The day in one breath: Sunday was the weekend market doing what only crypto does — pricing Monday's headlines on Sunday night. Bitcoin slid to $73,761, its lowest since August, ether lost 5% and more than a billion dollars of leverage was liquidated, most of it longs; Web3Auth finally published the list that is supposed to tell Keplr users whether they were robbed or rescued; and Binance's European customers got a deadline with a fee attached: out by November 29, or pay to stay in an account that closes December 31.
Context: BTC closed $74,740 (−1.4%) on Nov 8 (CoinGecko daily close) — Fear & Greed 28 (Fear).
#1 — Bitcoin's Sunday dip to $73,761 liquidated more than $1 billion
What happened: Late Sunday, the only open market in finance took two headlines at once and went down. Bitcoin fell to about $73,761, its lowest level since August, before rebounding above $75,000 — a bounce that had already stalled by the time CoinDesk wrote it up Sunday night, with bitcoin near $74,311. Ether took the harder hit: it closed the UTC day at $2,124, down 5.0%, after crashing below $2,100 intraday. The forced selling underneath was the story: more than $1 billion in leveraged positions were liquidated over 24 hours, according to CoinGlass figures reported by CoinDesk, most of it in the last several hours — and $913 million of it was longs, traders positioned for prices to rise. Ether accounted for $448 million of the liquidations, nearly double bitcoin's $272 million, and the single largest liquidation order was a $48 million ether position. The headlines CoinDesk tied the drop to were both off-crypto: Nvidia's board has opened an independent investigation after CEO Jensen Huang acknowledged an affair with a business executive US intelligence agencies believe was passing information to Beijing — Nvidia says it has no reason to believe company secrets or national security were compromised — and Secretary of State Marco Rubio said negotiations with Iran had stalled, calling Iran's demands "outrageous." The tokenized version of Nvidia stock, NVDAX on xStocks, fell 3.55% to $180.42 over 24 hours against the stock's $186.64 Friday Nasdaq close, a discount that says crypto traders expect a worse open on Monday. Reuters' account of the same sell-off, carried by BusinessToday, led with a different cause: last week's US midterm results handed Democrats control of Congress, raising fears of stricter crypto regulation. On the chart CoinDesk cited, bitcoin is now boxed between its 200-day average near $73,150 as support and its 100-day average near $77,430 as resistance.
Why it matters: Follow who paid. Not spot holders — leveraged longs did, to the tune of $913 million, and ether longs paid nearly twice what bitcoin longs paid. That split is the tell: the crowded trade going into the weekend was not bitcoin, it was the number-two asset, five days after ether ETFs posted their sixth straight week of outflows. The second lesson is structural. Stocks were closed, so a scandal at the world's largest listed company and a stalled negotiation with Iran got priced in crypto first, by whoever was awake and margined — which is why the move overshot: bitcoin printed its lowest price since August on a Sunday night and was back above $75,000 within hours. Whether any of it was "real" gets decided Monday, when Nasdaq opens and either confirms the tokenized market's 3.55% NVDAX discount or erases it. Sunday's liquidations, either way, do not get refunded.
Source: CoinDesk — Bitcoin's drop and pop triggers $1 billion in liquidations (Nov 8, 10:21 PM EST; CoinGlass liquidation figures, NVDAX price, moving-average levels); sell-off framing via Reuters in BusinessToday — Bitcoin Tumbles To US$73,708, Ethereum Hits US$2,223 As Regulatory Fears Rock Crypto Market (Nov 9; intraday lows differ by venue and snapshot time)
#2 — Web3Auth published the rescue list. It matches the investigators' attacker list.
What happened: The artifact Keplr users were told to wait for on Saturday arrived on Sunday. Web3Auth — the Consensys-owned provider whose infrastructure flaw leaked private keys for some Google/Apple social-login accounts — published a list of verified recovery addresses on November 8: twelve addresses covering eleven Cosmos networks (Cosmos Hub, Osmosis, Celestia, Akash, Noble, Injective, dYdX, Babylon, Axelar and Saga among them) plus a single EVM address it says covers eight more chains. These are the wallets its teams, working with Keplr, used to move assets out of vulnerable accounts "utilizing the same path of the original attacker," and the company repeated its warning that some of those protective transfers had been mistaken for theft. On-chain review after publication put about $5.6 million sitting in the listed addresses, with the Cosmos Hub recovery wallet holding roughly $3.5 million and the Osmosis one about $1.04 million. Then the twist that reopens the whole count: blockchain firm Bitquery had traced about $6.01 million moving out of more than 44,000 social-login wallets and attributed the flows to an attacker — and all eight of the destination addresses Bitquery labelled as attacker collectors appear on Web3Auth's recovery list. In other words, the transfers everyone spent Saturday calling a $6 million theft may be, in large part, the rescue itself. What Sunday did not bring: a technical root-cause report, a confirmed figure for what the attacker actually took, a process or timetable for returning the rescued funds, or any reimbursement commitment. Social login remains paused; accounts created with a recovery phrase or a hardware wallet remain unaffected.
