Crypto Today: November 15, 2026

Each fact links to the outlet that reported it: check the original before relying on it. Not investment advice.

Crypto extended its slide over the weekend, with Bitcoin touching a four-month low near $62,000 before bouncing. Bitcoin then bounced from that low. Security problems at Kava, Telegram, Luxor and Coinone also drew attention.

The simple explanation

Crypto prices fell sharply again this weekend. Bitcoin, the largest cryptocurrency, dropped to its lowest level in about four months before recovering a little. Across the whole market, roughly $571 billion in value disappeared in ten days. Many traders who had borrowed money to bet on prices were forced out of their positions, which pushed prices down further.

There were also several security scares. Hackers took millions from Kava Lend, a lending service, by tricking it about the value of the collateral (the assets pledged to back a loan). Telegram limited a new feature after researchers raised hacking concerns. A company that manages mining power for others said some customers’ computing power was redirected, and it promised to pay them back. A Korean exchange warned customers about a data leak. All of this shows how fragile trust in crypto services can be.

Markets snapshot

• BTC: $65,176.00 (+2.5% over 24 hours)
• ETH: $1,826.02 (+4.6% over 24 hours)
• SOL: $72.37 (+4.6% over 24 hours)

Prices as of Sunday, November 15, 2026.

Markets

Crypto selloff deepens as Bitcoin hits a four-month low near $62,000, then rebounds

Bitcoin fell to about $62,000, a four-month low, as roughly $2 billion in positions were liquidated and about $571 billion left the crypto market in ten days. Prices bounced afterward.

• The selloff accelerated after Bitcoin broke below $72,000 on Nov. 12, and about $571 billion in market value was erased over ten days. (The Defiant)
• Spot Bitcoin ETFs lost $185.4 million on Friday, their seventh straight day of outflows, taking November’s losses to about $2.1 billion as Bitcoin fell toward $64,000. (Decrypt)
• Bitcoin reached a four-month low near $62,000, and total crypto market value fell 4% in 24 hours to $2.26 trillion. Ether and Solana each posted double-digit weekly losses. (Cointelegraph)
• About $2 billion in crypto positions were liquidated in a single 24-hour period over the weekend. (The Block)
• Bitcoin and ether then rebounded. Binance founder CZ denied that Binance had sold crypto during the drop. (The Defiant, The Block)

Context: Liquidations happen when traders who borrowed to bet on prices can no longer cover their losses and their positions are closed automatically, which can push prices down further. Spot Bitcoin ETFs are funds that hold actual Bitcoin and trade on stock exchanges, so their flows show how much traditional investors are buying or selling. CZ is Changpeng Zhao, Binance’s founder.

Why it matters: The decline is broad and fast, with ETF money leaving and leveraged positions being wiped out. The rebound so far is small compared with the losses.

Disputed or unconfirmed: CZ’s denial that Binance sold crypto is a claim from an interested party, and the articles do not describe the allegation in detail.

Watch next: Whether ETF outflows continue beyond the seven-day streak.

Security & Hacks

Kava Lend exploit drains millions through inflated collateral; KAVA tumbles and Korean exchanges halt transfers

Attackers used inflated BUSD collateral to borrow a large amount of KAVA from Kava Lend and sold much of it, with reported losses of millions of dollars. KAVA fell roughly 40% to 47%, and three Korean exchanges suspended related transfers.

• On Nov. 14, The Block reported Kava Lend lost roughly $3.8 million in a hack, with the KAVA token down nearly 40%. (The Block)
• Attackers used inflated BUSD collateral to borrow 55.2 million KAVA. (The Defiant)
• About 49.2 million KAVA was bridged to BNB Chain via LayerZero and sold for roughly $2.1 million in BNB and USDT. (The Block)
• KAVA fell as much as 47%. (The Defiant)
• Bridge withdrawals and transfers were suspended at three Korean exchanges. (The Defiant)

Context: Kava Lend is a lending service on the Kava blockchain, where users deposit collateral to borrow other tokens. Background: BUSD is a dollar-pegged stablecoin, and LayerZero is a cross-chain messaging system that moves tokens between blockchains.

Why it matters: The exploit shows how a collateral valuation error can empty a lending pool. It also shows how quickly exchanges halt deposits and withdrawals to contain the spillover.

Disputed or unconfirmed: Outlets differ on the size of the price drop (nearly 40% versus up to 47%), and one reports a $3.8 million loss while the other says only ‘millions’.

Watch next: Whether Kava or the Korean exchanges announce a fix, a recovery plan or a date for resuming transfers.

Telegram bars ordinary bots from sending new widgets amid a hacking-scare dispute

Telegram now blocks general bots from sending its new HTML widgets, even in private chats, while researchers and Telegram dispute how serious the reported flaws were. No stolen crypto has been shown.

