Daily Brief: November 6, 2026
Regulators, AI Attacks, and Stablecoin Runs
TL;DR: South Korea pushed its crypto gains tax out to 2029, buying time for reporting rules while other Asian hubs move faster. AI-powered hackers are probing exchanges at machine speed, forcing teams to adopt hardware keys, multi-sig, and 24/7 monitoring. Evernorth/XRPN share filings create potential sell pressure once lock-ups end, and Thailand is moving to block Bitget as regulators pair access cuts with criminal probes. Meanwhile Paraguay’s bank failure pushed people into USDT, showing stablecoins can act as a practical hedge when banks break. The pattern is clear: rules and market behavior are diverging across countries, security must catch up to AI, and stablecoins are becoming a real-world tool in crises.
Market Overview
Bitcoin closed at $75,986 and Ethereum closed at $2,236. Across BTC, ETH, and total market cap, we see short-term strength but not a clean long-term trend flip. Elevated volume and volatility mean moves can accelerate, so confirmation matters more than reaction.
🧾 South Korea delays crypto gains tax to 2029
Seoul announced a fourth postponement, pushing the crypto gains tax rollout out to 2029 while lawmakers and agencies hammer out rules and international data sharing.
The planned 22% tax on annual crypto profits above 2.5 million won remains on the table, but officials say timing with the US information exchange under CARF matters more than the deadline.
Authorities propose a three-year loss carryforward and a public-private group to draft detailed standards by mid-2028, giving exchanges time to build reporting systems.
The delay contrasts with other Asian moves, where Hong Kong approved crypto reporting and cross-border data sharing steps that start sooner, signaling different regional bets.
Why it matters: The new timeline buys time for better reporting and investor protections, but it also shifts where trading and compliance-heavy activity could flow in Asia.
🦅 CRAFTY FALCON: AI hackers probing crypto gear
CERT-In says an actor called CRAFTY FALCON uses AI to scan code, craft exploits, and strike financial targets fast. Expect tailored probes and repeat attempts while defenders play catch-up.
Reports show attackers have stolen wallet keys and used victims’ own payment APIs to test small transfers before bigger ones, a quiet way to move funds without immediate alarms.
Advisories warn these ops run at machine speed, timing raids for weekends and holidays to delay detection, so monitoring and staff coverage must stretch into low-visibility hours.
Practical fixes include hardware security modules, multi-signature withdrawals, and cooling periods to slow automated theft and give teams time to react.
Why it matters: AI lets attackers move faster and adapt in real time, so teams must adopt AI-aware defenses, stronger custody controls, and around-the-clock monitoring to prevent automated theft from becoming routine.
📉 Evernorth/XRPN: registration raises sell-side overhang
Evernorth filed to register 73.7 million shares for potential resale, naming Ripple, Arrington, SBI affiliates, and a Larsen trust as holders. That list makes the float look much bigger than it appears today.
Not all those shares are free to trade now. Many are under six-month lock-ups that likely run to April 2027, so immediate dumping is limited, but the registration clears the legal path for future sales.
XRPN stock has already slid sharply since its debut, and the prospect of future supply from big, concentrated holders could sap confidence, even if Evernorth gets no proceeds from resales.
For builders and allocators this matters because timing and optics often move prices more than fundamentals, so watch lock-up expiries and actual resale activity, not just the registration paperwork.
Why it matters: The filing signals potential future supply from well-known XRP backers that could pressure XRPN’s price and investor sentiment once lock-ups lapse and sales become possible.
🛑 Thailand moves to block Bitget
Thailand’s securities regulator says it will block Bitget’s website, associated domains, and mobile app starting December 5 and has told users to review assets held on the platform.
The SEC alleges Bitget ran crypto trading for Thai customers without a license between 2022 and 2025, using Thai-language sites, baht pricing, and local promos to reach users.
Regulators filed a criminal complaint naming BG Limited and a promoter, and said prosecutors will decide whether to press charges as investigations move toward court.
Why it matters: This shows regulators will pair access blocks with criminal probes to enforce licensing, so platforms and users in the region need clearer compliance and contingency plans.
🪙 Paraguay sees USDT demand rise
People moved into USDT as Ueno Bank froze accounts. Tether’s CEO called it a "flight to safety" as stablecoins offered a way to preserve access and value while banks were in resolution.
The crisis toppled political leaders. Paraguay’s president resigned after ties to the failed digital lender surfaced, deepening distrust in banks and prompting urgent questions about oversight and deposit security.
FX stress reshaped P2P markets. The once-noted 13% USDT gap tightened as official rates moved, but insured payouts in guaraníes and big frozen public deposits leave savers weighing dollar-linked options.
Why it matters: This episode shows stablecoins acting as a tactical hedge when local banks fail, and it underscores how banking collapses can accelerate dollarization and push crypto into practical everyday use.
