Cyberattack on Binance is Officially the Largest Single Theft of any kind in History

Cyberattack on Binance is Officially the Largest Single Theft of any kind in History

-----------------------------------------------------

In Feb. 2025, North Korean hackers stole $1.5 billion from a crptocurrency exchange called 'Bybit'. At the time it was the largest crpto heist ever. Now last Thursday, Oct. 29th, another crptocurrency exchange called, 'Binance' lost $6.5 billion to hackers. What do we know so far about this last crpto heist? 

The Thursday, October 29, 2026 cyberattack on Binance is officially the largest single theft of any kind in history. Draining approximately $6.36 billion to $6.43 billion in crypto assets across ten blockchains, the heist dwarfed the $1.5 billion stolen from Bybit in early 2025 by more than four times.

1. Who Did It?

Blockchain intelligence and cybersecurity firms (TRM Labs, Chainalysis, and Elliptic) have attributed the attack with high confidence to TraderTraitor, an elite North Korean state-sponsored hacking unit. The FBI previously named TraderTraitor as the group behind the February 2025 Bybit heist.

2. How the Attack Happened

The attack unfolded at high speed—draining the vast majority of the funds in just 20 minutes starting around 20:05 UTC.

• No Private Key Leak: Binance confirmed that main wallet private keys were not leaked.

• Attack Vectors: The exploit was traced to a compromised DevOps engineer's laptop, which allowed the attackers to access a service container. However, Binance co-CEO Richard Teng noted there were multiple, complex "additional points of breach" involving their hot wallet signing infrastructure.

• Ethereum Sweeper Exploitation: On Ethereum, the hackers used an EIP-7702 delegation (with 50 pre-signed authorizations prepared in advance) to transform a Binance hot wallet into an automated "sweeper" controlled by the hackers, draining funds continuously as they arrived.

3. Current Recovery Efforts & Asset Freezes

Out of the ~$6.4 billion stolen, roughly $2.7 billion to $3 billion in assets have already been frozen or seized.

• Issuers like Tether, Circle, and Ripple, along with decentralized protocol security teams (such as Arbitrum's Security Council), acted quickly to freeze centralized stablecoins (USDT, USDC) and tokens on-chain.

• In response, the hackers engaged in a frantic race against network freezes—selling stablecoins on decentralized exchanges, borrowing unfreezable assets like Ethereum (ETH) on lending platforms like Aave, and splitting 18,270 Bitcoin across automated peel-chain wallets.

4. Are Customer Funds Safe?

Yes. Binance confirmed that the breach only impacted its operational "hot wallets"—which hold funds used for immediate liquidity and active transactions—while the vast majority of user deposits remain secured in offline "cold wallets".

Binance co-CEO Richard Teng stated that the company will absorb the entire financial loss out of its own reserves. The exchange has pledged that no customer will lose funds and plans to release an updated Proof of Reserves report.

-------------------------------------------------

I assume that this story is still developing as we speak.

The situation is actively unfolding as blockchain intelligence firms (TRM Labs, Chainalysis, and Elliptic) track the stolen assets in real time.

Here are the critical updates that have emerged as of Saturday, October 31, 2026:

1. The "Smoking Gun" On-Chain Mistake

While blockchain analytics firms attributed the hack to North Korea’s TraderTraitor unit early on, investigators confirmed the link definitively when the hackers made a tactical slip-up. The attackers inadvertently sent a portion of the stolen Binance funds into the exact same automated laundering wallets holding proceeds from the Bitget hack.

2. Over $2.8 Billion Effectively Frozen

The total frozen or blocked funds has now reached $2.85 billion (~44% of the total heist).

• Stablecoin Issuers: Tether, Circle, and Ripple blacklisted addresses holding frozen USDT and USDC.

• DeFi Protocols: The Arbitrum Security Council and protocols like World Liberty Financial moved quickly to freeze additional tokens (including $74.6M in ARB tokens) before they could be bridged away.

3. Automated 24/7 Laundering Scripts

Because stablecoins can be frozen remotely by their issuers, the North Korean hackers have entered a high-speed race against network security teams. Elliptic reports that the hackers are using custom, automated scripts running around the clock to:

• Swap to Unfreezable Assets: Quickly trade stablecoins for native Ethereum (ETH) and Bitcoin (BTC) on decentralized exchanges. The hackers currently hold over 420,000 ETH and 18,270 BTC (roughly $2.4 billion in assets), which sit in raw addresses where no central issuer can freeze them.

