Default
Door Remote - 10 Nov 2026
Today in crypto, cybersecurity firm CertiK urged exchanges to impose hard dollar limits on hot-wallet holdings following the $6.3 billion Binance hack, blockchain analytics firm Elliptic reported that North Korean hackers used newly created memecoins to launder stolen funds and European regulators sought industry participants to help establish common standards for tokenized securities.
Crypto exchanges need dollar caps on hot wallets, CertiK saysCrypto exchanges should impose hard dollar limits on their hot-wallet holdings rather than relying solely on cold-storage ratios to measure security, according to cybersecurity firm CertiK.
The recommendation came as several crypto exchanges recently disclosed how much they held in cold wallets, seeking to reassure customers after the record Binance hack that targeted its hot wallets. Crypto exchange Gate reported that 88.26% of its total assets were in cold storage, while Coinbase said it keeps more than 99% of customer assets offline.
“Cold storage is a useful measure of online exposure, but it is not a standalone security score,” CertiK’s research team told Cointelegraph.
CertiK said crypto exchanges should consider setting hot-wallet caps for each asset and blockchain according to the strictest of three limits: a percentage of customer liabilities, estimated withdrawal needs and an absolute loss ceiling based on the exchange’s financial resources and recovery capabilities.
“Flexibility should support operating liquidity, while hard dollar ceilings and circuit breakers limit potential loss,” they said.
North Korean hackers create memecoins to launder funds from Binance hack: EllipticNorth Korean hackers created memecoins to launder cryptocurrency stolen in the $6.3 billion Binance hack, routing roughly $430,000 through six newly launched tokens on the NEAR blockchain, according to a report from blockchain analytics firm Elliptic.
Between Nov. 5 and 7, the hackers created at least six tokens on NEAR and used liquidity pools on decentralized exchanges to move stolen funds between wallets, Elliptic said. The tokens attracted almost no outside trading and were abandoned shortly after launch.
The hackers used one set of wallets to swap stolen NEAR tokens for the new memecoins, then used another set to sell those memecoins back into the pools for NEAR. The swaps let them move funds without direct wallet-to-wallet transfers, though the transactions remained traceable onchain.
Elliptic said the same laundering technique was also used following the $1.5 billion Bybit hack in 2025, when North Korean-linked actors moved at least $24 million through a newly created token on the TRON blockchain.
EU taps industry to set standards for tokenized securitiesThe European Central Bank, European Commission and European Securities and Markets Authority are seeking nominations for an industry-led group that will draft common standards for holding and settling tokenized securities.
Eligible applicants include EU industry associations, global institutions, private firms and fintech companies. They can apply to the European Tokenisation Standards Group (ETSG) by Nov. 27, with work set to begin in January 2027, according to a release published Monday. The three EU institutions will participate as observers.
The group will develop technical and market standards to help companies hold and settle tokenized securities across different distributed ledger technology (DLT) platforms and ensure those platforms can work with existing financial systems. The group aims to produce an initial set of standards by early 2028, according to its mandate. The standards will support Appia, the Eurosystem’s initiative to develop a blueprint for Europe’s tokenized financial markets.
The institutions warned that fragmentation could limit the benefits of tokenization and said the group may recommend ways for EU authorities to encourage firms to adopt its standards.
In September, the Eurosystem launched Pontes, a system that allows financial institutions to settle wholesale transactions in tokenized assets in central bank money.
Crypto exchanges need dollar caps on hot wallets, CertiK saysCrypto exchanges should impose hard dollar limits on their hot-wallet holdings rather than relying solely on cold-storage ratios to measure security, according to cybersecurity firm CertiK.
The recommendation came as several crypto exchanges recently disclosed how much they held in cold wallets, seeking to reassure customers after the record Binance hack that targeted its hot wallets. Crypto exchange Gate reported that 88.26% of its total assets were in cold storage, while Coinbase said it keeps more than 99% of customer assets offline.
“Cold storage is a useful measure of online exposure, but it is not a standalone security score,” CertiK’s research team told Cointelegraph.
CertiK said crypto exchanges should consider setting hot-wallet caps for each asset and blockchain according to the strictest of three limits: a percentage of customer liabilities, estimated withdrawal needs and an absolute loss ceiling based on the exchange’s financial resources and recovery capabilities.
“Flexibility should support operating liquidity, while hard dollar ceilings and circuit breakers limit potential loss,” they said.
North Korean hackers create memecoins to launder funds from Binance hack: EllipticNorth Korean hackers created memecoins to launder cryptocurrency stolen in the $6.3 billion Binance hack, routing roughly $430,000 through six newly launched tokens on the NEAR blockchain, according to a report from blockchain analytics firm Elliptic.
Between Nov. 5 and 7, the hackers created at least six tokens on NEAR and used liquidity pools on decentralized exchanges to move stolen funds between wallets, Elliptic said. The tokens attracted almost no outside trading and were abandoned shortly after launch.
The hackers used one set of wallets to swap stolen NEAR tokens for the new memecoins, then used another set to sell those memecoins back into the pools for NEAR. The swaps let them move funds without direct wallet-to-wallet transfers, though the transactions remained traceable onchain.
Elliptic said the same laundering technique was also used following the $1.5 billion Bybit hack in 2025, when North Korean-linked actors moved at least $24 million through a newly created token on the TRON blockchain.
EU taps industry to set standards for tokenized securitiesThe European Central Bank, European Commission and European Securities and Markets Authority are seeking nominations for an industry-led group that will draft common standards for holding and settling tokenized securities.
Eligible applicants include EU industry associations, global institutions, private firms and fintech companies. They can apply to the European Tokenisation Standards Group (ETSG) by Nov. 27, with work set to begin in January 2027, according to a release published Monday. The three EU institutions will participate as observers.
The group will develop technical and market standards to help companies hold and settle tokenized securities across different distributed ledger technology (DLT) platforms and ensure those platforms can work with existing financial systems. The group aims to produce an initial set of standards by early 2028, according to its mandate. The standards will support Appia, the Eurosystem’s initiative to develop a blueprint for Europe’s tokenized financial markets.
The institutions warned that fragmentation could limit the benefits of tokenization and said the group may recommend ways for EU authorities to encourage firms to adopt its standards.
In September, the Eurosystem launched Pontes, a system that allows financial institutions to settle wholesale transactions in tokenized assets in central bank money.