DeFi News: Latest Decentralized Finance Updates

Updated November 4, 2026. The latest developments in decentralized finance, blockchain security, lending markets and digital asset infrastructure.

DeFi News is dominated by new findings from the October 29 Binance security breach and the continuing response of decentralized lending platforms. Binance published a detailed initial investigation on November 3, explaining how attackers gained unauthorized access to its wallet-signing infrastructure. The exchange says 98% of affected token assets have been replenished, while roughly $2.85 billion in assets has been frozen or intercepted.

Meanwhile, Aave continues to refine its risk parameters following the incident and has reported a major development milestone: more than $1.5 billion in Aave V4 deposits. Other important decentralized finance news includes Uniswap’s Aggregator Hooks, the proposed Aero merger, Ripple’s RLUSD expansion through Coinbase and new institutional tokenization projects. Crypto ETF outflows also remain relevant market context, although they should not be confused with direct capital movements in DeFi protocols.

Binance reveals how attackers compromised its wallet-signing infrastructure

Security incident on October 29, 2026; initial investigation published November 3. Binance has released a detailed report describing a coordinated attack against its internal wallet infrastructure. The company estimates that approximately $6.34 billion in digital assets was affected.

The latest report puts the value of assets frozen or intercepted at approximately $2.85 billion, subject to further reconciliation and market-price changes.

How did the Binance attack begin?

According to Binance’s initial findings, the attackers carried out a sophisticated campaign over several months, combining social engineering, malicious software and unauthorized access to internal systems.

One early stage involved a modified software installation during June. A later stage, in September, reportedly involved fake recruitment interviews designed to gain the trust of an engineer.

The targeted employee was eventually persuaded to download a coding assignment containing malicious software. Once executed, the code helped attackers compromise the work environment and explore access to other internal systems.

Binance says the attackers subsequently used compromised credentials, developer infrastructure and an internal AI tool as part of their efforts to reach the wallet operations environment.

By October 29, the attackers had gained unauthorized access to a service involved in signing wallet transactions.

What role did Ethereum’s EIP-7702 mechanism play?

The investigation identifies a particularly important technical element: the misuse of Ethereum’s EIP-7702 authorization mechanism.

EIP-7702 allows certain accounts to delegate execution capabilities to smart contracts under specific conditions. The attackers reportedly used the compromised signing service to create malicious authorizations that granted execution rights to an attacker-controlled contract.

As a result, suspending Binance’s conventional withdrawal infrastructure was not sufficient to stop every unauthorized transfer. Some onchain authorizations had already been established and required separate revocation procedures.

Binance also noted that its use of Multi-Party Computation, or MPC, introduced operational complexities into the emergency response because no single conventional private key was available to revoke those permissions immediately.

This was not an identified failure of Ethereum consensus. The event illustrates how compromised authorization systems can expose assets even when the underlying blockchain operates as designed.

Has Binance recovered 98% of the stolen funds?

No. In its November 3 report, Binance said that 98% of the impacted token assets had been replenished, referencing its October 31 reserves position.

Replenishment means the exchange has mobilized corporate resources and purchased assets to restore backing for affected customer balances. It is not a measure of how much stolen cryptocurrency has been recovered from attacker-controlled addresses.

Binance says it has allocated sufficient resources to cover the full financial impact on users and is continuing to acquire remaining, less-liquid tokens.

The exchange has rebuilt affected wallet infrastructure, revoked compromised access credentials and introduced additional security controls. An independent cybersecurity review is also planned.

Are withdrawals available again?

The exchange began restoring withdrawals on selected networks on November 1. It announced a second phase on November 3, covering additional assets across networks including Ethereum, BNB Chain, Solana, XRP Ledger, Base, Optimism and Arbitrum.

Withdrawals are being restored asset by asset and network by network. Users should check the current availability of each withdrawal route rather than assume a complete platform-wide reopening.

The FBI has attributed the attack to North Korea’s TraderTraitor operation, an attribution also referenced by Binance.

This incident has become a major DeFi News story because stolen assets can quickly move through decentralized exchanges, bridges and lending platforms. It raises questions about wallet authorization, operational security and the exposure of protocols to funds originating from external attacks.

