Keplr is a crypto wallet widely used for Cosmos (ATOM) and its neighboring networks. You could open it with your Google or Apple account, without a recovery phrase to keep somewhere safe. This login service isn't built by Keplr itself: it's provided by Web3Auth, a company bought in 2025 by Consensys, the company behind MetaMask.
On 6 November, Web3Auth had a security problem. The next day, Keplr reported transactions that their owners hadn't made, on some of the wallets opened with Google or Apple, and shut down those logins. Google and Apple weren't hacked: it's the provider sitting between them and Keplr that failed.
If your Keplr was created with a recovery phrase or linked to a hardware wallet (Ledger…), it isn't affected, according to Keplr. If you opened it with Google or Apple, don't send anything more to it, move what's left to a wallet with a recovery phrase by following Keplr's official instructions, and ignore any private message offering to “recover” your funds: it's almost always a scam.
On Friday, Binance sent an email to its French customers: their Binance France account will be closed on 31 December 2026. The platform didn't get the European MiCA license (the green light required since July to sell crypto in Europe). Since this summer, these accounts could already only be used to sell or withdraw. So all that's left is to move out whatever is still there, to a licensed platform or to your own crypto wallet (an app where only you hold the keys).
If you still have crypto at Binance, the date to remember is 29 November. From then on, Binance takes 0.025% of what's left each month, with a minimum of 10 USDC (a stablecoin, a crypto worth one dollar). On a €500 account, that means $10 going out every month. If nothing has been withdrawn by 31 December, Binance says it may convert or move your crypto, without saying how. In France, a transfer to another account in your name isn't a sale, so there's no tax on it.
Gnosis Pay offers a Visa card linked to a crypto wallet (an online account whose keys you hold yourself). On Friday, 6 November, the company announced that an intruder had been able to read its customers' data. The intruder was spotted on 3 November and blocked in less than two hours. According to the messages sent to affected customers, the intruder saw the name, postal address, full card number, email, phone number and the addresses of the crypto wallets linked to the account. No crypto and no euros were stolen.
If you have a Gnosis Pay card and your data is part of the batch, you were notified by email on Friday. The risk isn't direct theft but scams, because someone who knows your name, your address and your holdings can write a very convincing message. Gnosis Pay never asks for your recovery phrase (the words that give access to your crypto wallet), your PIN or your card number. These cards stop working on 20 December anyway.
Binance, MEXC: where to buy crypto in France since MiCA
Since 1 July 2026, a crypto platform that wants to serve customers in France must hold the European MiCA license. Binance didn't get it. It no longer accepts new French customers, and those who already had an account can only sell or withdraw their crypto. Funds aren't frozen: withdrawals are still open.
MEXC, a platform known for its low fees and its thousands of small tokens, doesn't have a license either. It has been on the blacklist of France's market regulator, the Autorité des marchés financiers (AMF), since June 2024, and it has just closed its accounts in the Netherlands.
If you're looking for a platform, the AMF publishes the list of licensed ones. Kraken, OKX and Coinbase are on it, along with others. If you still have crypto on Binance, withdrawals remain possible, with no end date announced. On MEXC, however, a French customer has no recourse in France if the platform shuts down or blocks accounts, as it has just done in the Netherlands.
Bitcoin loses 6% in a single day, dragged down by the Wall Street sell-off
On Thursday, 5 November, bitcoin lost about 6% in a single day. It went from more than $80,000 on Wednesday to about $75,500, its lowest level since mid-September. Ether (the crypto of the Ethereum network) fell almost 8%, and solana between 6 and 8%. This time the trouble came from the US stock market: the Nasdaq (the index of tech stocks) lost 5.5%, its worst session since April 2025, as a wave of selling hit artificial intelligence stocks. As often happens on days of real fear, crypto followed.
If you hold crypto, your portfolio is worth about 6 to 8% less than it was two days ago. Nothing was stolen and no platform is down, only prices have dropped. The hardest hit were people who had borrowed to bet on a rise (so-called “leveraged positions”): more than $1 billion of these bets were force-closed in 24 hours. If you haven't borrowed, this doesn't affect you.
Binance proves it really holds your crypto, at least for ten of them
Still in the aftermath of the hack, Binance published its proof of reserves on Monday, 2 November (a check that shows it really holds its customers' crypto). For ten cryptos, including bitcoin, ether, USDT and USDC, every coin deposited is covered at least once, and others will be checked starting Wednesday. To make up for the $6.3 billion theft, however, the platform has already used up half of its emergency fund (a reserve set aside for this kind of blow), that is 7,499 bitcoins or about $580 million. The same amount is left, and no date has been set to fill it back up. Finally, on Arbitrum (a network that runs apps on top of Ethereum), a council of twelve people took about $30 million back from the hackers, without even having their key.
