Crypto Today: November 7, 2026

Each fact links to the outlet that reported it: check the original before relying on it. Not investment advice.

Security and sanctions dominated the day: iPhone wallet thefts on TRON, a Keplr login pause, and two new US sanctions actions, on the Prince Group scam network and on Canadian exchange firms tied to Iran. On the mainstream side, Samsung and Stripe made USDC purchases live for eligible US Samsung Wallet users.

Markets snapshot

• BTC: $75,662.00 (-0.2% over 24 hours)
• ETH: $2,230.75 (-0.1% over 24 hours)
• SOL: $89.14 (-0.9% over 24 hours)

Prices as of Saturday, November 7, 2026.

Stablecoins & Payments

Samsung Wallet users in the US can now buy USDC through Stripe

Eligible US Samsung Wallet users can buy, hold, send and receive USDC inside the app, paying with Samsung Pay, cards or bank transfers. The 82 million figure counts compatible Galaxy devices, not people who have signed up.

• Samsung announced the stablecoin feature on Oct. 7, with a rollout planned for late October. (CryptoSlate)
• On Nov. 5, Stripe said eligible US users can buy USDC with Samsung Pay, credit and debit cards, or ACH bank payments. (CryptoSlate)
• Users can also fund the account through Coinbase or by receiving USDC from an external wallet on a supported network. Withdrawals to a bank account or debit card convert the USDC back to dollars. (CryptoSlate)
• Eligibility requires users to be 18 or older, in a US jurisdiction where the service is offered, on Android 13 or later with fingerprint authentication enabled. New York residents are excluded, and each person may hold only one account. (CryptoSlate)
• Opening an account requires a name, address, birth date and taxpayer ID. Applicants may also be asked for government ID, a selfie, or occupation and source-of-funds details. (CryptoSlate)
• Bastion provides the custodial wallet, with the USDC held in Coinbase’s institutional custody under Bastion’s arrangement. Fees and limits vary by method and can change. (CryptoSlate)

Context: USDC is a dollar-pegged stablecoin issued by Circle. Stripe is a payments company that handles identity checks and fraud prevention in this flow. Samsung does not hold the coins itself; a third-party custodian does.

Why it matters: The feature puts stablecoin purchases inside a wallet app already on many phones, which lowers the barrier for ordinary users. The practical limits are the custodial setup, the identity checks, and the risk of permanent loss if funds are sent on an unsupported network.

Disputed or unconfirmed: The 82 million figure measures compatible US Galaxy devices, not active users or sign-ups.

Security & Hacks

Bitquery traces at least $4 million in USDT thefts across 365 TRON addresses tied to iPhone attacks

Blockchain data firm Bitquery says a network of 365 TRON addresses lost at least $4 million in USDT between Oct. 5 and Nov. 4. Only one counted theft is tied to a published iPhone owner’s account, so the link to the iPhone exploit kits is not established across the whole set.

• On March 18, Google Threat Intelligence Group published research on DarkSword, an iPhone exploit tool used by multiple actors. It advised updating iOS, or enabling Lockdown Mode when no update was available. (CryptoSlate)
• On Oct. 21, iVerify and Report URI described malicious ads and expired analytics tags delivering the Coruna and DarkSword exploit kits to vulnerable iPhones. iVerify also reported a P7 infection seen through an Instagram ad. (CryptoSlate)
• Bitquery’s review window runs from Oct. 5 to Nov. 4. On Oct. 25, one theft moved 519,093.33 USDT to a collector wallet. (CryptoSlate)
• Security Alliance logged six iOS wallet-compromise reports from Oct. 28 to Nov. 3, with about $127,000 in losses, across several Trust Wallet users and one Uniswap Wallet user. (CryptoSlate)
• Bitquery’s Nov. 5 report counts 365 addresses. Of these, 89 lost only TRX, and the USDT total counts payments that emptied an address’s USDT balance. (CryptoSlate)
• Bitquery linked 43 collector wallets through funding flows to one wallet that paid transaction fees. On Nov. 6, Trust Wallet urged users to install the latest iOS and keep recovery phrases out of screenshots and notes. (CryptoSlate)

Context: TRON is a blockchain widely used to move USDT, the largest dollar stablecoin. Bitquery is a blockchain analytics firm. Exploit kits are bundles of software that take over a device through security flaws, here delivered via ads.

Why it matters: The reporting ties the loss of a self-custodied wallet to the security of the phone it runs on, not only to the wallet app. Keeping iOS current and keeping recovery phrases off the device are the main defences named.

Disputed or unconfirmed: The $4 million figure comes from one analytics firm’s method. The financial links show a network, but a single operator is unproven, and only one counted theft is tied to a published iPhone-owner account.

Keplr pauses Google and Apple login after reports of unauthorized transactions

Keplr paused sign-in with Google and Apple after users reported unauthorized transactions. It says recovery-phrase and hardware-wallet accounts are unaffected in its initial assessment, and it later suggested a recovery effort may explain some empty balances.

