The day in one breath: Washington moved in both directions on Friday — FinCEN cut a top-20 exchange, MEXC, off from the dollar system over $16 billion in alleged dirty flows while killing a plan to track $250 transfers — the Binance hackers quietly turned $124 million of the loot into bitcoin as withdrawals reopened again, and a jobs report that smashed every forecast still could not get the ETF bid back: bitcoin ETFs bled $412 million for a second straight day. Zcash's NU7 upgrade went live in the small hours and ZEC closed up 3.3%.
Context: BTC closed $75,775 (−0.3%) on Nov 6 (CoinGecko daily close) — Fear & Greed 25 (Extreme Fear).
#1 — Washington cut MEXC off from the dollar system. The bill it wrote says $16 billion.
What happened: The Treasury's Financial Crimes Enforcement Network issued a final order on Friday, as part of Operation Economic Outcast, that will bar every covered US financial institution from processing any funds transfer — convertible virtual currency included — to or from MEXC Global. FinCEN made the order under section 9714(a) of the Combating Russian Money Laundering Act, finding the Seychelles-incorporated exchange a financial institution of "primary money laundering concern in connection with Russian illicit finance," and chose the strongest tool that section offers: an outright transmittal ban, not extra reporting. The numbers behind it cover five years, May 2021 to May 2026: the Treasury's release says MEXC facilitated at least $16 billion in illicit transactions tied to Iranian, North Korean and Russian sanctions evasion and cybercrime (the order's own tally is $16.7 billion), including nearly $1.5 billion of Russian sanctions-evasion exposure — $232 million of it direct dealings with US-, EU- or UK-sanctioned entities — about $1 billion in direct transactions with more than 40 Iranian exchanges, and roughly $22 million linked to Iran's Central Bank and the IRGC's Qods Force. Treasury says MEXC was still processing trades with sanctioned Russian exchange Garantex and its successor Grinex as recently as June 2026, more than four years after Garantex was designated, despite MEXC's stated AML controls — controls Treasury called severely deficient. This is not a small venue: Treasury counts MEXC among the world's 20 largest exchanges, processing more than $1 billion a day with about $5 billion in reserves as of September 2026 (DefiLlama put its assets near $4.48 billion on Friday). The ban is not yet in force: it takes effect 30 days after the order is published in the Federal Register, and as of Friday evening that publication was still pending, so no calendar date exists yet. It has no cessation date. MEXC said it is aware of the order, is reviewing it with its legal and compliance teams, and is operating normally with user assets secure. The same afternoon, the same two agencies moved the other way: FinCEN and the Federal Reserve filed the withdrawal of their 2020 proposal to cut the cross-border recordkeeping and Travel Rule threshold from $3,000 to $250 — the $3,000 line stays, and the agencies say no final rule will issue without fresh public comment.
Why it matters: Follow who actually has to move. The order binds US banks and money transmitters, not MEXC's users directly — it is not an OFAC designation, it blocks no property, and it tells no one to withdraw. But an exchange that cannot receive or send a dollar through the US system loses its dollar rails, its US-facing banking partners, and any counterparty whose compliance department reads FinCEN orders for a living. That is the point of the tool: Treasury picked the one measure that closes the door instead of asking for more paperwork on the way through it. The $16 billion also needs reading straight: it is alleged illicit flow over five years — money that passed through — not funds seized, not a fine, and not customer money frozen. And Friday's pairing is the tell about where the line now sits: the same government that killed a plan to sweep $250 transfers into reporting spent the day cutting off one named exchange over sanctioned-actor flows. Targeted and named is the enforcement model; blanket and small is the one that just got shelved.
