South Korea's KOSPI fell 206.92 points to close at 5,730.74 (-3.48%) on Oct. 30, and a sell-side sidecar was triggered around 10:04 a.m. after KOSPI 200 futures slid (Korea Times, Korea JoongAng Daily). Korea JoongAng Daily said foreign investors were net sellers of 1.62 trillion won while institutions and individuals were net buyers. Both outlets tied the selloff to concerns about returns on AI infrastructure spending after Alphabet's third-quarter revenue missed expectations and its free-cash-flow deficit widened, and Amazon's results and guidance fell short. Yahoo Finance reported Amazon's third-quarter earnings per share of $1.89 versus the $1.97 expected, on revenue of $201.9 billion, with AWS sales up 39%. The Bank of Japan held its policy rate at 1.25% in an 8-1 vote, with board member Hajime Takata proposing a hike to 1.5% (Seoul Economic Daily, Reuters). For the first time since adopting its price target in 2013, the BOJ said underlying inflation had reached a level “broadly consistent” with 2%, and it raised its inflation forecast for next fiscal year to 2.6% from 2.4% (Seoul Economic Daily). Analysts quoted by Reuters read the shift as opening the door to a December hike (via Yahoo Finance).

• Indicators to watch · Governor Ueda's press-conference remarks; whether foreign selling in Seoul persists; yen moves; Big Tech capex guidance; U.S. Treasury yields

• B2BOJ speeds up its ETF sales to about ¥860 billion a yearSeoul Economic Daily said the Bank of Japan raised the pace of its exchange-traded fund sales to about ¥860 billion a year, cutting the projected time to unwind the portfolio from 112 years to 43 years.

• B1LS Cable unit to build a $262 million rare-earth magnet plant in South Korea to cut reliance on ChinaLS Cable & System's subsidiary Korea Motion Works signed an agreement with North Gyeongsang Province and Gumi City to invest 350 billion won ($262 million) in a plant producing more than 1,000 tonnes a year of rare-earth permanent magnets, about 17% of South Korean demand (Korea Herald, The Elec). Construction is set to start in the first half of 2027, with neodymium magnets for robots and EVs in mass production from the second half of 2028 and samarium-cobalt magnets for defense later, using feedstock from Australia's Lynas and metal from LS Eco Energy in Vietnam (The Elec).

Watchlist next 12–48 hours and beyond

• Fri, Oct 30 (afternoon ET)
  Rubio–Motegi–Cho trilateral meeting in Atlanta on the sidelines of the G20 foreign ministers' meeting, covering North Korea's launches and drone showcase
• Fri, Oct 30 – Sat, Oct 31
  Official Oleshky evacuee counts; whether Binance restarts withdrawals and whether U.S. agencies comment on attribution
• Sun, Nov 1 (10:59 p.m. Kyiv time)
  Oleshky local truce expires — extension or not
• Tue, Nov 3
  U.S. midterm elections — White House and Pentagon statements on Iran before and after
• Fri, Dec 18
  Bank of Japan December policy decision

