Bitcoin spot ETFs saw $203 million in net outflows on the day, and Ethereum ETFs lost $432 million, according to Cryptobriefing's reporting on October ETF flows. That is a sharp reversal for both products.
Investors pulled more money out of Ether funds than out of Bitcoin funds, even though Bitcoin still carries the larger asset base. The outflows land on top of a wider market slide. Total crypto market capitalization fell to $2.7 trillion, per Bitcoin.com's weekly market wrap.
A single hack deepened the rout and pushed traders to the sidelines.
The Binance hack set off the selling
Binance paused withdrawals after a security breach. The exchange later said it would resume withdrawals for XRP, Bitcoin, Ethereum, and other assets, per U.Today. A first phase of resumed withdrawals covers Bitcoin, Ethereum, and Solana, according to Coinpedia.
Users had been locked out of moving funds for days, and the backlog created its own pressure on prices. The hack itself is not fully resolved. Stolen funds moved through cross-chain bridges.
THORChain, a protocol that swaps assets between blockchains, halted swaps after a block reorg bug, according to CoinTelegraph. That halt slowed the hackers who were routing stolen Binance funds through THORChain. A block reorg bug means the chain briefly accepted a different version of its history, and the protocol froze to avoid processing bad transfers.
The FBI steps in
The FBI urged THORChain operators to block transfers tied to the Binance hack, per TokenPost. The agency wants node operators to refuse to process tainted flows. This is unusual.
Law enforcement rarely names a specific protocol and asks its operators to act in real time. It also shows how much of the stolen money moved through decentralized rails rather than through a single exchange. For THORChain operators, the request creates a dilemma.
Blocking transfers helps victims and investigators. But it also tests the idea that a decentralized protocol can be neutral. Operators who comply may face pressure from users who want swaps to stay open.
Those who refuse may draw legal attention.
What the outflows actually mean
An ETF outflow is simple in mechanics. Investors redeem shares, and the fund sells the underlying asset to pay them. So a $203 million net outflow in Bitcoin spot ETFs means funds had to sell roughly that much Bitcoin into the market.
That selling adds supply on a day when buyers were already scarce. Ethereum's $432 million outflow is larger in dollar terms and larger relative to its market size, which is why Ether led the decline. Outflows are not a verdict on the asset.
They reflect who holds the fund shares and how they react to bad news. Some holders are fast money that leaves at the first sign of trouble. Others stay.
The split between those groups is what determines whether an outflow day becomes a trend or a blip.
Withdrawals resume, but questions remain
Binance's phased restart brings Bitcoin, Ethereum, and Solana back online first. That ordering matters. Bitcoin and Ethereum are the deepest markets, so clearing their backlog first reduces systemic risk.
Solana's inclusion in the first phase suggests its withdrawal queue was also large. Later phases will cover more assets. The THORChain halt is temporary.
Swaps will resume once the bug is fixed and operators agree on how to handle tainted flows. The FBI's request sits on top of that technical fix. Until both are resolved, stolen funds are harder to move, but they are not recovered.
The next number to watch is the next ETF flow report. If outflows shrink while withdrawals resume, the market is absorbing the hack. If they grow, the rout has further to run.