Source: primary — FinCEN — Operation Economic Outcast Severs MEXC Global's Access to the U.S. Financial System (Nov 6, 2026) and the FinCEN order figures via Bitcoin Magazine and The Edge's order breakdown; coverage — The Block — Treasury cuts off MEXC Global over alleged $16 billion in transactions linked to Iran, North Korea and Russia; Cointelegraph — US Treasury Blocks MEXC Over Alleged $16B in Illicit Transactions (DefiLlama asset figure; MEXC response); Travel Rule withdrawal — Federal Register document 2026-22809 (filed Nov 6, publication scheduled Nov 9) via BlockchainReporter and KuCoin News
#2 — The Binance loot is becoming bitcoin. $124 million of it already has.
What happened: Eight days after $6.43 billion left Binance, Elliptic's Friday update traced what the pile is turning into. By 08:45 UTC on November 6, about 1,650 BTC — roughly $124 million — sat in newly created bitcoin addresses funded from the theft, almost twice the figure a day earlier, on top of the $1.48 billion in bitcoin stolen directly in the attack. The converted chunk came mostly from other stolen coins: the largest piece was stolen XRP swapped through THORChain (about $50 million swapped by early Friday, with roughly $226 million remaining), and nearly all of the stolen Solana has already been mixed, swapped or bridged into bitcoin. The full ledger, per Elliptic: $2.85 billion frozen or seized (44% of the haul, most of it stablecoins stopped by their issuers), $3.11 billion still sitting in addresses linked to the theft, and only a negligible amount judged to have actually been cashed out — across more than 20,000 wallets, 16 blockchains, at least 36 services and at least 65,000 transactions. Elliptic expects the attackers to swap the rest of the ether for bitcoin in small batches before trying to exit through OTC brokers and Chinese money-laundering networks, and it pushed back on the week's speculation directly: the laundering is "highly complex and clearly automated," but nothing shows an AI agent making decisions. On the exchange's side of the ledger, Binance's ninth recovery update reopened withdrawals for more assets from 04:00 UTC Friday, each network-asset pair clearing its own security and readiness checks in demand order, and said it is working to reopen HYPE, INJ, APT, PLASMA (XPL), NEAR and LTC by the end of next week, plus all tokens on the networks already restored. One date passed quietly: the zero-knowledge proof for the 44-token reserves snapshot, which Binance's own estimate put at 50 to 60 hours of computation from the November 4 snapshot — due on November 6 — was not announced in Friday's update or in the day's reputable coverage.
Why it matters: The conversion is the strategy, and it explains itself. A stolen stablecoin can be frozen by its issuer with a phone call, which is exactly how 44% of this haul got stopped. Bitcoin, the energy-backed currency, has no issuer to call — once value is in BTC in fresh addresses, the freeze tool is gone and all that is left is watching the exits. That is why "negligible cashed out" cuts both ways: the money is trapped, but it is trapped in the one asset the thieves chose precisely because it cannot be switched off. For Binance users, keep the two ledgers separate, because the exchange's own language blurs them: replenishment — Binance replacing stolen assets from its own funds, still stated at about 98% — is not recovery. The stolen coins were never recovered; they are being laundered in public while the replacement bill sits on Binance's balance sheet. And the missing proof matters more each day it slips: a withdrawal reopening is a claim a user can test, but the 44-token proof is the only document that tests the "98% replenished, backed at least 1:1" claim for everyone at once — and Friday came and went on Binance's own clock without it.
Source: The Block — Elliptic says Binance hackers swapped stolen tokens for $124M in bitcoin, exchange plans more withdrawal reopenings (Nov 6, Elliptic data; author Tom Robinson's report linked therein); bucket totals and wallet counts also via Elliptic's report as republished by CoinStats; withdrawal phase and next-week targets — Binance Recovery Update #9 (Nov 6) via Binance Square and The Block
#3 — Jobs smashed every forecast. Bitcoin held. The ETF bid sold anyway.
