Hacks & Security · Explained
Bitcoin reclaims $80,000 after Binance hack as short sellers unwind
The largest cryptocurrency rose more than 5% from its election-night low, while Binance widened withdrawals after replacing about 95% of stolen assets.
Key takeaways
- Market recovery. Bitcoin rose more than 5% from its election-night low and traded back above $80,000, a level it had not seen since the Binance breach.
- Exchange recovery. Binance said it replaced about 95% of assets lost in the October 29 hack and reopened withdrawal routes in phases while deposits stayed open.
- Demand gap. CryptoQuant's Darkfost said selling pressure has eased but buyers have yet to show up in force, with spot Bitcoin ETFs seeing consecutive outflow sessions.
What happened
Bitcoin pushed back above $80,000 on Wednesday, the first time it has traded at that level since Binance disclosed a $6.3 billion hot-wallet theft, according to CryptoSlate. The largest cryptocurrency rose more than 5% from its election-night low and extended a rebound that began near $75,600.
The rally coincided with Democrats winning control of Congress, a result that had been expected to weigh on the digital-asset sector. CoinGlass data cited by CryptoSlate showed $453.32 million in liquidations within a single hour, most of them short positions, and $913.34 million over 24 hours. Bitcoin liquidations were 96.3% short and Ether liquidations 57.6% short.
On the exchange side, Binance said on November 3 that it had begun widening withdrawal access after replacing roughly 95% of the assets affected by the October 29 breach, crypto.news reported. A further withdrawal phase was scheduled from 04:00 UTC, with individual tokens reopening after security and readiness checks. Deposits remained open, and the company repeated that it would absorb the loss itself. Binance ran a reserve verification on November 2 covering 10 cryptocurrencies using an October 31 snapshot, with a broader snapshot due November 4.
Binance said about $3 billion of the stolen funds had been frozen by October 30 through work with law enforcement, issuers and other partners. TRM Labs traced transfers across 10 blockchains and valued the assets taken at roughly $6.36 billion, assessing that the cross-chain pattern pointed to a compromise of the exchange's hot-wallet signing infrastructure rather than a simple leak of private keys.
First $85.8KLatest $80.1K-6.6% over the period
Points are daily observations, not closing prices.
Why it matters
The two developments are connected but distinct. Binance's recovery is an operational and balance-sheet exercise, sourcing replacement coins, freezing what can be frozen and demonstrating that withdrawal systems work, while Bitcoin's move is a market repricing driven by politics, volatility and positioning. Customers effectively faced two separate processes: Binance replacing balances, and investigators trying to claw back the stolen assets, with restoring withdrawals as a third task.
James Butterfill, head of research at CoinShares, told CryptoSlate that the Democratic sweep had largely been priced in before the vote, leaving room for a relief rally once the political uncertainty cleared. He argued that exchanges, token issuers and other companies needing new regulatory permissions would be more exposed to divided government than Bitcoin, whose direction he tied more closely to real yields, dollar liquidity and exchange-traded product flows. He also expected Democratic control to complicate efforts to advance the CLARITY Act.
What the data shows
The rebound arrived as volatility fell. Talos data cited by CryptoSlate showed Bitcoin's DVOL gauge down 6% and Wall Street's VIX down 10%, alongside a softer dollar and lower Treasury yields. CryptoQuant's seller exhaustion model, which compares the share of supply held in profit with average monthly volatility, has dropped to levels previously associated with bear-market lows, analyst Darkfost said, after a correction of more than 10% from Bitcoin's prior high. Darkfost cautioned that demand has not caught up, saying that even if sellers have calmed down, demand is still needed and Bitcoin is still short of it. US spot Bitcoin ETFs had logged three consecutive sessions of outflows.
History offers a mixed signal. CryptoQuant data shows Bitcoin gained over the following 12 months after all four midterm elections since 2010, with a median return of 63%, including 45.8% after 2018, 36.8% after 2014 and 80.8% after 2022. Those annual figures mask steep interim losses, however: Bitcoin fell 49.7% within about six weeks of the 2018 vote before recovering. Bitcoin entered this week's election with a 20.4% gain over the preceding three months, compared with losses of 44% in 2014, 8.3% in 2018 and 16.5% in 2022, and it lost 7.4% in October.
Background
Binance placed the hot-wallet compromise at about 20:05 UTC on October 29. It initially suggested a compromised engineer's laptop might have been the entry point, then said in its October 30 update that investigators had found additional breach points and that there was no evidence at that stage that wallet private keys had leaked. Replacement funding came from SAFU, part of its futures insurance fund and its corporate treasury; the company said resources exceeding $6.34 billion were reserved, with about $5 billion already held in matching cryptocurrencies by October 30. By November 1 it reported 95% replacement and reopened Bitcoin withdrawals, roughly 57 hours and 55 minutes after the incident began. TRM's researchers noted that Ethereum activity involved 50 advance authorisations and a contract able to sweep assets from a Binance wallet, while other chains showed ordinary signed transfers.
What is still unclear
Whether Bitcoin holds above $80,000 depends on whether new buyers appear to absorb renewed profit-taking, something Darkfost said has not yet happened. The historical midterm pattern is also a weaker guide than it appears: CryptoQuant found each election fell about 17 to 25 months before the next halving, and the last three votes followed deep bear markets, a different setup from this cycle. Bitcoin also ended October lower, and November has declined in three of the five previous years when October closed in the red, including 2018 and 2025. Binance has yet to publish a full technical account of how its signing process was used.
What to watch
Investors will be watching ETF flows for signs of returning institutional demand, Binance's November 4 reserve snapshot for a broader picture of its backing, and the exchange's promised technical report for detail on the controls around transaction signing. The 2018 precedent, a steep drop within weeks of the vote followed by a strong annual gain, is also likely to be cited by both bulls and bears.
Questions readers ask
Did the Binance hack cause the Bitcoin selloff?
The breach added to an already difficult period for Bitcoin holders, according to CryptoSlate, but the reports also point to political uncertainty and weak demand as factors in the decline.
How much did Binance say it had replaced?
Binance reported roughly 95% asset replacement before expanding withdrawals on November 3, drawing on SAFU, part of its futures insurance fund and its corporate treasury.
What does the seller exhaustion model show?
CryptoQuant's indicator has fallen to levels historically seen at bear-market lows, though the firm's Darkfost said demand is still missing and the gauge offers no assurance of an immediate recovery.