• Peel Chains & Micro-Transactions: Scripted laundering wallets are firing off automated transactions every 30 to 96 seconds—routinely sending test transfers of exactly 1 TRX followed by irregular, randomized decimal amounts to obscure tracing algorithms.

4. Binance Operations & Proof of Reserves

Binance co-CEO Richard Teng reiterated that the loss will be entirely covered by internal exchange reserves. While hot wallet deposit and withdrawal services across several chains remain temporarily suspended or rate-limited for security checks, Binance confirmed it will publish an updated, audited Proof of Reserves report.

--------------------------------------

Explain how EIP-7702 delegation works and how the hackers used it in the 2026 Binance exploit.

The use of EIP-7702 in the October 2026 Binance hack marks a watershed moment in cyberattacks, representing the first time this specific Ethereum upgrade has been weaponized on a massive, multi-billion-dollar scale.

1. What is EIP-7702?

Proposed to bring smart-contract capabilities (like batching transactions and social recovery) to standard Ethereum accounts (EOAs—Externally Owned Accounts, or regular user/hot wallets), EIP-7702 allows a normal wallet to temporarily point to and execute smart-contract code.

When a wallet signs an EIP-7702 authorization tuple, it essentially attaches a piece of code to its address for a transaction. From that point forward, when the address is invoked, the Ethereum Virtual Machine (EVM) runs that external code inside the context of the victim's wallet.

2. How the Hackers Weaponized It Against Binance

During the exploit on Ethereum, the hackers leveraged a compromised signing environment (derived from the DevOps laptop breach) to deploy a precision attack using pre-signed EIP-7702 authorizations:

• The Delegation Pivot: The attackers had prepared 50 pre-signed authorization payloads in advance. They submitted a transaction that forced a primary Binance hot wallet to point its code slot to an attacker-controlled sweeper contract.

• Turning the Wallet Against Itself: Because EIP-7702 allows delegated code to execute using the wallet's own authority and storage permissions, the moment the delegation was active, the Binance hot wallet became its own robber.

• The Automated "Sweeper" Loop: The malicious code hard-coded a specific operator address and contained a sweep() function. When triggered, it instantly inventoried all token balances (ETH, stablecoins, and altcoins) and executed native transfer and transferFrom calls to push everything out to the hackers' address.

• Perpetual Draining: The scariest part of the EIP-7702 mechanism is its persistence. Because the code was written directly to the account's execution slot, the hackers did not need to re-sign anything. As users or automated systems continued to deposit fresh funds into the Binance hot wallet afterward, the malicious sweeper contract automatically vacuumed up the new arrivals in subsequent automated loops.

In short, EIP-7702 allowed the hackers to transform a standard exchange hot wallet into an automated funnel, bypassing the need for endless manual withdrawal requests and draining hundreds of millions of dollars in mere minutes.

----------------------------------------------

Source

https://www.youtube.com/watch?v=cPiCcg-eErw

Google Gemini

It's a Wonderful Day in the Neighborhood

It's a Wonderful Day in the Neighborhood

Some cheap Canadian Mid-Cap stock ideas that trade in the Canadian market, which is the investing neighborhood I hang out in. Let the great unwashed go all agog about their AI stocks which are all over-owned and over-analyzed. I prefer to explore the less-travelled region of the markets where there is less competition for information...So join me below a shady lamppost in a dark corner of town...It's a wonderful day in the neighborhood.

--------------------------------------

Element Fleet Management Corp. (TSX: EFN)

Element Fleet Management Corp. (TSX: EFN) is the largest pure-play, publicly traded commercial automotive fleet management company globally. Headquartered in Toronto, Ontario, the company manages approximately 1.56 million vehicles across North America, Australia, and New Zealand.

Core Business Model & Revenue Streams

Element operates an asset-light, capital-flexible model designed to serve commercial clients (corporate fleets, utilities, public sectors, and logistics). Its earnings model relies on three primary streams:

1. Services Revenue (Unlevered & Recurring): Represents over 50% of net revenue. Covers end-to-end fleet operations including fuel card management, maintenance and repair, telematics, accident management, driver safety training, and licensing/titling services.

2. Net Financing Revenue: Earned via direct vehicle leasing (primarily open-ended leases where residual value risk is borne by the client) and financing structures.

3. Syndication Revenue & Capital-Light Initiatives: Income generated by offloading lease assets and related receivables to third-party financial institutions and institutional investors. The company actively expanded its capital-light capabilities by launching an Equity Residual Program, allowing it to maximize capital flexibility and support share repurchases.

