Crypto: resilient markets, security under pressure, tightening regulation

On the morning of November 9, 2026 in the eurozone, bitcoin trades around 67 200–67 400 €, a limited decline of a few percent compared with the previous week. This resilience comes as Binance, the leading global exchange, has just suffered a hack described as a “mega‑hack,” valued at several billion. For now, BTC’s reaction remains contained, far from the sharp drops observed during previous confidence shocks affecting centralized infrastructures.

Ether is trading around 1 900 €, down roughly 5 to 15 % over a month depending on the venues, a movement consistent with the reference of about 1 899 € (2 130 USD) provided to readers. This decline remains significant but does not reflect generalized panic. It fits more with a broader adjustment among large crypto capitalizations than an isolated reaction to the Binance hack, even though the risk environment remains elevated.

Market data indeed confirm a more diffuse retreat: the GMCI 30 index, a barometer of large capitalizations, lost nearly 7 % over the period surrounding Zcash’s NU7 upgrade. This correction partially precedes Binance’s mega‑hack, suggesting that the confidence shock linked to the attack overlays an already more cautious phase for investors, rather than being its sole trigger.

According to available estimates, Binance’s net outflows reached about 3,2 Mds € (3,6 Mds USD) in the days following the hack, before a gradual normalization of flows. More than half of the stolen amounts, i.e. over 2,8 Mds € (around 3 Mds USD), would moreover have been frozen, limiting the direct impact on short‑term liquidity. The market’s ability to absorb this shock without a marked collapse in prices will be a key test of its structural maturity.

In early November 2026, Binance acknowledged that about €5,6 Mds (6,3 Mds USD) had been stolen, a historic record for a crypto-asset hack. According to initial technical analyses, the attackers conducted a months-long social engineering campaign based on fake job interviews. An engineer’s laptop was reportedly compromised through malware, enabling the attackers to obtain internal access tokens and progressively prepare the assault without immediately triggering security alerts.

The investigation, supported by the FBI and several blockchain analytics firms, attributes the operation to the North Korean group TraderTraitor, already linked to other massive crypto-asset thefts. On October 31, 2026, U.S. authorities asked the DeFi community to block several hundred BTC, ETH and SOL addresses tied to the hack. This request illustrates the rise of coordinated on-chain freezing measures, but also their practical limits in the face of the rapid fragmentation and laundering of stolen funds.

At the platform’s reopening, user withdrawals reportedly reached around €3,2 Mds (3,6 Mds USD), a sign of immediate loss of confidence. Binance says it managed to freeze more than €2,8 Mds (≈ 3 Mds USD) and commits to cover the balance from its own funds. While this absorption capacity currently limits direct client losses, it raises the broader question of the financial strength of other platforms in the event of a comparable shock, which may be less well-capitalized or less liquid.

The impact goes beyond the crypto sphere: U.S. banking regulators contacted certain institutions to check for potential vulnerabilities related to the growing interconnections between crypto and traditional finance. This preventive approach, reported in early November 2026, suggests increased concern about operational risk and reputational risk for banks exposed to players like Binance, directly or through custody, payment, or financing services linked to digital assets.

The Binance hack comes amid an already tense context marked by other significant incidents. In early November 2026, Brazilian exchange Mercado Bitcoin announced a theft of about €41,3 M (46,3 M USD), confirming that operational risk remains widespread across the crypto ecosystem. Taken together, these events feed debates on tightening governance, cybersecurity and transparency requirements for both centralized platforms and interconnected DeFi protocols.

Since MiCA came into force, the European Union has a harmonized framework for crypto-asset issuers and service providers (CASPs). The regulation covers, in particular, requirements for own funds, governance and client protection. The provisions relating to transitional periods ended on 1 July 2026 for most actors, according to ESMA. Some categories that were not active before the end of 2024 could already no longer provide crypto services without MiCA authorization, marking a regulatory turning point for access to the European market.

In a statement published in 2026, ESMA reminds that CASPs must have orderly resolution plans in place to manage a service interruption or failure without jeopardizing clients’ holdings. The authority also emphasizes the importance of strict segregation of client assets and providers’ own funds. Users are encouraged to check whether their provider is duly MiCA-authorized; otherwise they cannot benefit from the safeguards set out in the regulation regarding custody and return of crypto-assets.

On 8 October 2026, ESMA published an opinion specifically targeting services related to stablecoins, whether asset-referenced tokens (ARTs) or electronic money tokens (EMTs). The authority sets out its prudential expectations for services provided around stablecoins that do not comply with MiCA. It calls on competent national authorities to limit, or even prohibit, these activities where necessary. The stated objective is to prevent circumvention of the European framework, as stablecoins play a key role in crypto market liquidity.

ESMA stresses that unauthorized providers cannot offer the guarantees imposed by MiCA, notably in terms of governance, own funds and conflict of interest management. European clients who continue to use stablecoins issued or serviced outside MiCA’s scope face lower protection in the event of operational problems or insolvency. National authorities are encouraged to strengthen oversight, particularly on partnerships between European actors and foreign platforms not regulated within the EU.

Beyond MiCA, market analyses highlight the combined effect with the DORA regulation on digital operational resilience. According to PwC’s Global Crypto Regulation 2026 report, European CASPs will need to invest significantly in compliance, risk management and cybersecurity over the next 12 to 24 months. This regulatory upgrade should accelerate the professionalization of the sector in Europe, while increasing compliance costs for providers wishing to continue offering stablecoin-related services on the single market.