• Telegram’s changelog dates HTML-widget messaging to Bot API 10.4 on Nov. 9. (CryptoSlate)
• On Nov. 13, a Bot API repository contributor confirmed that general bots aren’t allowed to use widgets even in private chats. A developer had reported the error INPUT_MEDIA_WIDGET_NOT_ALLOWED after earlier successes. (CryptoSlate, The Defiant)
• Researchers say widget code could run during chat layout without a tap on certain older clients. They say the published flaws are fixed in current builds. (CryptoSlate)
• Founder Pavel Durov denied that merely receiving a message could compromise users, said users first had to start a third-party service, and said the issue was fully patched server-side. (CryptoSlate)
• The restriction covers HTML widgets only, not all mini-apps or bot services. No restoration timetable was given, and the widget guide still listed private-chat availability on Nov. 14. (CryptoSlate, The Defiant)

Context: Widgets run inside the message itself, unlike Mini Apps, which open a web page on demand. Telegram’s design lets widgets involve a user’s TON wallet, which is why crypto users care.

Why it matters: A feature linked to wallets was narrowed within days of launch. The researchers’ demonstrations do not show stolen assets or widespread exploitation.

Disputed or unconfirmed: Researchers say code could run without a tap on older clients, while Durov says users had to start a third-party service first and that the issue was patched. The articles do not establish that security reports caused the restriction.

Watch next: Whether Telegram gives a timeline or explanation for restoring widget access, or updates its documentation.

Coinone warns of phishing and identity theft after customer support data breach

South Korean exchange Coinone says information customers shared with support, possibly including passwords and national ID numbers, may have been exposed. It says it found no direct intrusion into account, trading or wallet systems.

• Coinone warned of phishing and identity theft after a customer data breach. (Cointelegraph)
• Potentially exposed information includes passwords, bank account numbers, national identification numbers and crypto wallet addresses. (Cointelegraph)
• The data was information customers had shared with support. (The Defiant)
• Coinone says it has found no evidence of direct intrusion into its account, trading or wallet systems. (The Defiant)

Context: Coinone is a South Korean crypto exchange. The breach involved support channels rather than its trading platform, according to the exchange.

Why it matters: Exposed ID numbers and bank details make convincing phishing and identity theft easier, even if funds on the exchange are untouched.

Disputed or unconfirmed: The claim that core systems were not breached comes from Coinone itself.

Watch next: Whether Coinone gives a fuller account of how many customers were affected.

Bitcoin

Bitcoin mining power redirected through Luxor’s Commander to OCEAN; Luxor pledges full compensation

CoreX reported that Bitcoin mining power was hijacked and sent to the OCEAN pool. Luxor said just over a dozen client accounts were affected and promised to pay as though the work had been mined normally.

• CoreX reported that Bitcoin mining power was redirected to OCEAN. (The Defiant)
• The flagged address showed no payouts, but submitted mining work could still earn rewards. (The Defiant)
• How the attackers got in has not been confirmed. (The Defiant)
• Luxor said just over a dozen client accounts were affected. (The Defiant)
• Luxor promised to compensate affected clients for the redirected power as though it had mined normally. (The Defiant)

Context: Background: Luxor provides mining software and services, and Commander is its tool for managing miners. OCEAN is a Bitcoin mining pool, which combines the computing power of many miners and shares the rewards.

Why it matters: Miners rely on their management tools to keep their computing power pointed at the right pool. An attack of this kind can divert income without the miner noticing.

Watch next: Whether Luxor or CoreX confirms how the attackers got in and when compensation is paid.

Quick hits

• Binance says it aims to fully reopen withdrawals next week, after reopening 87 networks this week as part of a staged recovery. (The Defiant)
• Traders reportedly made about $6 million by frontrunning a Robinhood Chain memecoin listing, having spotted a public BitGo code change that added Cash Cat support ten days before Robinhood announced it. (The Block)
• Banks and payment firms including Goldman, Citi (Project Faro, $270 million), SoFi, Anchorage, Mastercard, Visa and Circle are racing to claim the onchain dollar. (Decrypt)
• Nvidia’s Jensen Huang is reportedly weighing a return as CEO, but Colette Kress remains interim CEO ahead of Nov. 17 earnings. (The Defiant)
• The stUSDT real-world-asset protocol is winding down three years after its $2.3 billion TVL peak, and its team gave no reason but said assets remain fully backed. (Cointelegraph)
• Forward Industries denies ownership of stake withdrawals totalling 1.78 million SOL (about $123 million) that trackers linked to it; the movements are confirmed on-chain but ownership is disputed. (The Defiant)