Binance Says It Has Spent 10 Months in Talks With Malaysia's SC and Bank Negara on a Licence
Binance says it has been talking to the Securities Commission and Bank Negara Malaysia for 10 months about a licence, five years after it was ordered to stop operating there and weeks after the SC re-listed it.
Binance wants a licence to serve Malaysian users again. A spokesperson told Bloomberg on 31 October that the exchange had been "jointly engaging the Securities Commission Malaysia (SC) and Bank Negara Malaysia over the last 10 months, on a licensed pathway", in a week when Binance was dealing with the theft from its hot wallets.
It hasn't said which licence it wants, only that it is discussing the "viability and structure of licensed business model in Malaysia".
Ordered out in 2021
The SC ordered Binance in July 2021 to cease operating in Malaysia after finding it was illegally running a digital asset exchange. At the time it publicly reprimanded four Binance entities and the group's then chief executive, and ordered the entities to disable the Binance website and mobile applications in Malaysia.
That position hasn't changed.
In an update dated 8 October 2026, the SC put Binance back on its investor alert list for operating a digital asset exchange without registration; it was the only entity added that day.
The Ministry of Finance said in a parliamentary reply in July that the exchange's website and app remained blocked in Malaysia.
The ringgit question
MP Lim Guan Eng wrote to the SC in September asking it to check whether Binance's peer-to-peer platform was facilitating ringgit transactions through adverts listed under another currency. Binance says it then disabled a Papua New Guinea kina marketplace on that platform which was "unofficially pegged to the ringgit".
More news
n0n Ransomware Lists ONE, Pelindo's ILCS and NCT Kandla Among 38 Maritime Firms; the Gang Uses an AI Coding Agent
The n0n ransomware group listed 38 maritime and logistics firms on 12 October, among them Singapore's ONE and Apical, Indonesia's ILCS Pelindo, Vietnam's Nam Dinh Vu Port and India's NCT Kandla. None has confirmed a breach.
Brotli Flaw CVE-2026-111497 Reaches WordPress Through Pingbacks: RCE Shown on One Docker Image, Fix Is the Server Library
An unauthenticated WordPress pingback can make the server decode attacker-supplied Brotli data, reaching CVE-2026-111497. Code execution is shown on one Docker image; the fix is a patched libbrotli, not a WordPress update.
Binance Proof of Reserves for 31 October Is Now Verifiable; Thai SEC Watches Exposure as Indodax Says It Closed a Security Gap
Binance has finished the zero-knowledge proof for its 31 October reserves snapshot and plans the next withdrawal phase for 3 November. In the region, Thailand's SEC is monitoring exposure and Indodax says it closed a security gap.