Key Highlights:
- Binance resumed phased withdrawals after a $6.3 billion cyberattack attributed by the FBI to North Korea’s TraderTraitor, recording $3.64 billion in net outflows while covering 95% of stolen assets.
- Bitcoin traded near $77,900 amid $643 million in U.S. spot ETF outflows on Friday, while crypto derivatives markets saw a 56% volume surge characterized by trading churn rather than fresh directional positioning.
- THORChain (RUNE) fell 6.4% amid U.S. law enforcement pressure on node operators to blacklist addresses tied to the Binance breach, as broader altcoin sentiment dipped to 46/100 on the Altcoin Season Index.
Market Overview: Bitcoin Consolidates Following ETF Outflows and Exchange Turmoil
Digital asset markets faced continued pressure on Monday as Bitcoin hovered around $77,900 after dipping 0.4% since midnight UTC, despite a brief Asian morning advance to $78,700. Ether experienced modest strength, gaining 0.5% to reach $2,289.65, while the CoinDesk Memecoin Index retreated 1.9%. The market’s cautious tone followed significant institutional retrenchment at the end of last week, with U.S. spot Bitcoin exchange-traded funds recording $643 million in net outflows on Friday. According to data from Farside Investors, this marked the products’ largest single-day withdrawal since June, entirely reversing four consecutive days of previous capital inflows.
Macroeconomic factors offered a mixed backdrop for risk assets. Nasdaq-100 futures rebounded 0.8% following a 2% decline the previous week, while Brent crude slumped 4% to approximately $109 per barrel. The decline in energy prices followed remarks from Secretary of State Marco Rubio indicating that President Donald Trump aims to resolve the Iran war peacefully. Global investors remain focused on key economic catalysts scheduled throughout the week, including corporate earnings from Apple after the closing bell, the forthcoming U.S. midterm elections on Tuesday, and Friday’s non-farm payrolls report.
Binance Outflows Hit $3.64 Billion Amid Phased Withdrawal Resumption
Centralized exchange stability remained top of mind after Binance initiated phased withdrawal services on Sunday. Following the reopening, the exchange processed $4.65 billion in total withdrawals alongside $1.01 billion in new deposits, culminating in a net outflow of $3.64 billion. Binance confirmed it has covered approximately 95% of the $6.3 billion stolen during a massive security breach. The Federal Bureau of Investigation (FBI) has formally attributed the attack to TraderTraitor, a state-sponsored hacking collective associated with North Korea.
The fallout from the breach triggered distinct weakness across individual altcoins, particularly THORChain (RUNE), which emerged as the steepest decliner in the CoinDesk 100 with a 6.4% loss on Monday and a cumulative 24-hour decline of roughly 17%. The downturn followed calls from the FBI, Secret Service, and IRS Criminal Investigation requesting THORChain node operators to blacklist addresses linked to the Binance exploit, an enforcement measure that protocol co-founder JP Thor publicly opposed. Meanwhile, on-chain analyst SomaXBT identified that approximately $242 million of the exploited Binance assets had moved through the Tron network; despite this, Tron’s TRX gained 1.0% to trade at $0.3165. Gains were otherwise scarce across the sector, led by privacy tokens Monero (XMR) up 1.7% and Zcash (ZEC) gaining 1.4%.
Derivatives Metrics Reveal Elevated Churn and Defensive Positioning
Activity across crypto derivative platforms reflected significant market turbulence without the accumulation of new directional exposure. Aggregate crypto futures trading volume expanded 56% over the past 24 hours to reach $111.8 billion; however, total open interest remained almost static at $137.1 billion, pointing to active churn rather than sustained trend positioning. Heightened price volatility drove forced liquidations up 77% to $140.2 million, with aggressive market orders maintaining an even split with a minor tilt toward sell-side execution.
Individual contract data highlighted distinct investor behavior across specific ecosystems:
- Binance Coin (BNB): Open interest dropped 5.31% alongside a 1.12% decline in price, signaling long position liquidations and systemic capital outflows as phased withdrawals proceeded. Funding rates remained positive.
- NEAR Protocol: NEAR led major token declines, falling 5.93% (and spot dropping to $4.1355) with open interest declining 4.84%. Liquidations hit $3.23 million, and its cumulative volume delta registered the weakest net market demand among primary digital assets.
- Bitcoin and Ether Contracts: Bitcoin futures volume rose 37% and Ether volume jumped 83%, yet open interest in both assets remained flat, confirming an absence of fresh capital. Both contracts maintained positive funding rates, leaving long positions paying short positions.
In the options arena on Deribit, downside protection took precedence for Bitcoin. The three most active BTC contracts over the past 24 hours were all put options, dominated by the $58,000 put expiring on November 27. The 25-delta put skew, which measures the relative pricing premium of puts over calls, remained elevated despite cooling down from the immediate aftermath of the Binance exploit. Conversely, Ether options revealed a more balanced landscape with three calls and three puts leading volume, headed by the $2,650 call expiring on November 6.
Broader speculative interest continued to deteriorate, with CoinMarketCap’s Altcoin Season Index dropping to 46/100, down sharply from its pre-hack high of 60/100 recorded last week. Artificial intelligence-related tokens fell broadly despite technology equities firming, as Grass (GRASS) shed 4.5% to $0.5770 and Kite (KITE) retreated 3.3% to $0.1182. Political memecoins also saw sell-offs, with the Official Trump (TRUMP) token sliding 4.2% ahead of the U.S. midterm elections, despite an upcoming holder event scheduled for November 22.
Why This Matters
The convergence of North Korea’s state-sponsored exploit of Binance and massive U.S. spot ETF outflows represents a dual test of institutional infrastructure and digital asset market liquidity. With $3.64 billion departing Binance in a single day, the exchange’s ability to cover 95% of stolen assets has prevented systemic insolvencies, yet the pressure on cross-chain bridging protocols like THORChain illustrates increasing regulatory scrutiny on decentralized node operators. Coupled with traders aggressively bidding on deep out-of-the-money puts down to $58,000, market participants are bracing for heightened volatility as macroeconomic risks, political shifts from the U.S. midterm elections, and liquidity churn dominate short-term price discovery.
Frequently Asked Questions
How did Binance manage the $6.3 billion cyberattack?
Following the security breach, which the FBI attributed to North Korea’s TraderTraitor group, Binance reported that it has covered approximately 95% of the $6.3 billion in stolen funds. The platform initiated phased withdrawals on Sunday, processing $4.65 billion in outward transfers against $1.01 billion in deposits, representing a net outflow of $3.64 billion.
What drove the steep drop in THORChain (RUNE)?
THORChain dropped 6.4% on Monday—bringing its 24-hour decline to approximately 17%—after U.S. law enforcement agencies, including the FBI, Secret Service, and IRS Criminal Investigation, urged protocol node operators to freeze addresses connected to the Binance exploit, prompting resistance against asset freezes from co-founder JP Thor.
What does current derivatives activity indicate about investor sentiment?
A 56% surge in futures volume alongside flat open interest indicates high market churn and tactical rebalancing rather than sustained trend positioning. Furthermore, the highest traded Bitcoin options on Deribit were puts—most notably the $58,000 strike expiring on November 27—indicating persistent demand for downside hedging.




