Key Takeaways
- • Hackers drained about $6.3 billion from Binance on October 29, and the exchange suspended withdrawals before reopening them; Binance said it had covered 95% of the stolen assets, per the South China Morning Post, while Reuters put net customer withdrawals after reopening at $4.72 billion.
- • Binance Bitcoin open interest fell to $8.7 billion in dollar terms, the lowest level in more than two months, but in BTC terms exposure was roughly unchanged, at about 114,500 BTC or more versus about 113,300 BTC before the hack.
- • CryptoQuant analyst BaykusCharts argued that retail activity moved into spot ETFs rather than leaving crypto, but his retail-activity indicator never flashed a surge around Bitcoin's October 2025 record near $126,000 or its roughly $60,000 lows this year.
- • US spot Bitcoin ETFs posted net outflows of about $399 million on November 2, led by roughly $405 million leaving BlackRock's IBIT, according to Farside Investors data, undercutting the migration explanation for the quiet retail gauge.
- • Flow data and open interest cannot identify who is trading; Q3 13F filings due November 16 will show positions as of September 30, a month before the hack.
Summary
Two CryptoQuant analyses published on November 6, 2026 raised questions about whether Bitcoin is short of retail participation. BaykusCharts reported that Binance's Spot Retail Activity Through Trading Frequency Surge indicator never registered a surge around Bitcoin's October 2025 record near $126,000 or its roughly $60,000 lows this year, and suggested that part of that activity had moved into spot ETFs. Arab Chain separately reported that Binance Bitcoin futures open interest had reached its lowest level in more than two months. The indicator is a relative gauge that compares trading frequency with its one-year moving average. It does not count participants, and trade counts cannot distinguish funds from individuals.
The futures decline followed a major security breach. Hackers drained about $6.3 billion from Binance on October 29, and the exchange suspended withdrawals. Binance said it had covered 95% of the stolen assets when reopening withdrawals, according to the South China Morning Post, and Reuters reported net customer withdrawals of $4.72 billion after the reopening. Traders who lost confidence in the exchange could close positions there and reopen them elsewhere, so a lower open interest figure at Binance does not by itself show reduced Bitcoin exposure.
Measured in coins, Binance futures exposure was broadly stable. Dollar open interest equals BTC-equivalent contract size multiplied by price. Using a pre-hack CryptoQuant reading from late October, when BTC traded at $80,774 and dollar open interest was $9.15 billion (about 113,300 BTC implied), against November 6 open interest of $8.7 billion with BTC below $76,000, implied exposure rises to about 114,500 BTC or more. The comparison relies on rounded figures from two posts and assumes comparable contract types, so it is an approximation rather than a precise measure.
ETF flows moved in the opposite direction to the migration thesis. US spot Bitcoin ETFs recorded net outflows of about $399 million on November 2, led by roughly $405 million leaving BlackRock's IBIT, according to Farside Investors data. Flow data shows share creations and redemptions but not the identity of buyers or sellers, so an adviser rebalancing client accounts cannot be distinguished from a self-directed investor. The SEC's Form 13F threshold of $100 million in reportable securities also limits how far institutional filings reveal retail ownership, and third-quarter filings due November 16 will reflect positions as of September 30.
The current evidence supports a narrower conclusion than either post. Binance derivatives traders maintained roughly the same Bitcoin exposure through the hack, and ETF holders were net sellers in the days before the futures low. Three indicators could resolve the question through November: a falling BTC-denominated open interest count at Binance, the pattern of ETF creations and redemptions across issuers, and any surge flag on CryptoQuant's retail gauge.
The futures decline followed a major security breach. Hackers drained about $6.3 billion from Binance on October 29, and the exchange suspended withdrawals. Binance said it had covered 95% of the stolen assets when reopening withdrawals, according to the South China Morning Post, and Reuters reported net customer withdrawals of $4.72 billion after the reopening. Traders who lost confidence in the exchange could close positions there and reopen them elsewhere, so a lower open interest figure at Binance does not by itself show reduced Bitcoin exposure.
Measured in coins, Binance futures exposure was broadly stable. Dollar open interest equals BTC-equivalent contract size multiplied by price. Using a pre-hack CryptoQuant reading from late October, when BTC traded at $80,774 and dollar open interest was $9.15 billion (about 113,300 BTC implied), against November 6 open interest of $8.7 billion with BTC below $76,000, implied exposure rises to about 114,500 BTC or more. The comparison relies on rounded figures from two posts and assumes comparable contract types, so it is an approximation rather than a precise measure.
ETF flows moved in the opposite direction to the migration thesis. US spot Bitcoin ETFs recorded net outflows of about $399 million on November 2, led by roughly $405 million leaving BlackRock's IBIT, according to Farside Investors data. Flow data shows share creations and redemptions but not the identity of buyers or sellers, so an adviser rebalancing client accounts cannot be distinguished from a self-directed investor. The SEC's Form 13F threshold of $100 million in reportable securities also limits how far institutional filings reveal retail ownership, and third-quarter filings due November 16 will reflect positions as of September 30.
The current evidence supports a narrower conclusion than either post. Binance derivatives traders maintained roughly the same Bitcoin exposure through the hack, and ETF holders were net sellers in the days before the futures low. Three indicators could resolve the question through November: a falling BTC-denominated open interest count at Binance, the pattern of ETF creations and redemptions across issuers, and any surge flag on CryptoQuant's retail gauge.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.