🔍 Following On From Monday

Monday's research routine ended with a question that belongs on every checklist: who holds my coins, and what happens if they get hacked? Last Thursday answered it for millions of Binance customers. This week we finally know how it happened, and the answer starts with something that has nothing to do with crypto: a job interview.

⚠ Threat Brief

On Tuesday, Binance explained how attackers took about $6.3 billion from it on October 29, the largest crypto theft on record. A Binance engineer was approached on a job-hunting site by someone posing as a project director, then sat through two fake interviews, one with an "HR representative" and one with the "CEO" of a company that did not exist. He was asked to download an "assignment." It was malware. Separately, another engineer had installed a tampered copy of a common developer tool from an internet ad, which gave the attackers a map of who managed the company's wallets. Put together, those two openings let them drain a series of Binance wallets. The FBI attributes the attack to TraderTraitor, a North Korean hacking group. Binance paused withdrawals for about two days, reopened them over the weekend, and says customers are covered. The single most important lesson: the biggest exchange in the world was beaten by a fake recruiter and a fake download, and both tricks are aimed at you too.

📊 How the Number Moved

Breaking-news figures are guesses until they settle. In the first hours, estimates ran from under $2 billion to about $6 billion. Blockchain trackers landed between $5.7 and $5.9 billion, and Binance's own count settled at about $6.3 billion. Its reported coverage of customer losses rose from about 90% to 95% to 98% as it replenished reserves. The lesson for any headline: watch what the number does over a few days before you act on it.

⚠ Yield Trap of the Week · Red Flag: A Stock Token, a Two-Week-Old Pool, and Almost Nobody Earning

USDC / MSTRc on Aero: about 1,000% in AERO rewards

As of Wednesday morning, this pool pairs USDC with MSTRc, a token designed to track shares of Strategy, the company that holds billions in Bitcoin, and advertises roughly 1,000% a year in AERO rewards on about $1 million of liquidity. Tokenized stocks are a hot new category, and a four-digit rate on a famous name is exactly the kind of thing that travels.

Run it through the checks. Only about $11,500 of the pool's liquidity actually sits in the range that earns the headline rate, under 2% of the money in it. That range is about 5% wide, while this stock token typically moves about 15% in a week. The pool is two weeks old, it pays in AERO, which has slid about 11% in the past week, and before you hold a stock token you need to know who backs it and whether you can redeem it. Four of my five red flags, in one pool.

I pulled every pool on Base and Arbitrum paying over 40% with at least $1 million in it. This week there were 32, up from 25.

Before I look at any yield, I ask three questions. Is every coin in the pool actually holding its value? How much of the pool is really earning the headline rate? And what am I being paid in? If I cannot answer all three, the APR does not matter.

Crypto Clarity Weekly is educational content only and does not constitute financial or investment advice. Always do your own research before investing.