North Korea Sits on $1.4B Binance BTC as ETFs Bleed $643M
Roughly 18,270.2 BTC (about $1.4B) stolen in the Oct. 29 Binance hack sits idle across 19 wallets, 17 of them holding 1,000 BTC each. US spot Bitcoin ETFs shed $643.2M Friday, their biggest outflow of October.
Not one satoshi has moved. The roughly 18,270.2 BTC (about $1.4 billion) taken in the Oct. 29 Binance hack still sits untouched across 19 wallets. Meanwhile, US spot Bitcoin ETFs dumped $643.2 million on Friday, the first full session after the theft.
We already covered the FBI pinning the hack on North Korea's TraderTraitor group, and our earlier coverage tracked the hack's market fallout. The new detail is where the Bitcoin landed and how ETF money responded.
The coins are parked
The funds moved through 11 transfers into 19 wallets. Seventeen hold exactly 1,000 BTC each, and the other two hold 832.5 BTC and 437.7 BTC. All were confirmed at block height 973732.
The source hot wallet (bc1qm34lsc65zpw79lxes69zkqmk6ee3ewf0j77s3h) held about 19,200 BTC when it was hit. Nearly 95% was drained in under 20 minutes. It now holds about 5.495 BTC, roughly $426,000.
Chainalysis, Elliptic and TRM Labs attributed the theft to TraderTraitor, and the FBI identified the North Korean operation as responsible on Oct. 31. Binance's preliminary probe pointed to a compromised software engineer's laptop, but later forensics turned up additional compromised systems.
Unlike the stablecoin side, there is no off switch here. Tether and Circle froze more than $2.3 billion in stolen stablecoins, but Bitcoin has no central issuer able to freeze funds. By one estimate, the haul ostensibly makes North Korea the world's third-largest nation-state BTC holder.
Don't read the stillness as permanent. Arkham-attributed Lazarus wallets hold just 23.38 BTC today, against about 14,000 BTC in March 2025, and Lazarus has previously dispersed thousands of BTC. Dormancy guarantees nothing.
Where the flows went
Attackers began draining roughly $6.4 billion from Binance at 4:05 p.m. ET Thursday, after US markets closed. Friday was the first full session to price it in.
US spot Bitcoin ETFs shed $643.2 million, their biggest outflow of October. That erased a four-day, $441 million inflow run and left the funds down about $202 million for the week and about $516 million for October. Cumulative net inflows slipped to $57.4 billion, with total net assets at $103.2 billion.
The alt funds bled too. Ethereum ETFs lost $155.7 million on Friday, bringing the five-day outflow to about $431 million and October to roughly $1.61 billion. Solana ETFs gave up $10.8 million, about $72 million on the week.
Bitcoin fell about 4% to roughly $76,400 on Friday, with over $1.3 billion in leveraged positions liquidated. It then steadied near $77,520 on Saturday, up 0.5% over 24 hours but down 3.3% on the week. Ethereum trades near $2,251 and Solana near $96.
Reading the tape
Markets took the hack largely in stride. The drop was far smaller than the nearly 11% plunge after a failed attack on Binance in 2018, and some Wall Street firms urged clients to buy crypto-linked stocks on the weakness. Binance has also pledged to cover all losses.
The macro backdrop is heavier. The Fed held rates at 3.75% to 4% on Wednesday, two officials voted for a hike, and traders price over 70% odds of a December increase. That is the setup the hack landed into.
Prediction markets lean bearish on the alts. Myriad traders give Ethereum a 51.3% chance of falling to $1,500 before $3,000, and Solana a 53.7% chance of hitting $40 before $160.
For traders, the 19 wallets are a live overhang. Any movement from them, especially the 1,000 BTC tranches, is the signal to watch. Until then, the stolen coins are headline risk rather than active supply.
