep Building Through the Doubt
While depositors questioned one custodian, institutional builders kept laying track:
NYSE roster: Broadridge, Computershare, Equiniti and Superstate join Securitize and tZERO as transfer agents, the firms that keep a company’s official record of who owns its shares, for the NYSE’s planned tokenized securities platform. The first three together keep those records for nearly 5,000 listed companies, including almost 99% of the S&P 500. The platform has not launched, and 24/7 trading and stablecoin funding remain subject to regulatory approval.
Onchain voting: Broadridge will also provide on-chain shareholder voting through supported digital wallets, brokerages or its ProxyVote system.
Issuer pushback elsewhere: CoinDesk’s November 3 tally shows 49 of the 62 companies first picked for the separate OKX–ICE venue have objected, about 79%. Amazon, Tesla, SpaceX, Netflix, SoFi and Lam Research were the latest. The remaining 13 have not disclosed an objection, which is not the same as an endorsement.
Bitcoin yield inside custody: BitGo launched BTC rewards through Stacks for eligible institutions. The BTC stays timelocked in custody, and participation requires STX worth 5% of the staked BTC.
A UAE treasury model: Standard Asset Company, announced October 27, opened its Abu Dhabi Global Market headquarters for an anticipated $1.5 billion strategy pairing a bitcoin reserve with UAE hotels and branded residences. Coinbase Asset Management is the exclusive bitcoin manager. The company has not disclosed how much bitcoin it holds or how the $1.5 billion splits.
A slowing corporate stack: Coinbase holds 18,000 BTC. Coinbase added 643 BTC in Q3, against 819 in Q2 and 1,103 in Q1.
ETF Flows: IBIT Leads a Third Straight Outflow Session
ETF | 24h Flow (Nov 3) | 7D Flow (Oct 28 to Nov 3) |
IBIT | −$95.0M | −$585.2M |
FBTC | +$6.8M | −$177.0M |
ARKB | $0.0M | −$129.5M |
GBTC | $0.0M | −$53.3M |
Four-fund total | −$88.2M | −$945.0M |
All funds | −$115.6M | −$1,002.9M |
Source: DefiLlama ETF flow data, latest reported flow day November 3, 2026, as of about 07:48 UTC November 4. The window covers five trading sessions.
Selling continued: November 3 was the third consecutive outflow session after October 30 and November 2. IBIT alone accounted for more than the four-fund total, as FBTC’s small inflow partly offset it.
The week: The four funds lost $945.0 million over five sessions, about $189.0 million per session. Across all funds, the week topped $1 billion in outflows.
Technicals: BTC Holds Its 200-Day EMA but Sits Near the Lower Band
Indicator (1D) | Reading | What it means |
200-day EMA (long-term trend) | About $76,461, rising; November 3 close about 1.24% above | The long-term uptrend still holds |
Bollinger Bands (position) | Near the lower band, about 14.7% of the way up the range | Price is pressing the bottom of its usual range |
Bollinger band width | 10.3%; no squeeze | Volatility remains expanded |
MACD (momentum) | Histogram negative but improving, from −479 to −420 | Downside momentum is fading |
RSI | 38.5 | Below 40, the zone where support or rejection tends to show |
20-day SMA | $80,316; November 3 close sits 3.62% below | Price remains well under its short-term average |
Source: Indicators calculated on DefiLlama completed daily closes through November 3, 2026.
RSI at the line: On the completed candle, RSI sits just under 40. At the live price of about $78,077 it reads about 40.1, so the next daily close decides whether 40 acts as support.
Two different 200-day lines: The 200-day EMA sits about 1.24% below price, while the 200-day SMA sits about 5.8% below. Both are rising.
Moving Averages Across Timeframes
Timeframe | 20-period | 50-period | 100-period | 200-period |
1D | $80,316 (price −3.62%) | $81,909 (price −5.50%) | $76,661 (price +0.97%) | $73,160 (price +5.80%) |
3D | $81,123 (price −4.58%) | $71,969 (price +7.55%) | ||
1W | $73,003 (price +6.03%) | $75,743 (price +2.20%) |
Source: Thanks to CryptoQuant for the data. Percentages show price versus each average.
Overhead cluster: The 1D 20 and 50 sit between $80,316 and $81,909, the same band that capped price in late October.
Support stack: The 100-day average sits just below price at $76,661, close to the 200-day EMA at about $76,461.
For technical analysis from a wide range of analysts, see the CryptoQuant QuickTake community.
Coinjuice Lens: Bitcoin Ownership
The Binance breach did not break Bitcoin. It broke one company’s operational chain, and customers answered by moving coins. Once those coins leave an exchange, the security questions move with them, which is the subject of Coinjuice’s guide to Bitcoin self-custody security layers. Custody trust is being repriced while institutions keep building rails that depend on it.
