North Korea Drives Crypto Malware Surge as CoinEx Shuts
North Korean and Iranian state-linked hackers drove a 420% year-on-year increase in malware activity on public blockchains, according to Chainalysis. About two-thirds of newly identified activity involved attackers storing malware instructions or infrastructure data on-chain, making campaigns more resilient after websites, servers or code repositories are removed. The North Korea-linked group UNC5342 was associated with activity across Tron, Aptos and BNB Smart Chain. Chainalysis said North Korean hackers also used smart contracts for crypto-stealing code in 2025.
South Korean authorities referred 18 Polymarket users to prosecutors in an illegal gambling case involving 26 users and about $12.7 million in wagers. In Hong Kong, Metaplanet cut its Series 10 potential share pool by 41%, a move it said would raise Bitcoin per fully diluted share by about 8.8%. Hong Kong industry figures also urged the city to use delays to the US CLARITY Act as an opportunity to strengthen its digital-asset infrastructure.
Hong Kong-founded exchange CoinEx will cease operations after citing weak trading volumes, reduced liquidity and higher compliance costs. Withdrawals will remain open until 22 December 2026.
India launched a $107 million tokenized corporate bond pilot linked to the central bank’s wholesale CBDC system. Singapore Exchange received US approval to offer Bitcoin and Ether perpetual futures to US institutions. Thailand proposed a daily stablecoin transfer cap of 5 million baht, while Vietnam expanded crypto-asset supervision. Malaysia was identified as one of the more crypto-friendly Muslim-majority markets.
Neutral
The overall market impact is neutral because the article combines significant security and regulatory risks with positive institutional adoption. The 420% rise in on-chain malware, legal action against Polymarket users and CoinEx’s closure could weaken sentiment toward smaller exchanges and increase demand for compliance, custody and security controls. Such developments are typically bearish for affected platforms, but they do not by themselves change Bitcoin or Ether’s underlying market structure.
On the positive side, India’s tokenized bond pilot, Singapore Exchange’s approval for US-facing Bitcoin and Ether perpetual futures, and expanding digital-asset infrastructure in Hong Kong and Vietnam indicate continued institutional integration. Similar regulated-market developments in the past have supported long-term liquidity and legitimacy, although their immediate price effects are often limited.
In the short term, traders may favour major assets and regulated venues while discounting smaller exchanges, privacy-sensitive applications and projects exposed to enforcement. Volatility could rise if further sanctions, exchange closures or hacking disclosures emerge. Over the long term, stronger supervision may reduce illicit activity and improve institutional confidence, but stricter transfer limits and gambling enforcement could constrain retail participation. Overall, the news is mixed rather than decisively bullish or bearish.