Sources 29

• A
  Al JazeeraBinance says $6.3bn stolen in biggest crypto heist in history
  B
• R
  RTÉ (Reuters)Hackers steal $6.3bn from cryptocurrency platform Binance
  B
• A
  ABC News (Australia)Billions stolen as Binance targeted in largest cryptocurrency hack in history
  B
• A
  Arab News (Reuters)Fire-hit tanker continues journey after being attacked in Strait of Hormuz, UKMTO says
  B
• A
  ARY News (AFP)Iran says four tankers on fire after hitting mines in Hormuz
  C
• S
  SiasatTanker hit by explosive devices in Strait of Hormuz
  C
• T
  The Jerusalem PostCENTCOM chief briefs Trump on Iran military options in meeting, source tells 'Post'
  B
• A
  Anadolu AgencyCENTCOM chief briefs Trump on options for renewed attacks on Iran: Report
  B
• T
  The Korea TimesKOSPI falls 3.48% as US tech earnings fuel AI investment concerns
  B
• K
  Korea JoongAng DailyKospi plunges 3.5% as AI concerns trigger semiconductor sell-off
  B
• S
  Seoul Economic DailyBank of Japan Holds Rate at 1.25% as Underlying Inflation Meets 2% Goal
  B
• F
  Financial News (Korean-language)Breaking: Presidential office weighing Cheonghae unit expansion for Hormuz, ‘absolutely no involvement in the war’ (title translated)
  B
• M
  Mediapen (Korean-language)Wi Sung-lac: ‘Weighing Cheonghae unit expansion for Hormuz... still under review’ (title translated)
  C
• A
  Aju Business Daily (Korean-language)Presidential office expects OPCON progress at SCM early next year, reviewing Cheonghae unit expansion for Hormuz (title translated)
  B
• U
  UkrinformHumanitarian aid being delivered to Oleshky, 25 buses with 750 seats ready for evacuation
  B
• K
  Kyiv Post25 Buses, Aid Convoy Set for Russian-Occupied Oleshky in US-Mediated Mission
  C
• M
  MeduzaResidents of Russian-occupied Oleshky have until Friday afternoon to leave. Aid distribution for those who stay is scheduled to begin under a temporary ceasefire.
  C
• T
  The Moscow TimesAid Deliveries and Evacuations in Oleshky Begin After Demining Operation Wraps Up
  C
• K
  Kyiv PostUkrainian Drones Hit Russian Military Food Supplier, Oil Refinery in Overnight Attacks
  C
• F
  France 24North Korea tests attack drones as Kim calls for 'absolute superiority'
  B
• S
  Seoul Economic DailyNorth Korea Shows Off Suicide Drones Striking Mock South Korean, U.S. Targets
  B
• H
  Herald Business (Korean-language)South Korea, U.S. and Japan diplomats hold phone consultation on North Korean ballistic missiles, discuss information sharing and response (title translated)
  B
• T
  The Korea HeraldLS Cable to invest $262m in rare earth magnet plant
  B
• T
  The ElecLS Cable & System to Build Rare-Earth Magnet Plant to Cut China Reliance
  C
• T
  The NationalQatarEnergy turns to US LNG with Woodside deal as Hormuz force majeure drags on
  B
• T
  The Express Tribune (Reuters)QatarEnergy buys US, other LNG to hedge future Hormuz disruptions
  B
• Z
  ZDNet Korea (Korean-language)Japan Airlines reservation system breached, personal data of 92,000 exposed (title translated)
  C
• t
  teissJapan Airlines says hackers accessed data of 92,000 customers through reservation system provider
  C
• L
  Law360Troutman, Baker McKenzie Report Data Breaches
  C

UKMTO said a small boat approached a tanker on its port side 25 nautical miles northeast of Khasab, Oman, on Oct. 29 and attached two explosive devices to the hull above the waterline; the blasts started an engine-room fire that temporarily disabled the vessel (Arab News/Reuters, Siasat). The crew was safe, there was no environmental impact, the fire was put out and the ship continued to its next port of call; it was not immediately clear who carried out the attack (Arab News). According to AFP, Iran's Revolutionary Guards said that “over the past 24 hours, three violating oil tankers exploded and caught fire after striking mines” while trying to use an unauthorized southern route through the strait, and Iran's regular army said a fourth tanker caught fire after hitting mines in a “restricted and dangerous area” east of the strait (via ARY). CENTCOM maintains that mines in the primary transit routes have been cleared, and IRGC spokesman Hossein Mohebi demanded “independent evidence, not statements!” (ARY/AFP). It is not confirmed whether the tanker cited by Iran's army is the one UKMTO reported. Anadolu and The Jerusalem Post, citing The Wall Street Journal, reported that CENTCOM commander Adm. Brad Cooper briefed President Trump on Oct. 29 on military options for Iran, with Defense Secretary Pete Hegseth and Joint Chiefs Chairman Gen. Dan Caine present; the Pentagon and CENTCOM declined to comment (Anadolu). Both outlets said the U.S. has added air defenses, munitions and supplies in the region and moved troops away from vulnerable bases.

• Indicators to watch · Further UKMTO alerts and the attacked tanker's name and flag; new IRGC or Iranian army statements; White House and Pentagon announcements around the Nov. 3 midterms; Qatari-mediated U.S.-Iran contacts

Ukraine's parliamentary human rights commissioner, Dmytro Lubinets, and Russia's human rights commissioner, Yana Lantratova, set out on Oct. 30 with a humanitarian aid convoy to Russian-occupied Oleshky in the Kherson region (Meduza, Ukrinform). Meduza said Lubinets's team traveled overland through Belarus and Russia because Oleshky cannot be reached across the front line or the mined river. Lubinets said “twenty-five buses with a total capacity of 750 seats have been prepared, along with ambulances for people with limited mobility” (Ukrinform, Kyiv Post); residents who want to leave had until 2 p.m. on Oct. 30 to depart, and aid distribution for those staying was set to begin after 2:30 p.m. (Meduza, Kyiv Post). Russia and Ukraine said in nearly identical statements that demining of the mission's routes was complete (The Moscow Times). The local truce, brokered by first lady Melania Trump, took effect Oct. 27 and runs until 10:59 p.m. Kyiv time on Nov. 1 (Kyiv Post, Meduza). Kyiv Post reported that the convoy was preparing to enter Oleshky and that the evacuation had not yet begun when it published.