What happened: The October jobs report landed at 13:30 UTC and beat the highest forecast on the street: 165,000 jobs added against expectations of 59,000 to 65,000, unemployment down to 4.1% against 4.2% expected, September revised up to 60,000 from 29,000, and a combined +84,000 of upward revisions across two months. Markets repriced the Fed within minutes: the priced chance of a December rate hike jumped from about 67% to roughly 77–79% on CME FedWatch, the 10-year Treasury yield rose to about 4.86–4.88%, and the dollar index pushed to about 102.2. Gold took the cleanest hit, dropping from about $4,062 to $4,032 before recovering near $4,050. Bitcoin whipsawed — above $76,100, down to about $75,600, settling near $75,800 — and closed the UTC day at $75,775, down 0.3%. Stocks bounced, but narrowly: the Nasdaq rose 1.09% and the S&P 500 0.31% while the Dow fell 0.46% and the equal-weighted S&P actually declined, with chips doing the lifting (AMD +11.0%) a day after the Nasdaq's worst session since April 2025. Ether closed flat at $2,236 and Solana up 0.9% at $90.06. The day's score came after the close, in the flow prints: US spot bitcoin ETFs recorded $411.9 million of net outflows for Friday's session — BlackRock's IBIT alone was −$403.0 million, Fidelity's FBTC the sole inflow at +$42.8 million, with Bitwise's BITB −$20.5M, Ark's ARKB −$20.1M and Grayscale's GBTC −$11.1M — and ether ETFs lost another $93.19 million (BlackRock's ETHA −$90.76M). Stacked on Thursday's −$430.2 million, that is about $842 million out of bitcoin funds in two sessions.
Why it matters: Friday separates the price from the bid. The price held because the stock bounce gave risk a bid and spot sellers had already done their work on Thursday — bitcoin kept the $75,000 area CoinDesk flagged as weekly support. But the slower money voted the other way for a second straight day, and the concentration is the story again: on Thursday the complex's outflow was spread across Fidelity and BlackRock; on Friday it was essentially one fund, IBIT, redeeming $403 million while the price was stable. That is not panic — panic was Thursday. It is allocators using a bounce to leave, two days in a row, in the fund that was the marginal buyer of the last two years. A hot jobs report that pushes a December hike toward four-in-five odds gives them the macro excuse; the flow tape says they were already holding it. Bitcoin ended the week where Thursday's rout left it, and the question the next print answers is whether $842 million in two days was the exit or just the start of it.
Source: jobs report and market reaction — Bureau of Labor Statistics figures via BeInCrypto — US Jobs Smash Forecasts, Sending Gold and Bitcoin Lower and Reuters via Market Briefer's Global Close (index closes, revisions, hike odds); BTC/ETH/SOL closes — CoinGecko; bitcoin ETF flows — Farside Investors via Blockchain.News — Bitcoin ETFs: $411.9M Net Outflow on Nov 6 (cross-checked against the Farside final table); ether ETF flows — SoSoValue via TokenPost — Ethereum spot ETFs post second day of outflows as $93.19 million exits
Most-searched today
Prices are CoinGecko rolling 24h at check time (early Nov 7 UTC), which differ from the UTC-day closes used above. Bitcoin was #2 on CoinGecko's searched list and is story #3 above, so the third slot below goes to the next name down the list.
- COGE — COGE COIN — $0.0153 (+490.2%): The catalyst is the launch itself, and it is one day old: COGE is a cat-themed memecoin on Solana that launched through Pump.fun on November 5, graduated to PumpSwap, and ran to an all-time high of $0.0195 in the early hours of November 7. That is the whole story — a Bitrue review on November 6 found no official website, no whitepaper, no published tokenomics, no roadmap and no verified team account for the contract it examined, and safety scans disagreed with each other (one passed it 13 of 13; another scored it 70/100 for scam risk and flagged creator-linked wallet sales). Several unrelated tokens also trade under the COGE name, so the contract address is the only identity it has. BogusAPY score: COGE captures nothing — no fees, no product, no revenue claim. It is a day-old attention token whose price is the search interest, and a +490% day on a token with no published supply rules is a description of the risk, not a rebuttal of it.
