Source publication time: November 6, 2026, at 17:36:56 (UTC+8). This is a retrospective rewrite of selected crypto-risk and speculative-narrative items from PANews’ daily roundup, not a current market update.
PANews’ November 6 roundup brought together reports of mobile-wallet theft, Binance’s recovery efforts and renewed leveraged-trading losses. It also featured two narratives requiring particularly careful labels: a Bitcoin developer’s quantum-defense thought experiment and Pump.fun hiring that mentioned prediction markets.
The distinction matters: a security researcher’s finding, a company’s assurance and an undeveloped proposal are different kinds of evidence.
iPhone wallet theft: two reports, not one combined loss estimate
According to a Bitquery research report cited by PANews, one group had stolen from 430 wallets since mid-October, with losses totaling approximately $4.16 million.
The investigation linked the activity through a shared transaction-fee wallet. It identified at least 4.06 million USDT stolen from 365 wallets on TRON, plus more than $103,000 taken from another 65 wallets across eight chains, including Ethereum and BNB Chain. According to the report, attackers who already possessed private keys first sent victims small amounts of TRX to cover transaction fees, then drained their funds.
Bitquery said there was no evidence that wallet applications such as Trust Wallet themselves contained the vulnerability. It instead highlighted iPhone exploitation tools, including DarkSword, as a risk to stored recovery phrases.
Separately, PANews cited warnings from security researchers and crypto commentators that DarkSword had caused $5.57 million in losses involving more than 20 wallets, with at least 18 malicious websites identified. Those warnings described an iOS 18 exploit capable of running malicious code after a user opened an infected website in Safari, without connecting a wallet or signing a transaction.
These are separate reported figures with different scopes; the roundup does not establish whether they overlap. They should not be added together. The cited recommendations were to update iOS and avoid storing recovery phrases in phone photos or notes. Changpeng Zhao also urged users to update their operating systems.
Binance: withdrawals resuming did not mean recovery was complete
Binance said it would begin restoring withdrawals for additional assets from 12:00 Beijing time on November 6, following security checks. Restoration was to proceed in batches rather than simultaneously, while deposits remained operational. The exchange warned of possible delays during the process.
In a separate Arbitrum governance proposal, Binance requested the return of 8,425.997 ETH and 74,559,805.2 ARB to a designated recovery address to compensate affected users. According to the roundup, the Arbitrum Security Council had frozen and moved those assets following an attack on Binance’s hot wallet.
At publication, the proposal was still at the forum-discussion stage. It required a Snapshot sentiment vote and onchain governance, with an estimated process of roughly 49 days, potentially longer if legal proceedings restricted transfers. It did not request new DAO spending.
A request to return frozen assets is not an approved transfer, and a withdrawal-reopening schedule is not evidence that every part of an incident has been resolved.
SignalPlus: compensation was a company commitment
SignalPlus said a cyberattack detected early on November 4 originated from a compromised third-party Telegram account and affected some users who had not enabled IP whitelisting.
The company reported total losses below $82,000, promised full compensation for affected users and said it expected services to resume fully within days. Those were the company’s statements at the time—not confirmation that repayment or restoration had already occurred.
Binance separately said it had removed all API keys associated with SignalPlus as a precaution. It stated that its own systems were unaffected and user funds were safe, and advised users not to reconnect keys until SignalPlus confirmed the issue was resolved.
Bitcoin “quantum landmines”: an idea, not a deployed defense
Bitcoin Core developer Cory Fields proposed a “quantum landmine” concept intended to deter future quantum-enabled theft.
Under the idea described in the roundup, an attacker would first have to post collateral equal to the bitcoin targeted. An owner who had prepared a hidden ownership proof could use it during a lockup period—for example, 30 days—to reclaim the bitcoin and confiscate the attacker’s collateral. The attacker would not know beforehand which holdings contained such protections.
The concept would apply only to owners who still possessed their private keys, not to lost bitcoin. Fields also outlined an auction-based concept for inactive wallets, involving hidden bids and contracts that would destroy targeted coins and seize an attacker’s collateral as a bounty.
The limiting detail is the important one: Fields called these “thought experiments,” and the enforcement rules had not been written. The roundup did not describe an implemented Bitcoin protection or an established upgrade plan.
Pump.fun hiring points to interest, not a confirmed product launch
Pump.fun co-founder alon said its development company, Baton Corporation, was recruiting business-development staff for perpetuals, prediction markets and trading terminals.
He framed the hiring as part of expanding the Pump.fun app’s social graph by attracting traders from markets including memecoins, perpetuals and prediction markets. DEGEN NEWS characterized the post as his first mention of prediction markets.
That supports a report about hiring and stated ambitions. It does not, by itself, establish a prediction-market launch date, product design or regulatory position.
Leverage: a winning streak is a backward-looking statistic
The roundup cited Lookonchain describing a trader whose previous 10 trades were profitable, with $6.32 million in realized gains. The trader had opened a 25-times leveraged long of 20,277 ETH, valued at approximately $45.3 million, and was showing an unrealized gain of $252,000 at the reported snapshot.
The “100% win rate” label referred to that reported trading history, not a guarantee about the open position.
Elsewhere, Lookonchain reported another liquidation for Jeffrey Huang (@machibigbrother). According to that account, $223,000 raised by selling 15 NFTs was quickly exhausted through liquidations. It reported losses of $505,000 over four days, alongside losses of $909,000 on papertrade_xyz and $37.4 million on Hyperliquid.
For broader market context, SoSoValue data cited in the roundup showed $430 million in net outflows from U.S. spot Bitcoin ETFs on November 5, Eastern Time, led by $200 million from Fidelity’s FBTC and $105 million from BlackRock’s IBIT. Those flows describe fund activity; they do not establish what Bitcoin’s price would do next.