Daily · Binance Hack Attribution and Chip Rout · November 3, 2026

Key points

FBI blames North Korea for record Binance heist

The FBI announced on November 1 that a North Korean state-sponsored unit known as TraderTraitor was responsible for the theft of more than $6 billion in virtual assets from Binance, the world's largest cryptocurrency exchange. The attack, which occurred on October 29, resulted in the loss of $6.34 billion in crypto assets, making it the largest crypto hack to date. Law enforcement observed members of TraderTraitor converting the stolen assets to Ethereum and expected them to launder the assets further.

Binance co-CEO Richard Teng detailed the intrusion method, stating that hackers used fake job interviews, a tampered Homebrew installation, and compromised internal AI tools over months to infiltrate wallet infrastructure. In June, attackers lured a Binance Wallet DevOps engineer to install malicious software disguised as a popular AI coding tool. In September, they posed as recruiters and ran job interviews with another engineer, ending in a coding exercise containing hidden malware. From there, the attackers moved through internal AI tools to breach the system that authorized wallet transactions.

Binance has replenished 98% of the affected assets using company funds and pledged to cover all customer losses. The company temporarily restricted withdrawals, which resumed on Sunday; customers subsequently withdrew more than $3.6 billion in assets. Chainalysis estimated that 89% of crypto hack losses in 2026 were linked to North Korea, up from 15% in 2021. The average reported loss per hack rose from $50.65 million in 2021 to $185.65 million in 2026.

North Korea denied involvement. Kim Yo-jong, sister of leader Kim Jong Un, issued a statement on Tuesday dismissing the FBI's attribution as "absurd rhetoric" and a "grave political provocation." She claimed the US is attempting to brand the DPRK as a "cyber criminal state." A senior official at South Korea's unification ministry noted that this was Kim Yo-jong's first statement on accusations of North Korean cyber hacking, suggesting the North is treating the matter seriously as international fallout grows.

Chip sector rout follows Intel's weak forecast

Intel's stock plunged 29% on Friday, its worst day since the 1970s, after the company warned that quarterly revenue would be $1–2 billion below estimates due to soaring costs for memory and other components. This capped a 45% plunge in October, the steepest monthly drop on record according to FactSet. The decline was part of a broader sell-off in semiconductor stocks, with the group shedding more than $400 billion in market value in a single session by Yahoo Finance calculations.

Intel is shifting some Oregon factory capacity away from its advanced 18A chips to make more wafers on Intel 3, used for data center products, due to industry-wide supply constraints. CEO Lip-Bu Tan said he sees the global market for server processors increasing as much as five times over the next five years to about $200 billion, but noted that Intel still has no marquee customer for its most advanced chips. The company has spent half a decade and a significant portion of its $108 billion in capital expenditures trying to challenge TSMC.

In related news, Marvell Technology agreed to buy Lumentum Holdings in an all-stock transaction worth $115 billion. The deal values Lumentum's stock at $1,132 a share, representing a premium of approximately 23.9% to the share price as of October 28. However, Lumentum's stock fell by 18.6% on Monday, and Marvell shares closed down 12.7%. Cantor Fitzgerald analyst C.J. Muse said China approval will be the biggest question mark, with the transaction expected to close in the first half of 2028.

Apple reported record revenue for the July-September quarter, with iPhone sales rising 17% to $57 billion and Mac sales growing 27% to $10.7 billion. However, CEO John Ternus warned of "unprecedented" cost increases for memory driven by data center demand from AI platforms. Apple raised prices on essentially all hardware products by around 20% in response. CFO Kevan Parekh projected gross margins for the December quarter between 45% and 46%, trailing the 46.3% average analyst estimate, marking a third straight decline in gross margin.

European supermarket refrigeration systems hacked

Cyberattacks targeting refrigeration systems affected food businesses across eight European countries, including the UK meat processing industry. On Monday, November 2, fridges and freezers at more than 100 shops in several European countries ran hot due to a cyberattack. In some cases, hackers increased appliance temperatures to as high as 50C (122F), causing units to melt or catch fire.