Strategic Positioning & Growth Drivers

• Transition to Capital-Light Growth: Element has systematically shifted its operational focus toward high-margin service fee income and syndication channels to lower its capital intensity and enhance Return on Equity (ROE).

• Emerging Mobility & Autonomous Vehicles: The company has partnered with technology platforms to manage autonomous commercial fleets. Notably, it expanded its agreement with Waymo to support autonomous ride-hailing fleet management.

• Operational Efficiency: Management continues to optimize cost structures through internal automation, targeting ~8% organizational headcount reductions to realize $20 million in run-rate savings.

Key Financial Overview

Metric	Financial Detail
Market Capitalization	~$6.0 Billion CAD
Vehicles Under Management (VUM)	~1.56 Million
Annual Common Dividend	$0.60 CAD per share (quarterly payout of $0.15 CAD)
Dividend Yield	~2.6% – 2.8%
Adjusted ROE	~19.5% – 20.3%
Financial Leverage	Debt-to-Capital ~76% (typical for specialized lease/finance issuers)

Core Investment Strengths & Key Risks

Strengths:

• Stable Cash Generation: Highly predictable, recurring service revenue backed by long-term corporate contracts.

• Low Residual Value Risk: The majority of leases are structured as open-ended, shifting vehicle resale price risk back to the commercial enterprise client.

• Disciplined Capital Allocation: Management maintains a balanced approach between organic growth, share repurchases under NCIB, and dividend growth.

Risks:

• Interest Rate & Funding Exposure: As a non-bank financing entity, profit margins depend on borrowing costs and credit market liquidity.

• Credit Quality & Concentration: Exposure to corporate client solvency and potential default risks during macroeconomic slowdowns.

• Syndication Volume Variability: Financial quarters can fluctuate based on volume demand from institutional buyers in the syndication market.

-----------------------------------------------

Colliers International Group Inc (TSX: CIGI)

Colliers International Group Inc. (TSX: CIGI / NASDAQ: CIGI) is a leading global diversified professional services and investment management company. Headquartered in Toronto, Ontario, the firm operates across more than 60 countries with over 22,000 professionals, managing $110+ billion in assets under management (AUM) and generating approximately $6 billion USD (~$8.4B CAD) in annual revenue.

Historically known as a pure-play commercial real estate broker, Colliers has systematically transformed its earnings profile into a highly resilient, recurring-revenue platform.

Core Business Model & Pillars

Colliers operates through three main business lines:

1. Commercial Real Estate (CRE Services):

   • Provides lease and sales brokerage, property management, valuation, project management, and corporate advisory services to corporate and institutional clients globally.

   • Brokerage fees are transactional, while outsourcing, property management, and advisory services generate recurring fee income.

2. Investment Management:

   • Manages private equity, real estate, and infrastructure funds on behalf of major institutional investors globally.

   • Generates high-margin contractual management fees and performance-based incentive fees on long-duration locked-in capital.

3. Engineering & Design Services:

   • Expanded through strategic acquisitions (e.g., Bergmann, Maser Consulting, Agvance) to offer structural, civil, environmental, and infrastructure engineering.

   • Characterized by long-term government and corporate contracts that provide strong downside protection across economic cycles.

Strategic Positioning & Growth Strategy

• The FirstService Heritage: Spun off from FirstService Corporation in 2015, Colliers retains a disciplined, entrepreneurial management framework. Management and insiders hold significant equity, aligning leadership closely with shareholder value creation.

• High Insider Ownership & Decentralized Execution: Operates an enterprising, partnership-based culture where local leadership retains equity stakes in regional operations.

• M&A Engine (Programmatic Acquisitions): Employs a proven consolidation playbook, acquiring founder-led boutique firms in engineering, investment management, and specialty advisory, then scaling them through Colliers’ global network.

• Shift to Contractual & Recurring Revenue: Over 60% of earnings are now derived from recurring investment management fees, property outsourcing, and engineering services, insulating the business from cyclical fluctuations in commercial leasing and sales.