Binance’s November 3 security investigation.

Aave adjusts risk controls as V4 deposits surpass $1.5 billion

The Binance incident prompted Aave’s risk teams to introduce emergency restrictions across lending markets. On October 29, guardians initially froze 175 V3 reserves across 16 networks and 117 V4 reserves across four networks.

The response followed activity involving an address associated with the attacker. The address had supplied approximately $60 million in USDT to Aave V3 Ethereum and borrowed 19,762 WETH, worth around $44.6 million when the position opened.

LlamaRisk initially described the position as overcollateralized. The concern was not that the Aave contracts themselves had necessarily been compromised, but that potentially stolen assets could be used to create further exposure across lending markets.

Are Aave markets still operating under emergency restrictions?

The initial emergency freeze was progressively lifted, with selected collateral restrictions retained.

Affected V3 reserves were unfrozen with temporary loan-to-value restrictions. Setting a collateral asset’s LTV to zero prevents it from generating new borrowing capacity, although other permitted functions may remain available depending on the market.

Risk stewards also reduced unused borrowing capacity and adjusted interest-rate parameters to limit the ability to establish large new positions immediately after reopening.

On October 31, LlamaRisk recommended restoring several Slope2 interest-rate settings across V3 and V4 reserves.

Slope2 determines how sharply borrowing rates rise once a reserve’s utilization exceeds its optimal threshold. A restoration recommendation does not automatically mean every parameter change has already been implemented.

This episode demonstrates the importance of adaptive risk management in decentralized finance. A protocol may need emergency controls because of an incident originating outside its own smart contracts.

Aave V4 reaches a new deposit milestone

Separate from the security response, Aave Labs published an October development update on November 2.

The report states that Aave V4 surpassed $1.5 billion in deposits during October, while cumulative borrowing volume across Aave reached $1.1 trillion.

The cumulative figure reflects historical activity rather than the current outstanding loan balance.

The update also highlights Sentora as V4’s first external curator and describes work on additional markets and collateral assets.

These include syrupUSDC on Arc, USDe on Avalanche and a Babylon integration intended to support native Bitcoin as collateral.

For lenders and borrowers, the key development is the growing flexibility of V4’s market structure. External curators and differentiated risk configurations may help support more specialized lending opportunities.

However, flexibility also creates responsibilities. Users need to understand which assets they supply, which entities manage risk parameters and what liquidity may be available during periods of stress.

The combination of emergency management and ongoing development is central to latest DeFi news: sustainable growth depends on both adoption and the ability to manage risk.

Aave Labs’ official development update.

Uniswap Aggregator Hooks expand decentralized trading liquidity

Launched October 22, 2026. Uniswap Labs introduced Aggregator Hooks on Ethereum, Base and Robinhood Chain, allowing Uniswap v4 to route trades through external liquidity sources.

Instead of relying exclusively on liquidity deposited into Uniswap pools, the new routing system can incorporate participating external venues into swap execution.

Seven sources were available at launch. According to Uniswap Labs, they represented more than 90% of decentralized exchange activity on the supported networks under its methodology.

How do Aggregator Hooks change the trading experience?

Traders can potentially access a wider range of prices and liquidity routes without manually comparing several decentralized exchanges.

The approach may improve execution efficiency, particularly where liquidity is fragmented across different pools or trading venues.

Nevertheless, there is no guarantee that each transaction will receive a better price. Slippage, network costs, routing complexity and smart-contract risks still matter.

This innovation is relevant to decentralized finance news because it changes Uniswap’s position within the DEX market. The protocol is increasingly competing not only as a liquidity venue but also as an aggregation and execution infrastructure.

Aerodrome and Velodrome announce a multichain merger under Aero

Announced October 21, 2026. Aerodrome and Velodrome proposed combining their ecosystems under the Aero brand.

The plan includes changes to token incentives, governance positions and liquidity infrastructure across several blockchain networks.

Existing AERO and VELO tokens are expected to migrate into the new structure, while governance positions are to be reorganized into sAERO.