Incidents were reported in Sweden, Belgium, Estonia, Luxembourg, the Netherlands, Ireland, Denmark, and Italy. Belgian federal prosecutors opened an investigation after dozens of stores reported refrigeration failures. European Commissioner for Agriculture and Food Christophe Hansen said the attacks were a "deliberate attempt to disrupt" the bloc's food supply. The UK National Cyber Security Centre (NCSC) confirmed that a couple of instances in the UK's food supply chain were affected, noting that the attacks exploited vulnerabilities in systems used to remotely control cold refrigeration units.

The NCSC warned that by 2028 it is highly likely that Russia, China and other nation states will routinely use AI-cyber to achieve geopolitical goals. Researchers from UK Cyber Defence identified more than 800 refrigeration and building-control interfaces associated with British retailers that can be accessed over the public internet. The attacks come three weeks after a cyber-attack disrupted as many as 700 French grocery stores, causing food losses estimated at tens of millions of euros.

Anthropic IPO filing reveals massive spending commitments

Anthropic filed its IPO registration statement last week ahead of a planned November stock market debut. Footnotes to the company's most recent financial disclosures revealed nearly $900 billion in spending commitments, most of them stretching into the 2030s. The amended registration statement reveals at least $582 billion in non-cancelable spending commitments to five companies: Amazon, AMD, Broadcom, Google and Microsoft. Anthropic has $96 billion in cash reserves and has committed to 15 GW of data center capacity in the coming years.

The company's third-quarter results suggest revenue growth slowed over the summer. One study found the number of Americans using AI at work fell from 46% in summer 2025 to 33% in summer 2026. Anthropic released its Fable 5 frontier model in summer 2026, which received a tepid commercial reception. The SEC has not yet approved the IPO, and the company's 2026 financial results have not been subjected to formal auditing.

In related AI industry news, OpenAI hired former U.S. Army Secretary Dan Driscoll as senior counselor for national security modernization, a newly created role. Driscoll will focus on how AI can be used to strengthen US national security and cybersecurity, working with OpenAI's senior leadership and external partners. The appointment follows Driscoll's resignation from the Army Secretary post earlier this year after reported tensions with Defense Secretary Pete Hegseth.

AI coding tools face new restrictions and budgets

Anthropic confirmed it added prompt restrictions to Claude Code on Opus 5.5 to prevent recreation of existing video games, while developers report unexplained refusals on reverse-engineering and software-analysis tasks. Technical writer Jarred Walton of Phison Electronics USA encountered refusals while testing software he was developing, but switching to Opus 4.8 allowed him to continue. Anthropic has not publicly confirmed whether the reverse-engineering refusals are tied to the new game-recreation instructions or to separate cybersecurity restrictions.

Cognition introduced hierarchical budgets for Devin, allowing enterprises to manage AI coding agent spending across departments, projects, and individual engineers. If a budget runs out while Devin is working on a task, the session stops. The FinOps Foundation's 2026 State of FinOps report found that 98% of its 1,192 survey respondents now manage AI spending, up from 31% two years ago.

OpenAI appears to be silently re-enabling model training on Codex chats for some users. A Daybreak Blue Trusted Access program email stated that from November 29, OpenAI may use content from Daybreak Blue sessions on personal accounts to improve models, even when the "improve the model for everyone" setting is off. Users reported that model training was re-enabled in their Codex settings without explicit notification.

Our read

The attribution of the Binance hack to a North Korean state-sponsored group raises the bar for crypto custody and AML controls, signaling that further US sanctions targeting crypto wallets and laundering networks are likely. The chip sector rout, driven by Intel's weak forecast and memory cost inflation, suggests that AI infrastructure demand is straining supply chains, with direct implications for hardware pricing and availability. The European supermarket refrigeration attacks expose a systemic vulnerability in internet-connected operational technology, requiring immediate action from organizations managing OT/ICS infrastructure to harden their defenses.

This material was produced automatically by a large-language-model system from the public sources listed below; it is AI-generated content and may contain inaccuracies — verify facts against the original sources.

Sources