Key Financial Overview

Metric	Financial Detail
Market Capitalization	~$6.7 Billion CAD (~$4.8B USD)
Enterprise Value	~$13.0 Billion CAD (reflecting net debt)
Assets Under Management (AUM)	~$110+ Billion USD
Normalized ROE	~23.2% (TTM basis)
Dividend Yield	~0.3% ($0.30 USD annual semi-annual distribution)
Capital Allocation Strategy	Aggressive reinvestment in programmatic M&A over high cash dividends

Investment Highlights & Risks

Strengths:

• Proven M&A Track Record: Decades-long history of compounding capital through disciplined, accretive tuck-in acquisitions.

• High ROE & Capital Efficiency: Consistently delivers double-digit return on equity driven by capital-light service fees.

• Resilient Revenue Mix: Scaling engineering and investment management buffers the transaction-heavy brokerage business.

Risks:

• Commercial Real Estate Volatility: Transaction brokerage volumes remain sensitive to high interest rates, credit spreads, and office property valuations.

• Financial Leverage: Uses credit facilities to fund programmatic acquisitions, resulting in higher net debt relative to market capitalization.

• Integration Risk: Rapid platform expansion across disparate engineering and advisory firms requires rigorous operational execution.

----------------------------------------------

Mainstreet Equity Corp. (TSX: MEQ)

Mainstreet Equity Corp. (TSX: MEQ) is a Calgary-based real estate operating company focused on acquiring, re-positioning, and managing mid-market, multi-family residential rental properties across Western Canada. Founded by CEO Navjeet (Bob) Dhillon in 1997, the company manages a portfolio of over 19,000 apartment units across Alberta, British Columbia, Saskatchewan, and Manitoba, with total portfolio assets valued at over $3.9 billion CAD.

Unlike standard Real Estate Investment Trusts (REITs) that focus on distributing cash flow to unit holders via high dividend yields, Mainstreet operates as a capital-compounding real estate corporation that prioritizes internal reinvestment and organic net asset value (NAV) growth.

Core Business Model: The "Mainstreet Value Chain"

Mainstreet targets mid-market residential properties (typically under 100 units) that are underserved or overlooked by large institutional buyers. The company executes a four-stage compounding loop:

1. Acquire Undervalued Assets: Purchases underperforming, mismanaged, or distressed multi-family residential properties below replacement cost.

2. Renovate & Upgrade ("Mainstreet Spec"): Invests capital into interior upgrades, exterior siding/windows, common areas, and energy-efficiency measures to elevate the asset to modern market standards.

3. Reposition & Improve NOI: Re-leases units at market rents to higher-credit tenants while clustering nearby properties to streamline operational management and lower localized overhead.

4. Refinance with CMHC Capital: Once Net Operating Income (NOI) is stabilized, Mainstreet refinances the asset with long-term, low-cost CMHC-insured debt. This step recovers the initial equity/capital expenditures, which is then deployed into acquiring new underperforming properties.

Geographic Breakdown & Asset Base

Mainstreet’s asset base is concentrated in high-growth Western Canadian urban centers:

• Alberta (Edmonton & Calgary): Represents the core of the portfolio (~10,000+ units combined), benefiting from population inflows and favorable housing supply dynamics.

• British Columbia (Vancouver/Lower Mainland & Regional BC): Highly defensive, low-vacancy market (~4,400 units) delivering premium capital appreciation.

• Saskatchewan & Manitoba (Saskatoon, Regina, Winnipeg): Stable regional rental markets (~4,000 units combined) generating consistent cash flow yields.

Key Financial Overview

Metric	Financial Detail
Market Capitalization	~$1.6 Billion CAD
Portfolio Valuation (IFRS)	~$3.9 Billion CAD
Number of Units	~19,200+ residential apartments
Net Operating Income (NOI) Margin	~66% – 67%
Price-to-Book (P/B)	~0.85x – 0.90x (Trades at a discount to IFRS NAV)
Dividend Yield	~0.15% – 0.20% (Low payout; retains earnings to compound capital)
Insider Ownership	~48% – 49% (High alignment via founder/CEO stake)

Core Investment Strengths & Key Risks

Strengths:

• Strong Alignment & Insider Ownership: Founder and CEO Bob Dhillon owns nearly half of the outstanding equity, ensuring deep insider commitment and alignment with long-term shareholder returns.

• Disciplined Capital Allocator: Operates a non-dilutive organic growth model that avoids issuing new equity, relying instead on recycled capital via CMHC refinancing to compound NAV.

• Western Canadian Demographic Tailwinds: Positioned in affordable Western Canadian housing markets benefiting from interprovincial migration and population expansion.

Risks:

• Interest Rate Sensitivity: The capital-refinancing model depends on long-term debt markets and mortgage interest rates when resetting CMHC-insured debt.