• Indicators to watch · Official evacuee counts from Lubinets, Lantratova or the White House; whether the truce is extended past Nov. 1; strike intensity elsewhere during the truce; scheduling of U.S.-Russia-Ukraine talks

• C2Law firms Troutman Pepper Locke and Baker McKenzie report breaches from social-engineering attacksLaw360 reported that Troutman Pepper Locke and Baker McKenzie notified the California and Texas attorneys general this week of data breaches last month stemming from social-engineering attacks. The number of people affected was behind a paywall and could not be confirmed.

U.S. Impact Assessment

• Crypto platforms and the North Korean threatThe Binance breach reportedly started with a single engineer's laptop and drained funds across multiple chains in minutes, and analysts tie it to the same North Korean unit behind Bybit. U.S. exchanges, custodians and fintechs should re-check how developer and DevOps endpoints reach production systems, hot-wallet withdrawal limits and automated anomaly blocking, and screen inbound flows against addresses that freezes and law enforcement flag as linked to the theft.
• Energy and shippingA small-boat attack that physically attached explosives to a tanker's hull adds a close-in threat on top of Iran's mine claims, while Washington is reportedly reviewing military options. U.S.-owned and U.S.-chartered operators in the Gulf should review crew guidance for small-craft approaches at night, war-risk cover and routing, and watch for announcements around the Nov. 3 midterms. Brent is at $112.58 (+1.61%) on collected data.
• Markets and ratesThe AI-capex reassessment that started with Alphabet and Amazon is now hitting Seoul and Tokyo chip stocks, and a BOJ that says its inflation goal is met raises the odds of a December hike. Firms with yen funding or yen-linked exposures should stress-test for a stronger yen and higher Japanese rates. On collected data, the Nasdaq is at 26,184.73 (-1.38%), the U.S. 10-year yield at 4.989% (-6bp) and the VIX at 18.09 (+5.17%).
• Third-party access riskThe Amadeus leaks at Japanese and Korean carriers and the social-engineering breaches at two large law firms both came through trusted outside access rather than the victims' own perimeters. Corporate travel managers should warn employees about phishing that cites real booking details, and legal and compliance teams should ask outside counsel and IT vendors how they verify help-desk and credential-reset requests.

