U.S.-China Relations
NextFin News - Investors pulled $1.04 billion from US-listed spot Bitcoin funds over two trading sessions last week, a two-day drain that wiped out nearly all of the complex's net inflows for 2026 and sent Bitcoin back below $77,000 as voting began in the midterm elections. BlackRock's iShares Bitcoin Trust alone accounted for $405.3 million of Monday's withdrawals — the largest single-day redemption from the fund since June — while the total cryptocurrency market fell 2.54% to $2.57 trillion. The outflows sit at the intersection of two separate shocks: the record $6.3 billion Binance hack, which forced a repricing of exchange-counterparty risk, and the uncertainty premium that builds around US elections. The question is not whether bad news hit crypto — it did, twice. The question is whether the market is pricing a temporary risk-premium spike or the start of a structural withdrawal from the institutional-onramp trade.
The Outflow Math: A Two-Day Drain That Undid a Year of Gains
The numbers are precise, and they are severe. US spot Bitcoin exchange-traded funds posted $1.04 billion in net outflows across Friday and Monday, according to fund-flow data compiled for the sessions. Monday's session alone saw $398.6 million leave the complex, led by $405.3 million from BlackRock's IBIT, with Fidelity's Wise Origin Bitcoin Fund taking in just $6.7 million — a partial offset that underscores how concentrated the selling was. IBIT's outflow was its largest since June 26, when investors pulled $444.5 million in a single day.
The context makes the move sharper. Before the two-day drain, the entire spot Bitcoin ETF universe had recorded only around $38 million in net outflows for all of 2026 — essentially flat, even after October's $515 million in withdrawals. Two sessions erased that. In other words, the institutional-onramp trade that defined Bitcoin's 2024–2025 rally is not in structural retreat; it is in a sudden, concentrated de-risking. That distinction matters because it determines what kind of recovery to expect. A structural exit reverses slowly, if at all. A risk-premium spike reverses as fast as it arrived — provided the trigger does not compound.
The selling was not confined to Bitcoin. US spot Ether ETFs recorded roughly $140 million in net outflows on Monday, extending their losing streak to six trading days after a record $1.61 billion in monthly outflows in October. When both the Bitcoin and Ether complexes bleed at once, the driver is portfolio-level risk reduction, not a security-specific reassessment. Investors are not rotating from IBIT into FBTC; they are leaving the building.
Bitcoin itself briefly fell below $76,400 on Monday, its lowest level since August, before stabilizing near $76,600 — down 3.7% over the prior seven days. By the time voting opened on November 3, the total crypto market capitalization had slipped 2.54% in a single day to $2.57 trillion, a near two-month low, with Bitcoin testing its September lows near $76,500. Market breadth confirmed the pressure: Bitcoin's share of the total crypto market held around 60%, meaning the decline was system-wide rather than a Bitcoin-specific rotation into smaller tokens.
Two Triggers, One Channel: How a Hack and an Election Hit the Same Wire
On the surface, the Binance hack and the midterm elections are unrelated events. One is a security failure at the world's largest crypto exchange; the other is a scheduled political exercise. But they transmit through the same channel: the uncertainty premium that investors demand for holding volatile, infrastructure-dependent assets.
The hack, which drained an estimated $6.3 billion from Binance's hot wallets on October 29, is the largest crypto theft on record. Blockchain investigators at TRM Labs, Chainalysis and Elliptic attribute the theft to TraderTraitor, a North Korea-linked hacking group, though no government had formally confirmed the attribution as of October 30. The mechanics were sobering: an initial investigation pointed to a compromised laptop, with subsequent probes uncovering additional points of breach and malicious software designed to delete evidence. For an asset class that has spent a decade arguing that self-custody solves the trust problem, the incident was a reminder that the onramp itself — the exchange layer where most institutions still enter — remains a single point of failure.
Binance moved quickly to contain the damage. "We've now replenished 90% of the stolen assets, and we're committed to covering the remaining 10%. Our users will not bear the financial impact of this incident," co-CEO Richard Teng said on the company's social channel on October 31. The exchange set aside more than $6.34 billion — drawing on its Secure Asset Fund for Users and its corporate treasury — to restore customer balances, while trading partners froze roughly $3 billion of the stolen assets. On paper, the loss was socialized away from users.
But market prices do not reward balance-sheet repairs; they price trust. The hack hit on the exact days when ETF issuers were already bracing for election-week volatility, and the two flows compounded. Bitcoin has tended to fall ahead of every US midterm election since 2010 — down more than 48% before 2014, 37% before 2018 and 16% before 2022, according to market-cycle analysis — and was already down about 7.3% ahead of the November 3, 2026 vote. Add a record exchange hack to that window, and the uncertainty premium has two independent reasons to widen at once.
The transmission mechanism runs through three gates. First, the exchange gate: even investors holding regulated ETFs must ask whether the infrastructure underneath — custodians, prime brokers, the spot markets that set the price — is sound. Second, the liquidity gate: when redemptions accelerate, authorized participants hedge less aggressively, spreads widen, and an ETF's price can drift from the value of the Bitcoin it holds, which invites more selling. Third, the positioning gate: crypto remains a high-beta risk asset, and in a risk-off window it is sold first and questioned later. The $1.04 billion outflow is the visible symptom; the widening of all three premiums is the disease.
"I wouldn't interpret these outflows as a rejection of digital assets," said Edwin Mata, chief executive of tokenization company Brickken. "Investors reduce exposure when uncertainty rises, particularly after an event that raises questions about the security of market infrastructure."