Why it matters: Yesterday the problem was that a user staring at an empty balance could not tell a robbery from a rescue. The list fixes the address question and breaks the headline number: if the eight "collector" wallets are the company's own, then the $6.01 million figure is a measure of how much money moved, not how much was stolen — and nobody, including the two companies, has yet published the split. That split is now the whole story, because it decides two very different bills: what Web3Auth owes in restitution, and what is simply waiting to be handed back. One timing detail deserves to stay on the record: the first transfers into those addresses date to November 6 at 20:52 UTC, roughly twenty minutes before Web3Auth's first public notice that anything was wrong. A rescue that starts before the warning is fast work; it is also why "trust the list" is a claim users are being asked to take on the company's word until an independent root-cause report exists. Seed-phrase and hardware users, again, are watching this from outside: the bug never touched a key the user held themselves.
Source: Web3Auth Nov 8 update via crypto.news — Keplr halts Google, Apple logins as $6M wallet drain hits Cosmos (recovery-address list, chain coverage, Bitquery figures) and FinanceFeeds — Web3Auth's $5.6M Keplr Rescue Clouds $6M Theft Estimate (Nov 8 list; ~$5.6M held in the listed addresses; no return timetable disclosed)
#3 — Binance is closing European accounts on December 31 — and charging what's left behind from November 29
What happened: Binance's long, slow European exit stopped being a process and became a pair of dates this weekend. Users in Spain, France and Poland told CoinDesk they had received emails urging them to withdraw their crypto — users in Italy reported similar notices — and a Binance spokesperson confirmed to CoinDesk that affected accounts "will be closed with effect from 31 December 2026," saying the exchange is "progressively restricting certain services for affected users" now that the transition period under the EU's Markets in Crypto-Assets rules (MiCA) has ended. Deposits into the affected accounts are already blocked; withdrawals of crypto and fiat stay open, and Binance says there is "no sudden freeze" and assets remain safe and accessible. The part with teeth is the fee schedule in the customer emails, which CoinDesk said it had not independently confirmed: from November 29, balances left in affected accounts face a monthly charge of 0.025% of the remaining crypto balance or 10 USDC, whichever is higher — the first charge lands within three days of November 29 and a second after December 24, deducted from USDC holdings first and then from other assets. An account holding less than the minimum fee loses its entire balance to it. Crypto still sitting in an account after December 31 will be treated as inactive and may be converted or transferred. The reason is a licence Binance does not have: MiCA requires authorisation in one member state to serve the whole bloc, Binance withdrew its Greek application on June 24 — a week after Reuters reported it would be rejected — it does not appear in the European Securities and Markets Authority's register of authorised providers (updated November 5), and its only statement on the fix is that it is "actively progressing" an authorisation pathway in a member state it has not named. Binance first emailed these users in June, and Binance France's national registration lapsed automatically on July 2.
Why it matters: Separate this from the hack — this bill arrives by regulation, not by theft, and it lands on a different set of users. The design of the exit deserves a hard look. A flat 10 USDC minimum means the fee is proportionally trivial for a $40,000 account and total for a $30 one: the smallest, least-attentive customers — the ones most likely to miss an email — are the ones whose balances can be consumed entirely by two monthly charges before the account even closes. Binance's own terms already allowed a dormant-account fee, which is the legal footing; the choice to use it, at these dates, on customers being pushed out by the exchange's own missing licence, is a business decision, and it converts "withdraw at your leisure" into "withdraw by November 29 or pay rent on your own money." For the industry, the bigger fact is simpler: eleven days after the largest theft in crypto history hit an exchange that is simultaneously telling its home regulator story in past tense — Europe's unified licence exists, the world's largest exchange is not on the register, and its European customers are being shown a deadline instead of a service.
Source: CoinDesk — Binance users in some European countries told to pull crypto before fees kick in, with accounts closing by year end (Nov 7; spokesperson confirmation, fee terms from customer emails, MiCA background)
Most-searched today
Prices are CoinGecko rolling 24h at check time (early Nov 9 UTC), which differ from the UTC-day closes used above.
- BTC — Bitcoin — $74,042 (−2.2%): Both a most-searched coin and tonight's story #1 — the Sunday slide to $73,761 and the billion-dollar liquidation flush are covered above, not repeated here.
- ETH — Ethereum — $2,107 (−5.5%): Also story #1 — ether closed the UTC day down 5.0% at $2,124 and took $448 million of the liquidations, nearly double bitcoin's share. Covered above.
- AERO — Aero — $0.566 (−6.2%): The catalyst is a migration that finished this week, not a Sunday event. Aerodrome and Velodrome have merged under Dromos Labs into a single cross-chain exchange called Aero — live since October 21 across seven chains — and the token swap is now done on the big venues: Coinbase converted balances November 2–4 and Kraken's window ran November 2–6. Old AERO converted 1:1 into the new AERO (new contract, same ticker); VELO converted at roughly 0.044, reflecting a supply split of 94.5% to Aerodrome holders and 5.5% to Velodrome holders, set by the two protocols' prior-year revenue (about $260 million against $15 million). The searches are holders checking new contracts and converted balances; the price drifted down with Sunday's market, with no fresh November 8 catalyst found. BogusAPY score: AERO is a token, not a coin — what backs it is DEX fee revenue the merged protocol says it will direct to stakers. The merger math was honest about the past ($260M vs $15M); what the token has to prove now is that one fee stream across seven chains earns what the Base-only stream did.
