Bitcoin ETFs Snap a Four-Day Inflow Streak With $409M in Post-Hack Outflows

U.S. spot Bitcoin exchange-traded funds snapped a four-session inflow streak with $409.5 million in net outflows on October 30, the first full trading day after the Binance hot-wallet breach, according to Farside Investors data . The pull was not evenly spread: Fidelity’s FBTC shed $201.0 million and Ark’s ARKB shed $129.5 million, while BlackRock’s IBIT, the fund that carried nearly all of the prior four days of buying, had not yet reported a figure for the session. The result is a market that pulled money out of Bitcoin funds after the largest theft in crypto history, but did so in a narrower, less panic-driven way than the headline number suggests.

The four sessions before the breach, October 26 through 29, had drawn $440.8 million into the funds, almost all of it into IBIT. That streak reversed on the first post-hack session. The question the data answers is not whether money left, but which money left and how it compares to the month’s earlier wobble. The $409.5 million outflow is real, but it is smaller than the $635.6 million the same funds lost on October 22, and it came from a different set of products.

Fund by Fund: Where the $409.5 Million Left

The October 30 breakdown from Farside shows the exit concentrated in two issuers rather than across the board:

• FBTC (Fidelity): -$201.0 million
• ARKB (Ark Invest): -$129.5 million
• GBTC (Grayscale): -$53.3 million
• BITB (Bitwise): -$25.7 million
• IBIT (BlackRock): not yet reported

Fidelity and Ark together account for $330.5 million, or roughly 81% of the day’s total outflow. The other funds, from Invesco to Valkyrie to VanEck, reported zero flow. That concentration matters because BlackRock’s IBIT was the engine of the streak: it took in $410.6 million across the four sessions, about 93% of the group’s $440.8 million, and its October 30 line is still blank in the table. Until IBIT reports, the $409.5 million figure is provisional and could move in either direction.

The scale also matters. Since launch, the U.S. spot Bitcoin funds have accumulated a cumulative net total near $57.3 billion, according to Farside’s running table, with IBIT holding the single largest share. A $409.5 million daily outflow works out to roughly 0.7% of that installed base, which is why the flow table can move in sharp single-day increments without threatening the broader position. The daily figure is a margin read, not a re-rating.

The Streak That Broke, and the One That Did Not Panic

Adding the four pre-hack sessions gives the context. The funds took in $110.3 million on October 26, $176.0 million on October 27, $137.3 million on October 28 and $17.2 million on October 29, a total of $440.8 million. The October 29 figure was already cooling, down from $137.3 million the day before, before the breach hit after the U.S. market closed that evening.

The swing from a $440.8 million four-day intake to a $409.5 million single-day exit is about $850 million, which reads as a sharp reversal. But the comparison that matters is the month’s earlier stress. On October 22, the funds lost $635.6 million, and October 23 added another $137.9 million, a two-day exit of $773.5 million. Against that, the post-hack outflow of $409.5 million is only about two-thirds of the single worst day earlier in the month. Put another way, the $440.8 million gathered over the four pre-hack sessions had recovered only about 57% of that $773.5 million two-day exit before the breach cut the recovery short. Institutions did not stampede; they trimmed, and the trimming was led by Fidelity and Ark rather than the fund that had been doing the buying.

Bitcoin’s price tells the same tempered story. Spot BTC traded near $77,382 around 03:25 UTC on October 31, down less than 0.1% over 24 hours and steady just above the six-week low it printed when Binance halted withdrawals on October 29 . A four-day inflow streak ending in a single outflow day has not, so far, translated into another leg down in the underlying asset.

Measured against the breach itself, the fund outflows look even more contained. Tracing firms put the Bitcoin the attacker took at 18,270 BTC, worth about $1.47 billion at the time of the theft, so a $409.5 million daily exit from the ETFs is roughly 28% of that haul. The session’s Ether funds ran in the same direction, extending a run of weekly redemptions that had already made October the heaviest month of Ether ETF outflows in more than a year, which means the post-hack pull was not unique to Bitcoin funds.

What the Outflow Does and Does Not Prove

The data supports a limited reading. It shows that money left spot Bitcoin funds on the first post-hack session, and that Fidelity and Ark holders did most of the selling. It does not show a broad institutional exit from Bitcoin, because the largest fund by assets had not reported, the rest of the issuers showed zero flow, and the total was below the month’s earlier peak outflow. A single day of flows, however concentrated, is not a trend, and it is a poor proxy for sentiment when the day’s largest product is missing from the tally.

There is also a real countercase. IBIT’s absence cuts both ways: if BlackRock posts a large outflow when it reports, the total rises toward or past the October 22 level, and the “modest trim” reading weakens. The $850 million swing from the streak’s peak to the exit is a large move in absolute terms, and it happened against the backdrop of a theft that removed about $6.3 billion from Binance’s hot wallets . If the breach feeds a broader reassessment of exchange custody risk, the flow data over the next few sessions will show it.

The next observable signals are concrete. The first is IBIT’s October 30 figure, which will complete or complicate the $409.5 million total. The second is the October 31 session, which will show whether the selling was a one-day reaction or the start of a run. The third is Bitcoin itself: whether spot holds above the $77,000 area while the fund data settles will say more about the market’s read on the breach than any single flow print. If BlackRock reports an outflow comparable to Fidelity’s, the tempered reading gives way to something closer to a genuine reassessment of custody risk.