That framing is consistent with the flow data. A rejection is broad, slow and persistent. What happened over Friday and Monday was narrow, fast and concentrated in the largest, most liquid fund — the signature of a risk manager cutting beta, not a conviction shift.
Cyclical, Not Structural — But the Counter-Thesis Has Teeth
The base call is that this is a cyclical risk-premium spike, not a structural break in the institutional-adoption trend. Three pieces of evidence support it. First, the 2026 flow baseline was roughly flat at around $38 million in net outflows before the two-day drain — there was no pre-existing exit trend for the hack to accelerate. Second, the outflows concentrated in IBIT, the deepest-liquidity fund, which is where institutions go when they want to sell quickly; a structural reallocation would show up as broad-based redemptions across the complex. Third, the price action fits a mean-reverting pattern: Bitcoin's pre-election pullbacks have historically resolved once the political outcome is known and the uncertainty premium collapses.
The second-order implication is the part the market is not pricing. If the outflows are cyclical, the recovery will be fast — but it will not be free. ETF issuers compete on fees, and a period of outflows forces them to choose between defending margins and buying back flows with lower fees. The issuer that cuts its fee first after a risk-off episode often captures the rebound. So the second-order winner of this episode is not necessarily the asset; it is the issuer with the balance sheet to wait. For investors, the asymmetry is that the price of re-entry after a cyclical scare is usually lower than the price of staying in through it — but only if the scare does not turn structural.
Here is the counter-thesis, and it deserves weight. The Binance hack did not happen in a vacuum. It arrived as the crypto industry spent more than $200 million to influence the 2026 midterm elections — the largest cohort of single-issue super PACs in US history, according to the watchdog group Public Citizen — while preparing for a political era beginning in 2029 in which the White House occupant may not be as personally invested in digital assets. The industry backed 33 House candidates through Fairshake and affiliated super PACs, 19 Republicans and 14 Democrats, betting that legislative goodwill would outlast the executive branch. If that bet fails, the regulatory overhang returns, and the "institutional adoption" narrative loses a policy pillar. In that world, today's outflows are not a cyclical dip; they are the first visible withdrawal from a trade that was always more political than fundamental.
There is also a leverage dimension the clean cyclical read underweights. Crypto markets entered this window with leveraged long positioning built up through the year, and forced liquidations amplify a fundamentally sound risk-off move into a technical cascade. When ETFs bleed $1 billion in two days while Bitcoin tests September lows, part of the move is mechanical — stop runs, margin calls, de-risking algorithms — and mechanical moves overshoot in both directions.
The falsifying signal that would prove the cyclical call wrong is specific. If US spot Bitcoin ETFs post net outflows exceeding $2 billion in any single week after election uncertainty clears and Binance confirms full recovery of the stolen assets, the risk-premium explanation fails and the structural thesis takes over. A second signal: if IBIT's outflows persist for more than ten consecutive trading sessions while Bitcoin holds above $75,000, the selling is no longer price-driven — it is conviction-driven, and the recovery will be slower and shallower than the cyclical model predicts.
What Comes Next: Three Horizons, Three Scenarios
The forward look splits cleanly by time horizon, and the horizons point in different directions.
Short term (days to two weeks): sentiment and liquidity dominate. The base case is continued volatility through election week, with Bitcoin range-bound until the uncertainty premium resolves. The upside case: a decisive election outcome plus confirmation from Binance that the remaining stolen assets are recovered pushes a widely followed sentiment gauge — which sat at 34, in "Fear" territory, the longest persistent negative stretch of 2026 — back toward neutral, and ETF flows flip positive within a week. The downside case: a contested election outcome or a new exchange security incident extends the risk-off window, and Bitcoin revisits the mid-to-low $70,000 range that market strategists have flagged as the next support zone.
Medium term (one to three months): fundamentals reassert. What matters here is not the hack but the fee war it may trigger, and whether the post-election Congress delivers the regulatory clarity the industry paid more than $200 million to buy. If fee competition intensifies while regulation stabilizes, the ETF complex can grow the pie even at lower margins. If regulation stalls, issuers fight over a shrinking pool of risk-tolerant capital.
Long term (six months plus): structural or not, the verdict comes from flows, not headlines. The institutional-onramp thesis survives only if 2026 closes with net positive flows and assets under management above pre-hack levels. A year that ends net negative, despite the January 2024 launch wave, would be the first real evidence that the ETF channel has peaked.
Who benefits and who is exposed is asymmetric. The exposed are the leveraged long holders who bought the pre-election rally, and the smaller ETF issuers without the fee cushion to survive a margin war. The beneficiaries are patient allocators with dry powder and the largest issuers — BlackRock first among them — who can absorb a cyclical outflow without changing strategy. The irony is sharp: the same fund that led the inflows into this trade is now leading the outflows, and it will likely lead the recovery too.
The watchlist is concrete. First, weekly ETF flow data: a flip back to positive within two weeks confirms cyclical; persistence confirms structural. Second, Binance's proof-of-reserves follow-through and the disposition of the roughly $3 billion in frozen stolen assets. Third, the election outcome itself — specifically whether the pro-crypto legislative coalition holds, which determines whether the industry's spending bought durability or just a temporary reprieve.
The market is not asking whether Bitcoin can survive a hack or an election. It is asking whether the infrastructure that institutions were promised actually exists. This week's outflows are the bill for that question — and until it is answered with recovered assets and stable flows, the uncertainty premium stays wide.
Explore more exclusive insights at nextfin.ai.