- PENGU — Pudgy Penguins — $0.00657 (−0.9%): No fresh catalyst — attention only, riding brand noise a few days old. The dated items behind the searches are the November 3 report that SoFi (15M+ members) made PENGU available to buy, sell and hold in its app, and the Vibes trading-card game's Table for Two set, whose free booster-box claim for NFT holders closed on November 6 — a claim that pays NFT holders in cards, not PENGU holders in anything. The token itself round-tripped with the week's rout (down about 10.5% in one November 6 snapshot) and sits about 90% below its December 2024 all-time high of $0.0684. BogusAPY score: PENGU is a token on Solana attached to a real consumer brand — toys, trading cards, retail shelves. The brand's product revenue belongs to the company, not the token; what a PENGU holder owns is the attention, and this week's attention was mostly the market falling.
- PEARL — Pearl — $1.76 (+7.1%): Still riding two dated catalysts, both named in this brief three nights ago: the November 3 addition of PEARL to NEAR Intents and near.com (three days old — swaps into and out of PEARL from 35+ chains, no bridge), and underneath it the October 19 addition to Coinbase's asset-listing roadmap (18 days old, still no listing date). PEARL was also the top-100's leading gainer in Friday's market snapshots (up about 13% intraday at one read) before settling to +7.1% rolling. No November 6 announcement from the project was found. BogusAPY score: PEARL is the coin of its own proof-of-useful-work layer-1 chain — a new swap route widens who can buy it but pays the coin nothing directly, and the roadmap listing that the price is really waiting on remains a roadmap listing.
Source: trending list and prices — CoinGecko, checked Nov 7, 2026; COGE launch and review — Bitrue — What Is COGE Coin? Is It Legit? (Nov 6); PENGU — CoinStats (Nov 6; SoFi availability reported Nov 3), Bored Ape Gazette (Nov 6; claim deadline) and CoinMarketCap analysis (Nov 6); PEARL — TokenPost (Nov 3, Nov 5) and Market Briefer (Nov 6 snapshots).
Oversold corner
Universe: 50 largest cryptocurrencies by market cap (CoinGecko), excluding stablecoins and wrapped/pegged tokens; 14-day RSI from daily closes, checked early Nov 7 UTC. Prices are rolling 24h at check time.
- HBAR — $0.0679 (−0.8%) — RSI 30.0
- SOL — $90.18 (+0.6%) — RSI 30.1
- GRAM — $1.10 (+1.0%) — RSI 31.0
- RAIN — $0.00578 (−4.6%) — RSI 31.0
- XRP — $1.17 (−2.0%) — RSI 31.5
Get posts like this by email: Subscribe to BogusAPY
Follow BogusAPY on X: @BogusAPY
Sources checked Nov 7, 2026, covering the Nov 6 UTC day (BTC/ETH/SOL/ZEC closes, trending and RSI screener: CoinGecko; Fear & Greed: alternative.me; MEXC order: FinCEN press release and order (primary) via FinCEN.gov, Bitcoin Magazine and The Edge's order breakdown — the Treasury release's "at least $16 billion" and the order's $16.7B tally are the same five-year window counted two ways, and MEXC's operating-normally response is the exchange's own statement; Travel Rule withdrawal: Federal Register doc. 2026-22809 via BlockchainReporter and KuCoin News; Binance laundering: Elliptic via The Block and CoinStats — bucket figures are Elliptic's running estimates at slightly different snapshot times and do not reconcile exactly to the $6.43B total; Binance withdrawals and proof timing: Binance Update #9 via Binance Square and The Block; jobs report: BLS via BeInCrypto and Reuters via Market Briefer — hike-odds prints range 77–79% across the day's reports; ETF flows: Farside Investors via Blockchain.News for bitcoin (final table cross-checked), SoSoValue via TokenPost for ether — one tracker using a different source showed a smaller ether figure; the SoSoValue print is used for consistency with this series). The Binance hack remains a developing story and figures may be revised. Not financial advice.
Comments
Post a Comment