The merger also introduces plans for Metaswaps and Slipstream V3, although roadmap announcements should be distinguished from completed deployments.

For decentralized finance, the strategic issue is whether a coordinated multichain liquidity system can attract more trading volume while maintaining competitive prices and sustainable incentives.

Token holders should consult official migration instructions and avoid unsolicited links requesting wallet signatures.

Ripple’s RLUSD stablecoin expands through Coinbase

Announcement dated October 28, 2026. Coinbase and Ripple expanded access to the RLUSD dollar stablecoin through Coinbase Prime, Coinbase Exchange and the Coinbase app for eligible customers.

Deposits and withdrawals can use XRP Ledger, Ethereum and Base, depending on availability and regional restrictions.

The announcement also outlined future plans for RLUSD collateral support on selected Coinbase services. These planned features should not be confused with currently available functions.

Why does RLUSD matter to decentralized finance?

Stablecoins are an essential part of lending markets, decentralized exchanges, derivatives and onchain settlement.

Additional distribution channels can improve access to a stablecoin, but they do not automatically establish deep liquidity or significant borrowing demand in DeFi applications.

The important question for future decentralized finance news is whether RLUSD gains measurable usage across protocols and networks, beyond its availability on centralized platforms.

zkLink Nova bridge incident highlights cross-chain verification risks

Incident reported October 28–29, 2026. Security researchers reported an attack involving the zkLink Nova bridge’s withdrawal-verification process.

Early estimates placed losses at approximately $780,000–$800,000. The project introduced emergency measures affecting withdrawals and certain network functions.

Cross-chain bridges depend on mechanisms that authenticate messages and verify that funds have been transferred or locked correctly on another network.

A failure in this process can allow unauthorized transfers, even if the underlying blockchain continues operating correctly.

Complete restoration and the final loss amount have not been established in the information reviewed for this edition.

The incident is a reminder that interoperability introduces its own security assumptions. Users should evaluate not only the chains involved but also the contracts and verification systems connecting them.

Bitcoin and Ethereum ETFs record a third consecutive session of outflows

US trading session of November 3, 2026. Spot Bitcoin ETFs recorded $115.6 million in net outflows, while Ethereum spot ETFs registered $85.3 million in net outflows, according to Farside Investors.

These figures follow significant withdrawals on October 30 and November 2.

Are Bitcoin ETF outflows accelerating?

No. Although the direction remains negative, the pace of withdrawals has slowed considerably.

Bitcoin ETFs recorded $643.2 million in net outflows on October 30, followed by $398.6 million on November 2 and $115.6 million on November 3.

The three-session total amounts to $1.1574 billion in net outflows.

On November 3, BlackRock’s IBIT accounted for approximately $95 million of withdrawals, while Bitwise’s BITB attracted $21.9 million and Fidelity’s FBTC around $6.8 million.

The data therefore show divergence among funds rather than identical behavior across every institutional investor.

What about Ethereum ETFs?

Ethereum ETFs recorded $155.7 million in net outflows on October 30, $139.7 million on November 2 and $85.3 million on November 3.

The combined three-session outflow reached $380.7 million.

ETF flows are important market indicators, but they measure subscriptions and redemptions of listed financial products. They are not a direct measure of total value locked, lending deposits or trading activity across decentralized protocols.

For DeFi News, the distinction matters because cryptocurrency market sentiment and actual protocol adoption can develop differently.

Farside Investors ETF flow data.

Explore our Bitcoin price analysis, technical levels and fundamentals

Solana Alpenglow targets faster transaction finality

Announced October 21, 2026. Solana reported the activation of Alpenglow on mainnet-beta, introducing changes designed to reduce consensus finality times.

Developer communications described a potential improvement from approximately 12.8 seconds to 150 milliseconds under specified conditions.

Faster finality may benefit decentralized exchanges, lending applications and payment systems by reducing settlement uncertainty.

However, consensus finality should not be confused with end-to-end transaction performance. Wallet infrastructure, congestion and application design can still influence user experience.

The development is particularly relevant to protocols that rely on frequent trading, fast collateral adjustments or rapid settlement.

