Binance processed $4.6 billion in withdrawals against $1 billion in deposits on Sunday after reopening phased withdrawals following a $6.3 billion hack attributed to North Korea, driving a net $3.6 billion outflow. The breach triggered $643 million in net outflows across US spot Bitcoin ETFs on Friday and shifted options markets aggressively toward downside protection, cutting the odds of Bitcoin hitting $100,000 by year-end to 3.5%.
Key Takeaways
- Binance net outflows hit $3.6bn (2.1% of $171bn AUM) Sunday after phased withdrawal reopening post-$6.3bn hack.
- US Spot Bitcoin ETFs saw $643m net outflows Friday — first session post-hack — with all 5 major funds recording redemptions.
- Options markets flipped aggressively bearish: put share jumped to 68% from 43%; BTC >$100K year-end odds cut to 3.5% from 6%.
- Bitcoin settled at $77,786 Friday, below the $80K strike that held 75% probability pre-hack.
- Full Binance proof-of-reserves report due Monday; regulatory scrutiny of exchange security likely to intensify.
Executive Intelligence Brief
Hack Mechanics and Withdrawal Reopening
The platform suffered the largest crypto theft in history on Thursday, with experts identifying North Korea as the probable culprit. Binance initially froze withdrawals to investigate but announced a phased reopening on Sunday. By afternoon, the exchange had processed $4.6 billion in withdrawals and $1 billion in deposits, a net outflow of $3.6 billion representing 2.1% of its $171 billion in total assets under management, according to a proof-of-reserves snapshot confirmed by the company. A full reserves report is expected Monday.
Founder Changpeng Zhao warned on X that 'scammers are on over drive now' targeting users attempting to move funds, urging caution against fake screenshots and phishing attempts circulating on social media.
Contagion Transmission to US Spot Bitcoin ETFs
The hack's impact extended immediately to regulated US products. Nick Forster, chief executive of Derive.xyz, reported that US spot Bitcoin ETFs recorded $643 million in net outflows on Friday, their first trading session after the breach. Every fund posted redemptions: BlackRock's IBIT led with $233.7 million outflows, followed by Fidelity's FBTC at $201 million, ARKB at $129.5 million, Grayscale's GBTC at $53.3 million, and BITB at $25.7 million. No fund recorded net inflows.
This marks a sharp reversal from prior weeks of consistent inflows and signals institutional risk-off behavior directly linked to custody and counterparty fears emanating from the Binance breach.
Options Market Structure Shift and Price Probability Collapse
Derivatives markets priced in heightened downside risk. In the first 12 hours post-hack, put options accounted for 68% of Bitcoin options premiums traded on Derive.xyz, up from 43% in the preceding five days. Daily Bitcoin options volume rose to approximately $55 million from $34 million pre-hack, indicating active hedging.
The probability of Bitcoin exceeding $100,000 by year-end, priced at 6% on Wednesday via Derive options, collapsed to 3.5% (roughly one-in-30) by Friday. Pre-hack, the market assigned a 75% probability to Bitcoin finishing above $80,000 at Friday's expiry; instead, Bitcoin settled at $77,786, confirming the bearish shift.
Forward Outlook: Reserves Verification and Regulatory Watch
Markets now await Binance's full proof-of-reserves report due Monday for granular asset-liability verification. Continued ETF flow data will signal whether Friday's outflows represent a single-session shock or sustained institutional reallocation. Options skew and volume at the $80,000 and $100,000 strikes will reflect evolving tail-risk pricing. Regulators globally may accelerate scrutiny of exchange security standards and cold-wallet governance following the largest hack to date.