• After reports of unauthorized transactions, Keplr paused wallet creation and login through Google and Apple. (The Defiant)
• Keplr said in its initial assessment that accounts based on recovery phrases or hardware wallets are not affected. (The Defiant)
• It told social-login users to stop sending funds to their accounts. (The Defiant)
• In a later update, Keplr said a recovery effort may explain some of the empty wallet balances users reported. (The Defiant)
• It advised users who created accounts through Google or Apple to stop deposits and move any remaining liquid assets. (The Defiant)

Context: Background: Keplr is a wallet mainly used with Cosmos-ecosystem blockchains. Social login lets users create a wallet with an existing Google or Apple account instead of writing down a recovery phrase.

Why it matters: The pause affects one of the more convenient ways to onboard to the wallet. Until the cause is explained, social-login users are told to move their assets.

Disputed or unconfirmed: It is not settled whether the emptied balances are thefts or the result of a recovery effort. Keplr’s account is its own initial assessment, and the articles give no independent confirmation or loss figure.

Regulation & Policy

US sanctions four people and 41 entities accused of sustaining Prince Group’s scam network

On Nov. 5 the US Treasury sanctioned four individuals and 41 entities that it says kept Prince Group running after earlier sanctions. Prince Group is designated as a transnational criminal organization linked to online investment and romance scams.

• On Oct. 14, 2025, the US first sanctioned Prince Group. A further round came on June 23, 2026, including a designation of executive Chen Bo. (CryptoSlate)
• On Nov. 5, 2026, OFAC designated four people and 41 entities: Qiu Yong, Zhao Mengyao, He Yujing and Visal Pang, plus companies. (CryptoSlate)
• Treasury says Qiu owns Hong Kong money lender Premium Financial through a British Virgin Islands company, Sun Speed Holdings, and controls other companies for Prince Group. Zhao is his personal assistant and a co-director of several of his Hong Kong firms. (CryptoSlate)
• Treasury says Chen transferred a Tokyo mansion to his wife, He Yujing, after the October 2025 sanctions. It says Pang controls 11 Cambodian companies, several co-directed with Chen. (CryptoSlate)
• The action also names companies linked to previously sanctioned executives Dai An and Thet Li, including Singapore-based Greenbay Multi Media, which Treasury says Thet Li wholly owns. (CryptoSlate)
• Assets of the designated parties in the US or in US hands are blocked and must be reported. The 50% ownership rule extends the block to entities owned by blocked persons. (CryptoSlate)

Context: OFAC is the Treasury office that administers US sanctions. Treasury links Prince Group’s affiliates to digital-asset investment scams, romance scams and other online fraud, with many operations relying on trafficked and coerced workers in Southeast Asian compounds.

Why it matters: The designations target the corporate and ownership layers that Treasury says hid and sustained the group, not only its leaders. Banks and other counterparties are expected to check ownership chains, and civil penalties can apply on a strict-liability basis.

Disputed or unconfirmed: The allegations are Treasury’s. The articles carry no response from those named.

US sanctions eight Canadian money-exchange firms over alleged Iran crypto links

The US sanctioned eight Canadian money firms over alleged crypto ties to Iran, and OFAC listed six Tron addresses. The available reports are brief, so the detailed allegations are not covered here.

• The US sanctioned eight Canadian money-exchange firms over alleged links to Iran involving crypto. (The Defiant, Cointelegraph)
• The designations freeze the firms’ covered assets and generally bar US dealings with them. (The Defiant)
• OFAC also listed six Tron addresses as part of the action. (The Defiant)
• The US separately offered up to $20 million, and possible relocation, for information about Iran’s nuclear program. (Cointelegraph)

Context: Background: OFAC publishes crypto addresses alongside sanctioned names so exchanges and other services can block them. Tron is a blockchain widely used to move stablecoins.

Why it matters: Listing wallet addresses means services that touch those addresses can be exposed to sanctions risk. It also shows crypto rails being treated as a route for sanctions evasion.

Disputed or unconfirmed: The articles provided give few details, including the firms’ names and the specific allegations.

Quick hits

• Binance CFO Kaiser Ng is stepping down nine days after the record hack, with Justin Yek named as his successor. Co-CEO Yi He says the transition was planned over six months and that Ng is leaving for a new venture. (The Block)
• A Gnosis Pay breach exposed card numbers, home addresses and linked crypto wallets. One user said it tied his address and card number to every wallet on his account, raising the risk of targeted scams. (CoinDesk)
• A former FBI agent, Yaroch, pleaded guilty to stealing $2.47 million in crypto from wallets tied to 35 investigations. He will pay at least $2.4 million in restitution and forfeit future profits from telling his story. (The Block)
• Moscow Exchange will begin Bitcoin and Ethereum trading on Dec. 1. Buyers who are not qualified investors face a 300,000-ruble annual cap per intermediary and a test. (CryptoSlate)
• Apple and Meta have objected, so all seven Magnificent Seven companies have now asked to keep their shares off the planned OKX-ICE tokenized-share venue. (Decrypt)
• Thailand will block Bitget on December 5. The regulator asks customers to consider what to do with their holdings first, and Bitget has promised guidance on service access. (CryptoSlate)