Bitcoin ETFs Lose $643 Million After Binance Breach, Erasing Much of 2026's Inflows

A four-day recovery ends

SoSoValue data put the October 30 redemptions at their highest level since June 25, when approximately $696.3 million left the funds. CoinDesk reported that the October withdrawal ranked 12th among daily net outflows since U.S. spot Bitcoin ETFs started trading in January 2024.

The session wiped out roughly $441 million that investors had added over four consecutive trading days, October 26-29. Before the withdrawal, net inflows for 2026 had exceeded $1 billion. Cumulative net inflows since the funds' launch stood at $56.98 billion afterward, according to SoSoValue, while Bitfire Research reported combined net assets of about $98.14 billion, below $100 billion.

October's largest daily withdrawal since June 25 had already been surpassed twice that month. SoSoValue recorded $484.9 million in redemptions on October 7, followed by $635.49 million on October 22 and $643.33 million on October 30.

A separate tally by 24/7 Wall St., citing Farside Investors, put October's net outflow at $515 million. That accounting showed $111.2 million in net inflows from October 1 through October 28, followed by $626.3 million in net withdrawals over the final two sessions. The week ending October 30 lost $202.4 million, compared with an inflow of $304.7 million the previous week.

Five funds account for the withdrawals

BlackRock's iShares Bitcoin Trust, or IBIT, recorded the largest exit at $233.7 million. Fidelity's Wise Origin Bitcoin Fund, FBTC, followed with approximately $201 million.

SoSoValue data showed withdrawals from only three other products: $129.55 million from ARK 21Shares' ARKB, $53.32 million from Grayscale's GBTC and $25.72 million from Bitwise's BITB. The other seven U.S. spot Bitcoin ETFs had no net flow that day.

Weakness extended beyond ETF subscriptions. The Coinbase Premium, a measure of Bitcoin's price on Coinbase relative to other exchanges and a gauge of U.S. demand, remained between -0.18% and -0.27%. The crypto Fear and Greed Index dropped into the 30-34 range, and spot Ethereum ETFs also experienced withdrawals during the week.

The security shock behind the market turmoil

Binance estimated the financial impact of its October 29 security incident at approximately $6.3 billion. Preliminary findings suggested that an operations engineer's computer may have been compromised, but the exchange said it found no evidence that private wallet keys had been exposed.

TRM Labs estimated that the attacker transferred $6.36 billion from Binance wallets across 10 blockchains. Most of the money moved within about 20 minutes, beginning at 20:05 UTC. The firm described the incident as the largest crypto theft on record, roughly four times the size of the $1.5 billion Bybit hack in February 2025.

Both TRM Labs and Chainalysis attributed the theft to TraderTraitor, a North Korean state-backed hacking unit also tracked as Lazarus Group and APT38. The FBI identified North Korea's TraderTraitor group as responsible on October 31.

As details emerged, Bitcoin declined about 3% and Ethereum fell more than 3%. An October 30 CoinDesk report put liquidations of leveraged crypto positions at approximately $1.57 billion.

Binance worked with partners to freeze affected assets and said it had identified about $3 billion in assets connected to the breach. It also promised to use its own resources to cover losses and protect customer balances.

A defensive move, not necessarily a lasting retreat

October 30 was the first trading session after the breach. Derivatives exchange Derive attributed part of the ETF outflow to the incident; its founder and CEO, Nick Forster, told CoinDesk that traders had taken steps to protect themselves from further losses.

Laevitas head of markets Rick Maeda offered a more measured assessment. He noted that the roughly $643 million withdrawal represented less than 1% of spot Bitcoin ETF assets, calling it a "de-risking day" rather than evidence of capitulation or lost institutional confidence.

The timing alone does not show that the Binance breach caused all the withdrawals. Bitcoin's price, monetary policy expectations, wider financial-market conditions and investors' existing portfolio positions also influence ETF flows. A single session cannot establish whether investors are making a lasting change in their exposure.

Spot Bitcoin ETFs let investors track Bitcoin through exchange-traded shares without buying the cryptocurrency directly or managing wallets and private keys. That structure does not shield them from Bitcoin's volatility or from disruptions elsewhere in the crypto trading and custody infrastructure.

Binance begins reopening withdrawals

On November 1, Binance began restoring withdrawals, initially reopening 15 networks and assets. During the first 9.5 hours, the exchange processed $4.65 billion in withdrawals and received $1.01 billion in deposits.

The resulting net outflow of about $3.64 billion represented 2.1% of Binance's $171 billion in assets under management.