If you have crypto on Binance, it is indeed there, and you can check your own balance in the app, under proof of reserves. Withdrawals are also opening up to more networks starting this Tuesday.
Binance reopened withdrawals and $3.6 billion left in a single day
This follows the Binance hack we covered yesterday. Three days after the $6.3 billion theft, the platform reopened withdrawals on Sunday, 1 November, and its customers did not need to be asked twice. In nine and a half hours, they withdrew $4.65 billion and deposited $1.01 billion. So $3.64 billion more went out than came in, or 2.1% of the $171 billion that Binance holds for its customers. The rush came in the first few hours before calming down, and part of the money went to other platforms such as OKX.
If you have crypto on Binance, withdrawals work again for the main ones (bitcoin, ether, USDT, USDC), but not yet for all of them. Nothing forces you to move them to your own wallet (an app where only you hold the keys, like Trust Wallet or Rabby), since Binance says it has replaced 95% of the stolen crypto with its own money. Prices have not moved, and bitcoin is worth about $78,000.
Binance got hacked, and DeFi had to protect itself too
The Binance hack on Thursday, 29 October, did not stop at Binance. To hide the stolen money, the hackers are going through DeFi (apps that lend and swap crypto with no bank or platform in the middle). Less than an hour after the theft, they deposited $60 million in stolen stablecoins (cryptos whose value tracks the dollar) on Aave, the biggest lending app, to borrow ether in return. Aave then paused everything for about a day.
If you had money on Aave, you could still withdraw it during this pause, but you could no longer deposit or borrow. Everything reopened on Friday, 30 October, and nobody lost money on Aave. The total value locked in DeFi still fell 5% in a single day, because prices dropped and many people withdrew their funds to be on the safe side.
On Thursday evening, 29 October, hackers emptied part of the online vaults of Binance, the biggest crypto platform in the world. They got away with about $6.3 billion, mostly in bitcoin, ether and stablecoins (cryptos whose value tracks the dollar). Nobody had ever seen a theft this size in crypto. Binance first blocked all withdrawals, then reopened them in stages on Sunday, starting with bitcoin, ether and stablecoins. The platform says it is covering the losses with its own money, that it has already replaced 95% of them, and that no customer will lose their crypto.
Prices fell on Friday. If you hold crypto on a platform, it is the platform that keeps it for you, and this hack is a reminder that it can be robbed. The crypto you keep in your own wallet (an app like Trust Wallet or Rabby) is not exposed to this kind of attack. Binance, for its part, no longer accepts new customers in France.
Trezor is now hit by the rigged wallets from reseller CryptoBilis
Trezor, the other big maker of hardware wallets for crypto, has issued an alert of its own. A customer in Indonesia says he found a small circuit board hidden in his Trezor Safe 5. It could read the secret words (the ones that give access to the crypto) shown on the screen and send them over the mobile network. Trezor has not yet been able to examine the device, and no theft has been reported so far. The wallet came from CryptoBilis, the Southeast Asian reseller already involved in the Ledger case.
If you bought a Trezor from CryptoBilis since March 2026, Trezor asks you, in its 30 October alert, to move your crypto to a new wallet, with new secret words. This summer, the brand had already been through a leak at its shipping company, where the name, address and phone number of about 80,000 customers were stolen. Crypto was not affected, but this data is being used for fake calls and fake letters in Trezor's name.
Ledger: a chip hidden in resold devices drained 315 wallets
Ledger, a French company, makes hardware wallets, small devices that keep your crypto off the internet. On 9 October, 315 of these wallets were emptied in less than an hour, for about $93 million. The Ledger itself was not hacked. The devices involved came from CryptoBilis, a reseller in Southeast Asia, and had been opened before they were sold. A tiny chip hidden inside read the 24 secret words shown on the screen during setup, then sent them to the thieves over the mobile network. And those 24 words are all it takes to empty the wallet.
Ledger says it has not confirmed a single theft on a device bought anywhere other than CryptoBilis. If you bought yours from this reseller, Ledger recommends moving your crypto to a new device, with new secret words. As of 1 November, the investigation led by Ledger's CEO is still going on, and no refund has been announced.