• Regional Concentration: Portfolio earnings remain tied to Western Canadian macroeconomic conditions, resource cycles, and local rental regulations.

• Liquidity & Float: Heavy insider and institutional ownership results in lower daily trading volumes compared to major TSX-listed REITs.

---------------------------------------

Stantec Inc (TSX: STN)

Stantec Inc. (TSX: STN / NYSE: STN) is a global pure-play engineering, architecture, environmental, and infrastructure design firm. Headquartered in Edmonton, Alberta, the company operates out of more than 400 offices worldwide with over 31,000 employees, managing projects across North America, Europe, the UK, Australia, and New Zealand.

Rather than acting as a general construction contractor, Stantec functions strictly as an intellectual services provider (planning, design, engineering, project administration, and environmental consulting), avoiding capital-heavy construction execution risk.

Core Business Model & Revenue Segments

Stantec operates across five core global practice areas:

1. Infrastructure: Represents the largest share of revenue, providing civil engineering, transportation design (highways, bridges, transit), and urban planning for municipal and regional governments.

2. Water: A premier global water consultancy specializing in municipal water/wastewater treatment, coastal resilience, stormwater management, and water distribution systems.

3. Buildings: Offers architectural, structural, mechanical, and electrical design services with a primary focus on healthcare, education, civic infrastructure, and commercial facilities.

4. Environmental Services: Delivers environmental impact assessments, site remediation, permitting, sustainability consulting, and climate resilience frameworks.

5. Energy & Resources: Focuses on energy transition engineering, grid modernization, renewable energy integration (wind, solar, hydro), mining, and industrial water infrastructure.

Geographic Reach & Revenue Mix

Stantec’s revenue footprint is highly diversified across stable geographic regions:

• United States (~50%+ of net revenue): The company’s largest growth engine, benefiting significantly from major U.S. federal funding tailwinds including the Infrastructure Investment and Jobs Act (IIJA), the CHIPS and Science Act, and water infrastructure mandates.

• Canada (~25-30% of net revenue): Stable base of core municipal, provincial, and environmental consulting business.

• Global / International (~15-20% of net revenue): High-margin specialized water and environmental presence across the UK, Europe, Australia, and New Zealand.

Strategic Positioning & Growth Blueprint

• The M&A Consolidation Playbook: Stantec operates a disciplined "buy-and-build" strategy, completing dozens of accretive tuck-in acquisitions over the past decade to acquire regional market share, specialized engineering talent, and municipal client relationships.

• Secular Tailwinds Focus: Positioned at the intersection of major structural global trends: aging public infrastructure replacement, urban flood/water security mandates, energy grid decarbonization, and industrial reshoring/advanced manufacturing facility design.

• Pure-Play Design Focus: By excluding construction execution risk (non-EPC model), Stantec maintains predictable cost structures, lower working capital intensity, and higher risk-adjusted return metrics compared to traditional construction firms.

Key Financial Overview

Metric	Financial Detail
Market Capitalization	~$11.3 Billion CAD
Enterprise Value	~$13.2 Billion CAD (reflecting net debt)
Annual Gross Revenue	~$5.8+ Billion CAD
Normalized ROE	~15.5% – 20.0%
Dividend Yield	~0.9% – 1.0% ($0.84 CAD annual indicated payout)
Adjusted EBITDA Margin	~16.5% – 17.5%
Balance Sheet Leverage	Target Net Debt-to-EBITDA range of 1.0x – 2.0x

Core Investment Strengths & Key Risks

Strengths:

• Resilient Order Backlog: Maintains a multi-billion dollar project backlog driven by multi-year public sector infrastructure and utility contracts.

• Capital-Light Fee Income: High Return on Equity (ROE) supported by fee-for-service consulting without direct construction labor or equipment capital expenditure exposure.

• U.S. Infrastructure Catalyst: Strong multi-year secular momentum driven by long-duration public funding programs in water treatment and grid upgrades.

Risks:

• Public Sector Spending Cycles: Exposure to municipal and regional budget timing, delay in federal fund deployments, or political shifts in infrastructure priorities.

• M&A Integration Execution: Ongoing reliance on programmatic acquisitions requires seamless culture, operational, and software integration across acquired engineering teams.

• Labor & Talent Constraints: Competition for licensed professional engineers, project managers, and technical specialists can pressure wage costs and billing utilization rates.

-----------------------------------------

Source

Google Gemini