- JCT — Janction — $0.00873 (+191.8%): The catalyst is positioning, not news: a derivatives short squeeze. CoinMarketCap's analysis, citing TokenPost data, shows JCT was the only major listed asset with more short liquidations ($6.8 million) than long liquidations ($3.3 million) in the 24 hours ending November 9, on a positive funding rate — forced buy-backs doing the pushing — with 24-hour volume up roughly 960% to about $284 million. Independent coverage of the token's late-October surge had already found no clear fundamental catalyst. Ahead sits supply: a vesting cliff ends around November 10 and monthly releases begin, though published estimates of the size conflict (CoinMarketCap cites roughly 1.2 billion JCT a month from ecosystem, foundation and investor allocations; unlock trackers cite a much smaller November 10 figure). BogusAPY score: JCT is a token — JasmyLab's AI-compute layer, 50 billion total supply with only about 23% circulating. A squeeze can triple a price without selling a single GPU hour; the unlock schedule, not the squeeze, is the number that decides what the other 77% does to holders.
- HYPE — Hyperliquid — $73.89 (−4.2%): A dated November 8 catalyst: Binance restored HYPE withdrawals in its November 8 update (APT came back the same day), confirmed by co-CEO Yi He — HYPE had been among the last assets held back while Binance audited the HyperEVM chain after the October 29 breach, a delay the Hyperliquid community had publicly read as sabotage by a rival exchange. The other dated flow is older and cuts the other way: on November 5, Santiment reported four whale wallets had closed their HYPE longs entirely after the run to $97, realising roughly $5 million between them. BogusAPY score: HYPE is the native token of Hyperliquid's own layer-1. Sunday's news removes an access overhang — holders can finally move the asset off the exchange that competes with it — but the week's price action was set by whales distributing into the $97 high, not by withdrawal plumbing.
Source: trending list and prices — CoinGecko, checked Nov 9, 2026; Aero migration — Kraken support notice (updated Nov 5; 1:1 AERO, ~0.044 VELO, Nov 2–6 window) and merger reporting via BSC News/CoinMarketCap (Oct 21–22 launch, 94.5/5.5 split, revenue basis); JCT — CoinMarketCap's Janction price analysis (TokenPost liquidation data for the 24 hours ending Nov 9; unlock/cliff reporting — size estimates conflict between sources, as noted); HYPE — Binance's Nov 8 update via The Coin Republic (Nov 8) and Santiment via KuCoin News (Nov 5 whale exits).
Oversold corner
Universe: 50 largest cryptocurrencies by market cap (CoinGecko), excluding stablecoins and wrapped/pegged tokens; 14-day RSI from daily closes, checked early Nov 9 UTC. Prices are rolling 24h at check time.
- GRAM — $1.01 (−4.6%) — RSI 19.4
- DOT — $0.861 (−3.9%) — RSI 23.5
- RAIN — $0.00481 (−13.7%) — RSI 23.7
- ADA — $0.173 (−3.6%) — RSI 24.2
- WLFI — $0.0459 (−0.4%) — RSI 24.4
Tomorrow: Kinetiq's Elysium mainnet is scheduled to launch (Nov 9) — the Hyperliquid-aligned layer-2 whose sequencer-fee rule earmarks 50% of fees to buy and burn KNTQ.
Get posts like this by email: Subscribe to BogusAPY
Follow BogusAPY on X: @BogusAPY
Sources checked Nov 9, 2026, covering the Nov 8 UTC day (BTC/ETH/SOL closes, trending and RSI screener: CoinGecko; Fear & Greed: alternative.me; liquidation flush: CoinDesk's Nov 8 report on CoinGlass data — its intraday low of $73,761 and ether's sub-$2,100 print are CoinDesk's venue snapshots, Reuters via BusinessToday printed $73,708 for bitcoin on a different snapshot, and the two reports attribute the sell-off differently, CoinDesk to the Nvidia investigation and stalled US-Iran talks, Reuters to post-midterm regulatory fears; both attributions are reported as such, neither is settled; Keplr/Web3Auth: Web3Auth's Nov 8 update via crypto.news and FinanceFeeds — the ~$5.6M figure is FinanceFeeds' on-chain review of the published addresses, the ~$6.01M and 44,000+ wallet figures are Bitquery's, and the two are not reconcilable until the companies publish a loss split, which they had not done by Nov 8; Binance EU closures: CoinDesk's Nov 7 report — the Dec 31 closure date is a spokesperson confirmation, the fee terms come from customer emails CoinDesk said it had not independently confirmed, and no full list of affected countries or account types has been published by Binance; Binance hack status: no new laundering update dated Nov 8 was found — Elliptic's Nov 7 analysis (about $175M of altcoins converted into roughly 2,300 BTC; about $3.13B still in linked addresses; about $2.85B frozen) remains the latest tracker checkpoint). Not financial advice.
Comments
Post a Comment