Market SitRep · CW46 2026 · Thursday
Treasury is cutting a top-20 crypto exchange off the U.S. financial system, Initia halted its chain a second time after forged withdrawals, and an unpatched iPhone bug could let a malicious app already on the device read a wallet seed phrase, which is enough to rebuild that wallet elsewhere.
by Fenris | Market Intelligence
GM!
Update, 12 November (provisional, as of ~20:05 UTC): On 12 November, Nvidia said that Jensen Huang has resigned as President, Chief Executive Officer and board member, effective immediately, with Colette Kress as interim CEO. NVDA traded at $164.21, down 5.48% from the 11 November close of $173.73, after an intraday low of $148.80, down 14.35%, while the broad U.S. market moved far less: the Nasdaq Composite was down 0.52% and the S&P 500 down 0.28%. At the 20:00 UTC hourly open, BTC was at $71,597.52, down 4.02% from the 11 November U.S. close, with ETH at $2,015.25, down 3.10%, and SOL at $81.53, down 4.05%. Sources cite several drivers at once, among them Nvidia and Huang's exit, spot bitcoin ETF outflows, inflation comments from Beth Hammack, president of the Cleveland branch of the Federal Reserve, the U.S. central bank, and index removals by MSCI, a provider of stock indexes that funds track, with forced liquidations of leveraged bets deepening the selling, and none of them measures Huang's share. Most of the crypto drop came before the U.S. cash open at 14:30 UTC, and BTC was roughly flat through the afternoon while NVDA recovered part of its early loss.
Primary: https://www.sec.gov/Archives/edgar/data/1045810/000104581026000082/nvda-20261111.htm
Supporting: https://www.coindesk.com/markets/2026/11/12/bitcoin-dips-with-nvidia-as-etf-outflows-reach-day-five
Supporting: https://www.theblock.co/news/markets/2026-11-12-bitcoin-12-week-low-jensen-huang-exit-nvidia-438992
Market snapshot (live vs ~7d, as-of 12 November 2026, 14:00 UTC):
| Asset | Price | ~7d |
|---|---|---|
| BTC | $72,415.42 | -9.00% |
| ETH | $2,010.14 | -15.72% |
| SOL | $81.32 | -14.64% |
Treasury cuts MEXC Global off the U.S. financial system
On 6 November 2026, the U.S. Department of the Treasury's Financial Crimes Enforcement Network (FinCEN) issued an order cutting MEXC Global off the U.S. financial system. The order prevents U.S. financial institutions from processing funds transfers involving that exchange. Treasury says MEXC, one of the world's top 20 crypto exchanges, facilitated at least $16 billion in illicit transactions from May 2021 to May 2026, connected to Iranian, North Korean, and Russian sanctions evasion, as well as cybercrime. The Federal Register order, published 10 November, puts the same window at USD 16.7 billion, and is effective 10 December 2026, with no cessation date.
Why it matters: From 10 December, U.S. banks and other covered financial institutions are prohibited from sending funds to or from MEXC. That closes the dollar path through U.S. institutions for a top-20 exchange that, as of September 2026, processed more than $1 billion a day and held about $5 billion in reserves. Violations can bring civil or criminal penalties.
We will watch 10 December, when the prohibition takes effect.
Primary: https://home.treasury.gov/news/press-releases/sb0685
Initia halts its chain a second time after a compromised cloud key
On 10 November at 06:18 UTC, Initia halted its layer-1 network in coordination with validators, after unauthorized transfers from the escrow accounts that hold assets bridged to its rollups. Initia said an attacker used a compromised Google Cloud Platform key on 9 November to reach its infrastructure, forged Inter-Blockchain Communication withdrawals from five rollups - those are the bridge messages that unlock escrowed assets - and moved about $3.27 million, with $2.16 million still on the paused chain, where it cannot be moved. Earlier the same day, Initia had said about $605,000 USDC and $10k in other tokens already left through Noble before the pause. This is the second halt since 23 October. Initia said it intends to restore the backing of affected assets in full, and is still finalizing the plan.
Why it matters: A compromised cloud key let the attacker forge withdrawal messages and unlock bridged funds. The $3.27 million is what Initia later said moved to the attacker's address on its own chain, including the $2.16 million still stuck in the halt. The $605,000 USDC and $10k are what Initia first said had already left. The chain is down, and the restoration plan is not yet published.
We will watch for that plan, and for the chain to come back.
Primary: https://coinmarketcap.com/academy/article/initia-attacker-moved-3-27m-second-halt
Supporting: https://x.com/initia/status/2120195620442910943
Why this matters for crypto: a malicious app already on an iPhone could read a wallet seed phrase
A seed phrase can rebuild a wallet on another device, so a bug that lets one app read another app's files can reach those keys.
On 10 November, as reported by The Mac Observer, Binance warned that an iOS flaw called worse_query allows malicious apps to read local files belonging to other apps, and that exposed files could include wallet seed phrases, private keys and login credentials. Binance named iOS 26.7.1, 27.0.1 and 27.2. The researcher who published working proof-of-concept code on 8 November lists a wider range: iOS 26.0 through 26.7.2, and 27.2. Apple shipped iOS 27.2.1 a day later; its security notes list nine fixes, none for the app sandbox, the walled-off space meant to stop one app reading another. The researcher says neither 27.2.1 nor iOS 27.3 beta 1 patches it. Neither Binance nor the researcher has reported a theft tied to this flaw. The attack needs a malicious app already on the device; it cannot reach in over the internet by itself.
Why it matters: If that app copies a seed phrase once, the person who has the phrase can rebuild the wallet on another device, even after the app is deleted. The hole is not a remote break-in: it needs a sideloaded or attacker-controlled app already present. No theft has been reported. Apple has published no advisory for this escape, and iOS 27.2.1 does not list a fix for it.
We will watch for an Apple update that names this sandbox hole.
Primary: https://www.macobserver.com/news/binance-ios-worse-query-flaw-wallet-keys/
Supporting: https://github.com/forcequitOS/worse_query
Conclusion
From these points we conclude:
Treasury cuts MEXC off U.S. rails
FinCEN's order is on the Federal Register and takes effect 10 December 2026, with no end date, prohibiting U.S. fund transfers involving a top-20 exchange.
Initia's second halt
Initia says about $3.27 million moved after a compromised cloud key, $2.16 million is still stuck on the paused chain, and the restoration plan is not yet out.
iPhone seed-phrase warning
Binance warned that an unpatched iOS bug could let a malicious app already on the phone read a wallet seed phrase; no theft has been reported.
GM.
Software and engineering services. Not financial, tax, or investment advice.