Edition archiveRSS

• Saturday, Oct 31 · Morning Edition · 05:42 ETAttacks on ships around Hormuz hit a wartime monthly high as Trump says the Iran war will be “wrapped up soon,” Binance finds more entry points behind its $6.3 billion theft, and Seoul weighs stretching its Cheonghae naval unit toward Oman
• Friday, Oct 30 · Evening Edition · 17:44 ETTankers keep getting hit around the Strait of Hormuz as Qatari mediators carry a U.S. letter into Tehran, a tech rout hands the S&P 500 its worst day since June, and the Secret Service joins the hunt for Binance's stolen $6.3 billion
• Friday, Oct 30 · Morning Edition · 05:40 ET · CurrentA small boat attached explosives to a tanker in the Strait of Hormuz, Binance was hit by a roughly $6.3 billion hack that blockchain analysts tie to North Korea, and AI-spending worries sent South Korea's KOSPI down 3.48%
• Thursday, Oct 29 · Evening Edition · 17:46 ETIran's Revolutionary Guards say three tankers hit mines on Hormuz's southern route and Houthi missiles are downed over Riyadh, as a Russian drone kills at least 14 at a Dnipro rail station and Florida discloses a student-aid breach that may affect 4.9 million people
• Thursday, Oct 29 · Morning Edition · 05:42 ETNorth Korea fires about 10 short-range ballistic missiles six days after Seoul offered military talks, as DHS says it is working to contain a leak of 40,000-plus employee records and Trump says Vance's Iran outreach was about medical aid, not peace talks
• Wednesday, Oct 28 · Evening Edition · 17:40 ETIran dismisses Qatar's draft deal as 'unacceptable ideas' amid reports that U.S. and Israeli officials expect a week of strikes after the midterms if talks fail, while a leak exposes more than 40,000 DHS employees and the Fed holds with two votes for a hike
• Wednesday, Oct 28 · Morning Edition · 05:36 ETThe U.S. has reportedly told Gulf allies to brace for a short, intense Iran campaign after the Nov 3 midterms as oil rebounds, while three South Korean financial firms, including crypto exchange Bithumb, disclose hacks
• Tuesday, Oct 27 · Evening Edition · 17:39 ETA cyberattack forces ambulance diversions at New Mexico's only Level 1 trauma center, the Houthis claim a missile hit on Saudi Arabia's largest refinery, and Iran threatens 'legal action' against every ship run by Sinokor, the biggest crude carrier through Hormuz
• Tuesday, Oct 27 · Morning Edition · 05:44 ETA local truce takes hold in occupied Oleshky even as Russian missiles hit Kyiv's Southern Bridge and a student dorm, the Houthis fire ballistic missiles at Saudi Arabia's Eastern Province hours after the Tehran talks, and CISA confirms PHP2Shell is under attack
• Monday, Oct 26 · Evening Edition · 17:45 ETIran and three Mecca pact powers agree to keep talking after a first four-way meeting in Tehran and oil eases, but the Saudi-led coalition widens strikes on Houthi missile sites and North Korea parks self-propelled guns in plain view of the South
• Monday, Oct 26 · Morning Edition · 05:47 ETMediators converge on Tehran and oil eases, but a Houthi missile again targets Riyadh and South Korea reports its first hacking-related customer data leak at an insurer
• Sunday, Oct 25 · Evening Edition · 17:44 ETTrump says it's decision time on Iran, 'finish it off' or make a deal, but rules out a strike Sunday, as the Houthis claim a ballistic-missile barrage on Riyadh's newly reopened airport and CENTCOM's commander says Hormuz shipping lanes are clear of mines
• Sunday, Oct 25 · Morning Edition · 05:50 ETTrump says a U.S. strike on Iran could come 'maybe tomorrow' while floating a 'big, beautiful agreement,' as Houthi missiles and drones fly at Riyadh and Khamis Mushait and Musk says SpaceX throttled Ukraine over 'offensive' Starlink use
• Saturday, Oct 24 · Evening Edition · 17:43 ETA U.S. intelligence memo warns Iranian plots against Americans abroad have reached 'advanced stages' as the State Department thins out Gulf embassies, Houthi ballistic missiles fly at Riyadh, Taif and Yanbu, and Ukraine says its Starlink speed caps are gone

Binance, the world's largest crypto exchange, confirmed a hack on Oct. 30. Al Jazeera, RTÉ (carrying Reuters) and Australia's ABC reported that attackers tried to take about $6.3 billion, of which about $3 billion has been frozen. Reuters said Tether froze $1.57 billion, Circle $800 million and Ripple about $200 million, and that the funds were moved across 10 blockchains in roughly 20 minutes (via RTÉ). An initial investigation indicated the breach began with a compromised laptop belonging to one of the exchange's engineers, which gave the attackers access to execute unauthorized withdrawals (Al Jazeera, RTÉ). ABC said 30 to 40 tokens were drained from internet-connected “hot wallets” and that Binance said it had found no evidence of a wallet private-key leak, called customer funds safe and pledged to cover all losses; the exchange temporarily suspended deposits and withdrawals for security checks (ABC, Al Jazeera). Blockchain-analytics firm TRM Labs assessed with “high confidence” that North Korea's TraderTraitor unit, linked to the Lazarus Group, carried out the attack, and Chainalysis also pointed to North Korean hackers (Al Jazeera, RTÉ); the U.S. government has not issued an attribution. The previous record was the $1.5 billion Bybit theft in February 2025, which the FBI attributed to North Korea (RTÉ).