Readers looking to prepare for a test of the 200-day EMA can start with the Coinjuice ebook, Bitcoin Trading Without Leverage, now 15% off with the code TRADE15OFF, or go deeper with a Coinjuice subscription, currently 30% off the annual plan, where we start and complete trades and you will learn to snipe them independently.
Something new is about to land THIS WEEK: the Coinjuice merchandise store is kicking off and we are excited to share it with you. Make sure to sign up and we will send you an early bird discount that only our pre-members will gain for our merch!
Also please follow us on FB, YouTube, IG and X, it would mean a lot to us! Follow along on YouTube to catch the Coinjuice live sessions.
We’re looking for hungry talent: Coinjuice is looking for an Instagram creator to lead @coinjuicehq. No experience required, just a willingness to learn the Coinjuice trading framework and explain it in your own way. Send your CV and a link to your work to hello@coinjuice.com.
News Behind Today’s Read
Binance co-CEO Richard Teng says hackers used fake job interviews, AI tool to steal USD 6.3 billion in crypto(CNBC). Source for the June tampered Homebrew incident, the September fake interviews, the malware built to evade detection and Teng’s account of a campaign built over months.
Bitcoin steadies after dip to USD 76,300 as ETF outflows and midterm elections weigh on crypto (CoinDesk). Source for the USD 4.72 billion net Binance withdrawals since reopening and the Mercado Bitcoin incident.
North Korea denies role in USD 6.4 billion Binance hack after FBI points to TraderTraitor (CoinDesk). Source for the denial via state media, Elliptic’s on-chain support for the FBI attribution, the USD 2.85 billion frozen and AMLBot’s caveat on what wallet analysis can prove.
Live election results for 2026 midterms as Democrats decisively win control of House and Senate (CBS News). Source for the projected Democratic control of both chambers.
NYSE tokenized stock plans take shape as four more transfer agents join (CoinDesk). Source for the transfer agent roster, its reach across the S&P 500 and Broadridge’s onchain voting role. CoinDesk’s parent company Bullish is acquiring Equiniti.
Continue the read: Nov. 3 · Nov. 2 · Oct. 31
Market Snapshot
Asset | Price | Distance from ATH / reference |
BTC | $78,077 | 38.11% below ATH ($126,156) |
ETH | $2,301 | 53.48% below ATH ($4,946) |
ETH/BTC | 0.02947 | Spot ratio, DefiLlama |
DeFi TVL | $82.47B | Base TVL, DefiLlama |
BTC share of five-asset basket | 75.48% | BTC/ETH/SOL/BNB/XRP; narrow proxy, not market-wide dominance |
Prices and TVL as of November 4, 2026, about 07:45 UTC; five-asset share as of about 06:03 UTC. Source: DefiLlama.
This article was developed with the support of artificial intelligence tools as part of Coinjuice’s editorial process and reviewed by our editorial team before publication.
FAQ
How did the Binance hack start?
Binance said an engineer was contacted in September through a legitimate job platform by someone posing as a project director, then told to download a coding assignment carrying malware. On October 20 the attackers used that device and internal AI tools to reach two other engineers’ devices and find a deployment token. On October 29 they exploited EIP-7702 to gain execution permissions over a hot wallet. Binance also disclosed a tampered Homebrew incident from June.
Why are customers still withdrawing from Binance if funds were replaced?
Binance says about 98% of affected tokens have been replenished with company funds, so the outflows do not point to missing balances. They point to doubt about operational security. Net withdrawals reached about USD 4.72 billion between the November 1 reopening and 11:28 UTC on November 3, per CoinDesk, up from USD 3.64 billion in the first 9.5 hours.
What does a Democratic Congress mean for Bitcoin holders?
It changes the path of legislation, not the protocol. American Banker reports Elizabeth Warren will likely chair Senate Banking, so SEC nominees will need Democratic support, and bills such as the CLARITY Act need cross-party votes to advance. Bitcoin’s supply schedule, custody options and network rules are unaffected. Past midterm years show choppy months afterward, across a sample of three elections.
Where is Bitcoin relative to its moving averages on November 4, 2026?
On the November 3 close of USD 77,406, BTC sat about 1.24% above its rising 200-day EMA and 0.97% above its 100-day average. It traded 3.62% below the 20-day average and 5.50% below the 50-day average, which sit between USD 80,316 and USD 81,909. On the weekly chart, it held 2.20% above the 50-week average.
Disclaimer
The information provided in this article is for informational purposes only. It is not intended to be, nor should it be construed as, financial advice. We do not make any warranties regarding the completeness, reliability, or accuracy of this information. All investments involve risk, and past performance does not guarantee future results. We recommend consulting a financial advisor before making any investment decisions.
More like this
Written by

Andrew Kamsky
Andrew Kamsky is a Bitcoin analyst. He spent a decade in traditional finance across a Big Four firm and a listed fintech bank before going deep on Bitcoin full-time.










