Security developments led crypto news on October 31, 2026. Binance reported further progress in replacing stolen assets, Blockaid warned about compromised DeFi websites, and DMG Blockchain disclosed its exposure to the exchange incident.
Binance Says It Has Replaced 90% of Stolen Assets
Binance announced that it had replenished approximately 90% of the cryptocurrencies taken in the recent attack, saying Bitcoin, Ether, XRP, Solana and six other major assets now had full reserve backing. The exchange said replacement purchases drew on its corporate treasury and portions of its SAFU and futures insurance funds, while acquiring the remaining, less liquid tokens would take longer. It also published an October 31 reserve snapshot, with the complete cryptographic proof for independent balance verification expected on November 3, and maintained November 1 as its target for reopening withdrawals.
Blockaid Flags Wallet-Draining Attack Across 12 DeFi Websites
Blockaid identified malicious software on at least 12 DeFi websites, including Flap, Kintsu, Pickle Finance and Origami Finance, prompting warnings against connecting wallets or approving transactions through the affected pages. The attack redirected visitors toward interfaces using the Step Drainer toolkit, while The Block reported that all 12 domains shared the registrar Name.com and that 10 had subsequently been suspended. The publication traced approximately $138,000 in stolen funds across three wallets on Ethereum-compatible networks, describing a partial tally that excluded possible losses on Solana and Aptos.
DMG Says Its Business and Client Assets Were Unaffected
DMG Blockchain Solutions said in an October 31 statement that neither the company nor its affiliates had been affected by the Binance security incident, and that client assets remained secure. The Canadian digital-asset infrastructure company described a transaction-control system combining limited access, separate staff responsibilities and several approval stages. According to DMG, those controls are designed to prevent someone who compromises a single device from gaining enough authority to initiate, approve or complete an unauthorized transfer.