On November 6, 2026, Zcash activated the major NU7 upgrade on its mainnet, which reduces block time by roughly a factor of three and introduces new cryptographic parameters. This change aims to increase transaction throughput while updating the mathematical foundations of the protocol, in a context where privacy‑focused networks face heightened regulatory pressure. NU7 illustrates Zcash’s strategy: favor deep improvements in security and performance, even when market attention is elsewhere.

At the time of this activation, the GMCI 30 index, which tracks the 30 largest digital assets, showed a decline of about 6,9 %, according to reported data. This underperformance highlights the contrast between a broadly bearish market and sustained technical activity across multiple protocols. Investors must therefore contend with a growing decoupling between infrastructure advances and price trajectories, in an environment where bitcoin trades around 66 428 € and ether near 1 899 €, based on available market benchmarks.

On the Enjin side, the ecosystem is preparing to deploy the “Fort Canning” upgrade on its Relaychain on Monday, November 9, 2026, around block no. 18 059 100. This update is meant to adapt the network’s coordination layer to the needs of applications, notably in gaming and digital assets. It fits into a broader trajectory where technical governance aims to be less dependent on a central team, with increased involvement of token holders in protocol evolution decisions.

From November 16, 2026, changes on Enjin’s Matrixchain must therefore go through the on‑chain governance system OpenGov. Concretely, future network changes will need formal community approval via this mechanism, which increases decision transparency at the cost of potentially longer cycles. This shift comes as other DeFi networks have recently suffered security incidents, noted by specialized tracking data, and rekindles the debate between iteration speed, operational robustness and shared responsibility.

Recent vulnerabilities observed across several DeFi protocols illustrate the ongoing tension between rapid innovation and security. In this context, the choices made by Zcash and Enjin highlight two complementary axes: on one hand, the hardening of cryptographic primitives and optimization of network parameters; on the other, the opening of governance and formalization of decision processes. For observers, these behind‑the‑scenes movements remain structural indicators, even if their effects on valuation rarely manifest in the short term.

On 29 October 2026, the European Central Bank kept its deposit rate at 2,5 %, while noting Christine Lagarde’s early resignation effective 7 February 2027. This announcement opens a period of uncertainty about the future orientation of monetary policy in the euro area. European heads of state must decide by a summit scheduled in December 2026 on the appointment of the next president of the ECB, as well as other key positions, including the chief economist.

This transition phase comes as the ECB is already operating in an environment of high real rates to contain inflation. According to research based on OIS curves and futures contracts, monetary policy expectations for the ECB and the Fed remain oriented toward high rates at least through the end of 2026. For markets, this means persistently restrictive financial conditions, a more demanding risk premium and more expensive access to leverage, including for crypto investors.

In the United States, the Federal Reserve, at its October 2026 meeting, kept its policy rate in a range of 3,75–4,00 %, with a stance still considered restrictive in the face of inflation. The year’s final meeting, scheduled for 8–9 December, is being closely watched by global markets. The recent history of FOMC decisions highlights a prolonged cycle of tightening followed by a hold at high levels, weighing on global liquidity and appetite for risky assets.

In this context of high real rates and geopolitical volatility, speculative demand for crypto-assets is under pressure. Some investors continue nevertheless to view bitcoin, currently around 66 428 € (or roughly 74 506 $), as a partial hedge against certain sovereign risks. Ether trades around 1 899 € (about 2 130 $), in a market torn between the search for alternative safe havens and caution linked to the cost of capital and regulatory uncertainties.

For the end of 2026, the market’s central scenario remains that of persistently restrictive monetary policy, both at the ECB and the Fed. The coming months, between the European summit in December and the FOMC meeting on 8–9 December, will be decisive for the adjustment of expectations. Crypto-asset investors are watching closely the evolution of real rates, the path of inflation and the stability of monetary institutions, with no visibility at this stage of a rapid pivot to more accommodative policies.

According to schedules compiled by several aggregators, November 2026 looks particularly busy for token unlocks. More than 2,600 events are listed, covering over 2,200 assets across 12 blockchains, for a total value between €7,5 and €7,8 M at the price at the start of the month. In a market already attentive to liquidity signals, these waves of unlocks can quickly change the available supply and governance balances within many protocols.

Among the most watched events is the major deadline on November 24 for Monad (MON). On that day, around 17.1 billion tokens are set to be released, for a value close to €249,7 M (280 M USD), primarily benefiting the team, investors and the treasury. Several upcoming unlock leaderboards indicate that this supply release from Monad is among the largest in the next 30 days, making it a major case study for current secondary market appetite.

LayerZero (ZRO) also reaches a key date on November 19, 2026, with an unlock of about €33,3 M (37,3 M USD), or nearly 23.6 million tokens, corresponding to roughly 5.9% of the circulating supply. By mid-November, other leading projects such as Starknet (STRK), Allora (ALLO) and Aptos (APT) will also see unlocks totaling several tens of millions of euros, increasing the need for investors to monitor each asset’s schedule and distribution structure.

Weekly aggregations show that the period around November 23 is the densest, with more than €305 M (342 M USD) of additional tokens released. In this context, some managers anticipate greater selectivity toward projects, notably by assessing allocation concentration, the share going to teams and historical investors, and the market’s past reactions during previous unlock waves. Current reference valuations, such as bitcoin around €66 428 and ether near €1 899, also serve as a general barometer of risk sentiment.