Other important decentralized finance developments

Institutional tokenization gains momentum

JPMorgan announced the expansion of its institutional JPMD deposit token to Ethereum on October 19, while Aviva Investors and Ripple introduced a tokenized share class of a sterling money-market fund on XRP Ledger on October 26.

The Aviva initiative included £50 million invested in the tokenized share class. The broader traditional fund’s approximately £22 billion in assets should not be described as fully tokenized.

These announcements highlight the growing use of blockchain infrastructure for institutional settlement and fund ownership records.

Stablecoin regulation and financial products

Switzerland’s FINMA approved a publicly accessible, Swiss-domiciled Bitcoin investment fund on October 20.

In the United States, the OCC published a final rule related to payment stablecoins and the GENIUS Act on October 21, with an announced effective date in January 2027.

These developments may affect the broader environment in which regulated stablecoins and blockchain-based financial products operate.

Ethereum network development

The Ethereum Foundation announced a delay to the Glamsterdam activation planned for the Hoodi testnet on October 22.

The postponement concerned a testing milestone, not an Ethereum mainnet outage. It illustrates the importance of compatibility testing before changes are introduced to production networks.

Earlier security incidents

Initia halted its network on October 23 following a suspected token-minting vulnerability. CoinDCX acknowledged a loss involving approximately 15.99 million USDT, while hardware-wallet manufacturer Keystone disclosed exposure of certain customer order details.

These incidents remain relevant to operational security, although they should not be presented as newly occurring events on November 4.

DeFi News timeline: October 21–November 3, 2026

DeFi News: frequently asked questions

What is the biggest DeFi-related development on November 4?

The most significant update is Binance’s November 3 investigation into its wallet security breach. It provides new details about the attack and explains why emergency risk controls were introduced across lending markets.

Has Binance recovered 98% of the stolen cryptocurrency?

No. Binance says 98% of impacted token assets were replenished using company resources. This is different from recovering stolen assets. Approximately $2.85 billion was reported frozen or intercepted.

Did hackers exploit an Ethereum protocol vulnerability?

Binance describes unauthorized access to its wallet-signing service and misuse of EIP-7702 authorizations. The report does not establish a failure of Ethereum consensus.

Did Aave itself suffer a smart-contract exploit?

The emergency restrictions were introduced after an address associated with the Binance attacker interacted with Aave. The event does not, by itself, demonstrate a vulnerability in Aave’s lending contracts.

How large is Aave V4?

Aave Labs reported on November 2 that V4 had exceeded $1.5 billion in deposits during October, alongside further integrations and additional market-curation capabilities.

What changed at Uniswap?

Aggregator Hooks allow Uniswap v4 to route swaps through participating external liquidity sources, expanding the execution options available to traders.

What were the latest Bitcoin and Ethereum ETF flows?

On November 3, US spot Bitcoin ETFs recorded $115.6 million in net outflows, while Ethereum ETFs registered $85.3 million in net outflows.

Are cross-chain bridges still a significant DeFi risk?

Yes. Bridge security depends on smart contracts, message verification and operational safeguards. The zkLink Nova incident illustrates how weaknesses in these systems can expose funds.

What matters next for DeFi News

The latest developments highlight the importance of security across the entire blockchain financial ecosystem. Binance’s investigation shows how attacks on internal infrastructure can lead to significant unauthorized asset transfers, while Aave’s emergency response demonstrates how external incidents can influence decentralized lending markets.

Beyond these risks, the expansion of Aave V4, Uniswap’s routing infrastructure, stablecoin distribution and institutional tokenization remains central to decentralized finance news.

ETF flows continue to provide useful context for digital asset markets, but the long-term evolution of decentralized finance will depend on secure infrastructure, reliable liquidity, sustainable protocol economics and actual demand for blockchain-based financial services.

More on MediasNet

Figures reflect information available on November 4, 2026. Security losses remain subject to revision. ETF flows measure fund subscriptions and redemptions, not direct changes in cryptocurrency prices or DeFi deposits.

Risk warning: this article is for informational purposes only and does not constitute investment advice. Cryptocurrencies, stablecoins, smart contracts and decentralized finance protocols involve market, liquidity and security risks.