Binance lost billions to hackers yet dodged a customer run, while Bitcoin ETFs that were never touched bled over $1 billion in two sessions. Something else may be driving the exodus, and the timeline tells a different story.
The Crypto Desk desk. Editor: Sam Daodu.
This post may contain links from our sponsors and affiliates, and Flywheel Publishing may receive compensation for actions taken through them.
Bitcoin (CRYPTO:BTC) traded at $75,616 late Friday morning. That is 1.5% lower over 24 hours and 9.2% lower over 30 days. CoinGecko’s Fear and Greed Index reads 41. The provider labels it “fear.” The reading comes one week after Binance confirmed that hackers stole about $6.3 billion in digital assets on October 29. Since then, money leaving U.S. spot Bitcoin ETFs has become the market’s main evidence that investors are nervous.
Farside Investors’ ETF-flow database shows U.S. spot Bitcoin ETFs losing $643.2 million on Friday, October 30 and $398.6 million on Monday, November 2, a combined $1.042 billion. Those funds were never breached, and their custody arrangements played no part in the incident. Binance, the company that actually lost the money, reported net customer withdrawals of about $4.72 billion after reopening. That came to roughly 3% of platform assets. So the hacked exchange avoided a run, while funds untouched by the hack saw redemptions. Does that gap mean pessimism has gone far enough to mark a bottom, or is the crowd pricing something real?
What ETF Flows and the Fear Gauge Really Measure
A spot ETF’s net flow is the dollar value of new shares created minus shares redeemed in a session. Large trading firms called authorized participants handle creations and redemptions, and they buy or sell actual bitcoin to back them. A net outflow therefore means bitcoin left the fund’s custody. SoSoValue’s aggregate data shows a further outflow of $430.2 million on November 5, after a single inflow day of $74.6 million on November 4.
The Fear and Greed Index combines market inputs such as volatility, momentum and volume into a single score from 0 (maximum fear) to 100 (maximum greed). Contrarian traders lean on both measures for the same reason. When fear is widespread and funds are bleeding, most holders who wanted out have already sold. Less supply is left to hit any bounce. That logic is why heavy redemptions plus a fearful reading often get treated as a buy signal. A reading of 41 sits in CoinGecko’s fear band and stops short of extreme fear, so the capitulation case starts out weaker than headlines suggest.
Why the Hack-Driven Outflow Story Is Weaker Than It Looks
Break the flow data apart and the hack explains less than the narrative claims.
- The selling started earlier. ETFs lost $635.5 million on October 22 and $487.1 million on October 7, both before any breach. Bitcoin’s 30-day high close was $84,082 on October 21, and the price had already slid to $81,102 by October 23.
- Outflows were small next to trading volume. On October 30, total value traded hit $6.35 billion, the highest in the window. Net redemptions were about 10% of that. Most of that day’s activity was shares trading between existing holders.
- The fund base barely moved. From October 29 to November 5, cumulative net inflows fell from $57.62 billion to $56.11 billion. That is about $1.51 billion, or 2.6% of everything ever put in. Total net assets fell by a larger $7.62 billion over the same stretch, so most of the shrinkage came from the price decline itself.
- Macro fear eased. ETF selling continued. The CBOE Volatility Index (VIX), which measures expected 30-day moves in the S&P 500, topped out at 21.15 on November 2. By November 4 it had fallen to 16.61. Bitcoin funds still lost money the next day. Analyst Beth Kindig pointed to another driver on X: “The dollar is back in an uptrend, yields are climbing”. A rising dollar and higher bond yields raise the cost of holding an asset that pays no income.
The contagion story also gets clouded by Ethereum (CRYPTO:ETH). It is down 12.93% over one month and 24.49% year to date. Bitcoin is down 13.66% year to date. The weakness covers the whole asset class and goes back well before October 29.
ETF flow data carries a major blind spot. Most buying and selling happens on trading platforms directly. Those trades never touch the blockchain or a U.S. ETF ledger. Bloomberg reported that Binance lost market share to rival exchanges after the hack. Traders moving between venues show up as neither buying nor selling in ETF data. Flat ETF flows and an inactive blockchain look identical whether offshore investors are quietly accumulating or doing nothing.
What Would Actually Turn Bitcoin Around
Capital flows set price. On the exchange side, Binance said it had restored about 95% of affected assets by Monday using company resources and protection funds. It said withdrawals were stabilizing. Reuters also reported that the hack prompted U.S. regulators to check in on bank systems. That is a policy thread to follow, but it does not point to a run on regulated custody.
The real pressure point is ETF demand. The last stretch of strong buying came on October 19 and October 21, with inflows of $526.6 million and $528.4 million. Those sessions lined up with the run to the 30-day high. The only November inflow reversed within a day.
Price levels matter just as much. A moving average is the mean closing price over a set number of days, and traders use it to judge trend. Bitcoin sits below its 20-day average of $79,955.66. It is about 7.8% below its 50-day average of $82,003.32, and only about 3.3% above its 200-day average of $73,197.26. Hedgeye noted that “Bitcoin hits 8-week low below $76,000”, and Friday’s price sits under the $76,005.51 close on November 5, the 30-day low.
Does the Post-Hack ETF Exodus Mark a Bottom for Bitcoin?
Our view is no. The outflows began before the breach. They make up a small piece of the fund base. They also line up with dollar strength and weakness across crypto more closely than with any hack-specific panic. A fear reading of 41 is too mild to read as capitulation. Binance’s limited withdrawals show the market absorbed the theft without a run, and that points to resilience while also meaning there was no forced-selling flush to clear out sellers.
Two verifiable conditions would change that view:
- Flow test: U.S. spot Bitcoin ETF cumulative net inflows climb back above the $57.62 billion level of October 29. That would fully reverse the post-hack redemptions. Until then, buyers have not returned.
- Price test: Bitcoin closes back above its 50-day average of $82,003.32. A close below the 200-day average of $73,197.26 would show the selling runs deeper than hack fear, and the fear reading would then look like a warning that came true.
Contact [email protected] for any questions or corrections.
After two decades of patrolling the dark corners of suburbia as a police officer, Rich Duprey hung up his badge and gun to begin writing full time about stocks and investing. For the past 20 years, he’s been cruising the markets looking for companies to lock up as long-term holdings in a portfolio while writing extensively on the broad sectors of consumer goods, technology, and industrials. Because his experience isn’t from the typical financial analyst track, Rich is able to break down complex topics into understandable and useful action points for the average investor. His writings have appeared on The Motley Fool, InvestorPlace, Yahoo! Finance, Money Morning, and, of course, 24/7 Wall St. He has been featured in both U.S. and international publications, including MarketWatch, Financial Times, Forbes, Fast Company, and USA Today.
