Good morning traders
Binance confirmed a security incident on Thursday 29 October and suspended withdrawals. The same day, Polymarket was drained through a compromised third-party provider.
Both got in through somebody else's weak point, and then the market panicked. The panic is the second hit.
What's confirmed
Binance: confirmed an incident, suspended deposits and withdrawals, and now expects to restore withdrawals within about 48 hours. ⚑ Reports put the theft at about $6.3 billion with about $3 billion frozen, though some outlets called the figures unconfirmed. ⚑ Early findings point to an engineer's compromised laptop. It says user funds are safe and it will cover losses, which is its own statement.
Polymarket: its international platform was drained, and it blames a compromised third-party provider. Estimates of around $2.7 million are unverified. ⚑
PHP flaws (separate): CVE-2026-109618 and CVE-2026-109619 are being exploited, fixes out since 21 October. No report I found links them to either breach.
Triage
Funds on Binance: open the app yourself. Check balances, open orders and withdrawal history. A paused withdrawal is the platform, not a sign you've been hit.
Used Polymarket: review and revoke wallet approvals you don't need. Treat any signing request you didn't start as a stop sign.
Neither: you're still a target for the scam wave.
The scams coming this week
"Withdrawals are back, verify your account" links.
"Claim your compensation" sites that want a wallet signature.
Fake support DMs on Telegram, X and WhatsApp.
"Recovery experts". Nobody can reverse a blockchain transfer for a fee.
"Your account was accessed" alerts. Close it and open the app yourself.
Build it so one failure can't sink you
Three buckets: small trading float, a middle bucket, long-term holdings in a hardware wallet.
Know your exit if a platform freezes.
Hardware key over app over SMS. Register two.
A dedicated email for your exchange.
Withdrawal whitelist and cooling-off delay.
API keys trading-only, withdrawals off, locked to your IP.
A clean trading device and a separate wallet for apps.
Read every signing request.
If you think you've been hit: cut access, change your email password first, end sessions, revoke keys and approvals, move what's left to a fresh wallet, then contact the platform and report it.
Why crypto dumped, and why we stick to the plan
Bitcoin daily chart, 3 months, 21 and 50 EMA, vertical line on 29 Oct. Directly under this heading. No levels.
Bitcoin hit a six-week low near $76,000 and about $1.5 billion of positions were liquidated in 24 hours. ⚑ A frozen exchange removes buyers and forces sellers, and leverage turns a headline into a cascade.
A stop is a decision you made before the headline. A panic exit is a trade made by the news instead of by you.
In words only:
CRH is moving higher. ◆ The trade is doing what the plan said it could do.
ORCL is still in the DCA buy zone. ◆ We add on the schedule, in the size we set, and no bigger because it feels cheap.
Reply and tell me which step turned something up.
Education, not financial advice. Based on public reporting dated 17 to 30 October 2026, and several figures were still changing.