• Indicators to watch · Timing of Binance's withdrawal restart and its final loss figure; FBI or Treasury statements; further freezes by stablecoin issuers; any OFAC action on laundering addresses

North Korea's state news agency KCNA reported Oct. 30 that Kim attended an unmanned aerial technology exhibition and live-fire demonstration on Oct. 29 featuring suicide attack drones, multipurpose drones firing air-to-surface missiles, cruise missiles and 600mm multiple rocket launchers, and claimed they hit an island target with “100 percent accuracy” (France 24, Seoul Economic Daily). Seoul Economic Daily said the footage showed attacks on mock South Korean guard posts, M1 Abrams tanks and K9 self-propelled howitzers, and that Kim called for “absolute superiority” in unmanned aerial vehicles and named applying AI to unmanned systems a top priority. South Korea's Joint Chiefs of Staff said the North fired about a dozen short-range ballistic missiles from the Wonsan area toward the East Sea around 12:30 p.m. on Oct. 29, flying about 250 kilometers (France 24, Seoul Economic Daily); France 24 said it was not clear whether those launches were linked to the drone demonstration, and Seoul's national security office called them violations of U.N. Security Council resolutions. On Oct. 30, senior South Korean, U.S. and Japanese foreign ministry officials held a phone consultation to share information on the launch and coordinate a response (Herald Business).

• Indicators to watch · Outcome of the Rubio–Motegi–Cho meeting in Atlanta; any U.N. Security Council action; further North Korean launches or drone incidents near the border; KCNA commentary on Seoul's talks proposal

• C3IRGC claims it captured a U.S. MQM-170 reconnaissance droneAccording to AFP, the Revolutionary Guards said they captured a U.S. MQM-170 reconnaissance drone during operations in the western Strait of Hormuz (via ARY). We found no U.S. military confirmation.

• B1Seoul expects progress on wartime operational control at a Security Consultative Meeting early next yearWi said the South Korean and U.S. defense ministers will meet in Washington in December and hold the annual Security Consultative Meeting early next year, where he expects “substantive results” on the transfer of wartime operational control; he said the allies completed the full operational capability assessment during this year's Ulchi Freedom Shield exercise (Aju Business Daily, Mediapen).

Intelligence gaps · unconfirmed

• Binance's deposit status conflicts: ABC and Al Jazeera said both deposits and withdrawals were suspended, while RTÉ (Reuters) said deposits were unaffected and withdrawals were expected to resume within 48 hours. We could not confirm the exact time of the breach or read Binance's own notice.
• Price conflict: Reuters (via RTÉ) put bitcoin down more than 3% at $76,368 and Al Jazeera said it fell about 5% to below $77,000, versus the collected quote of $77,640 (-0.19%), apparently on a different time basis. We used only the collected quote.
• Hormuz: the attacked tanker's name, flag and attacker are unknown. We could not independently confirm whether the tanker Iran's army cited is the one UKMTO reported, or whether the three tankers the IRGC described were actually damaged. The drone-capture claim is single-source (AFP).
• The CENTCOM briefing is confirmed only through Anadolu's and The Jerusalem Post's accounts of The Wall Street Journal; we could not open the WSJ or Axios stories. Axios framed the briefing around the naval blockade (headline only).
• KOSPI flow and currency figures differ by outlet: foreign net selling was 1.62 trillion won per Korea JoongAng Daily but 1.8255 trillion won in another report, and the won's gain was 2.5 won per Korea Times versus 5.2 won per Korea JoongAng Daily. The Bank of Korea board (1,334.30, -0.19% vs. 10/29) matches 2.5 won. Sidecar timing is given as 10:04 or 10:05 a.m.
• BOJ: we did not see Governor Ueda's press conference. The Dec. 17–18 meeting dates come from calendar aggregators, not the BOJ's own schedule page.
• The LS Cable agreement date is Oct. 30 per Korea Herald and Oct. 29 per The Elec.
• The end of the unauthorized access window at Japan Airlines is given as Sept. 23, 2026 by ZDNet Korea and Sept. 23, 2024 by teiss. Reports that ANA was also affected came from a single travel blog and were not used.
• Oleshky: as of collection (morning of Oct. 30, Kyiv time) we found no official confirmation that the evacuation had begun or how many people left. The refinery strike lacks an official Ukrainian claim, and drone counts over Moscow varied too widely to use.
• The outcome of the U.S.-Japan-South Korea foreign ministers' meeting falls after the collection window; its timing is based on SBS headlines because the State Department schedule page did not open.
• Scoring note: for “nk-ballistic-launch-oct13-31,” South Korea's JCS said North Korea fired about a dozen short-range ballistic missiles from the Wonsan area around 12:30 p.m. on Oct. 29 (France 24, Seoul Economic Daily). For “opcon-target-year-announced-dec31,” Wi said the Security Consultative Meeting is planned for early next year.
• Unverified or unused: the White House statement on the DHS staff data leak (Washington Post, not opened), follow-ups on the Florida Department of Education breach, Treasury's Rwanda sanctions (announced before the window), and Israel's final election results (released Oct. 28–29).