Digi Coin Blaze

Crypto risk roundup: ETF outflows, wallet exploits and Pump.fun’s prediction-market hiring

Source published: November 6, 2026, at 17:36:56 (UTC+8). This roundup preserves the original reporting context.

Crypto’s market backdrop and security risks shared the spotlight in PANews’ November 6 roundup. U.S. spot Bitcoin ETFs recorded net outflows, researchers reported losses linked to compromised iPhones, and Binance outlined further steps toward restoring withdrawals after a security incident. Meanwhile, Pump.fun’s hiring offered a glimpse of its ambitions beyond memecoins—but not proof of a new product launch.

ETF outflows as technology shares sell off

According to SoSoValue data cited by PANews, U.S. spot Bitcoin ETFs recorded $430 million in net outflows on November 5. Fidelity’s FBTC led with $200 million in outflows, followed by BlackRock’s IBIT at $105 million.

The funds’ combined net assets stood at $96.647 billion, equivalent to 6.31% of Bitcoin’s market capitalization. Cumulative net inflows remained $56.111 billion.

The roundup also described a sharp technology-stock selloff, although its market figures are inconsistent. Its closing-market section put the Nasdaq Composite’s decline at 5.52%, with an estimated $1.04 trillion erased from the Magnificent Seven’s combined market value. An earlier section reported a 3.3% Nasdaq decline, while a separately attributed analysis cited a 6.36% fall in the Nasdaq 100—a different index. These figures should not be treated as one consistent market snapshot.

CryptoQuant analyst Axel Adler Jr. argued that equity-market volatility could force funds to reduce risk and put further pressure on Bitcoin. That was an assessment of potential spillover, not evidence that additional crypto selling was inevitable.

iPhone wallet theft: separate reports, separate loss estimates

A Bitquery investigation cited in the roundup linked one group to thefts from 430 wallets totaling approximately $4.16 million since mid-October. Researchers identified at least 4.06 million USDT stolen from 365 wallets on TRON, plus more than $103,000 taken from another 65 wallets across eight chains, including Ethereum and BNB Chain.

According to the report, attackers first sent small amounts of TRX to compromised wallets to cover transaction fees, then drained their assets. Bitquery said there was no evidence that wallet applications such as Trust Wallet themselves contained the vulnerability; it pointed instead to iPhone hacking tools that could steal recovery phrases.

Separately, security researchers and commentators cited by PANews attributed $5.57 million in losses involving more than 20 wallets to the DarkSword iOS exploit toolkit. They reported at least 18 malicious websites and said opening an infected page in Safari could allow malicious code to run without a wallet connection or signature.

The roundup does not establish how much these two loss estimates overlap, so they should not be added together. The reported precautions included updating iOS and avoiding storage of recovery phrases in phone photos or notes.

Binance recovery remains a staged process

Binance said additional asset withdrawals would begin reopening in batches from 12:00 Beijing time on November 6, subject to security checks. Deposits remained operational, and the exchange warned that some users could experience delays.

In a separate Arbitrum governance proposal, Binance requested the return of 8,425.997 ETH and 74,559,805.2 ARB frozen after its hot-wallet attack. The proposed destination was a designated recovery address intended to compensate affected users.

At publication, the request was still at the forum-discussion stage. It required a Snapshot temperature check and onchain governance, with the process estimated at roughly 49 days and potentially longer if legal proceedings restricted transfers. The proposal did not request new DAO spending.

Pump.fun’s hiring signals interest—not a confirmed launch

Pump.fun co-founder alon said its developer, Baton Corporation, was hiring business-development staff for perpetual futures, prediction markets and trading terminals. He connected the recruitment to expanding the social graph within the Pump.fun app and attracting traders across those markets.

DEGEN NEWS described the post as alon’s first mention of prediction markets. The evidence here is a recruitment announcement and a statement of ambition—not a confirmed prediction-market launch, adoption figures or revenue.

Elsewhere, Zilliqa acknowledged that nine years as an independent Layer 1 had not delivered the usage, capital or liquidity it expected. It announced plans to become an Ethereum Layer 2 for regulated institutions under the name Zilliqa Institutional Layer. The team said the ZIL token would remain and holders did not need to act at that point; technical and migration details were still to come.

The distinction across these stories is straightforward: hiring is not deployment, a recovery proposal is not completed reimbursement, and market attention is not proof of sustained usage.

Original article: PANews

Further reading