{"id":246534,"date":"2026-11-02T09:24:25","date_gmt":"2026-11-02T09:24:25","guid":{"rendered":"https:\/\/mycryptomania.com\/?p=246534"},"modified":"2026-11-02T09:24:25","modified_gmt":"2026-11-02T09:24:25","slug":"btc-usd-holds-78000-as-onekeys-founder-warns-north-korean-hackers-may-already-have-blackrocks-ibit-on-their-list","status":"publish","type":"post","link":"https:\/\/mycryptomania.com\/?p=246534","title":{"rendered":"BTC USD Holds $78,000 As OneKey\u2019s Founder Warns North Korean Hackers May Already Have BlackRock\u2019s IBIT on Their List"},"content":{"rendered":"<p>Bitcoin (BTC USD) traded at $78,210 on Monday, November 2, after US spot Bitcoin ETFs shed $643.3 million on Friday, their biggest one-day outflow since June 25, as investors pulled back from the Binance hack and a wallet maker warned the funds themselves could be next.<\/p>\n<p>The funds blinked. The price didn\u2019t.<\/p>\n<p>Friday\u2019s redemptions wiped out the $440.7 million that had come in over the previous four sessions and left October $515.9 million in the red. BlackRock\u2019s IBIT lost $233.7 million and Fidelity\u2019s FBTC $201 million. Yet Bitcoin has climbed back from $76,326 and printed three higher lows since.<\/p>\n<p>The louder story is the warning. OneKey founder Yishi Wang wrote that IBIT, with about 815,000 BTC at one custodian, is the kind of target the hackers behind Binance would want.<\/p>\n<p>So is the ETF Bitcoin safe, and can BTC USD keep climbing?<\/p>\n<div class=\"chart crypto-chart-instance\">\n<div class=\"chart__header\">\n<div class=\"chart__info\">\n<div class=\"chart__info-icon\">\n<div class=\"chart__info-name\"><\/div>\n<div class=\"chart__info-symbol\"><\/div>\n<\/div>\n<div class=\"chart__info-current\">\n<div class=\"chart__info-price\"><\/div>\n<div class=\"chart__info-change\"><\/div>\n<\/div>\n<div class=\"chart__info-extra\">\n<div class=\"chart__info-label\">Market Cap<\/div>\n<div class=\"chart__info-marketcap\"><\/div>\n<\/div>\n<\/div>\n<div class=\"chart__controls\">\n<div class=\"chart__controls-group\">\n\t\t\t\t<button class=\"chart__button chart__button--24h\">24h<\/button><br \/>\n\t\t\t\t<button class=\"chart__button chart__button--7d\">7d<\/button><br \/>\n\t\t\t\t<button class=\"chart__button chart__button--30d\">30d<\/button><br \/>\n\t\t\t\t<button class=\"chart__button chart__button--1y\">1y<\/button><br \/>\n\t\t\t\t<button class=\"chart__button chart__button--all-time\">All Time<\/button>\n\t\t\t<\/div>\n<\/div>\n<\/div>\n<div class=\"chart__container\"><\/div>\n<\/div>\n<h2>How Bad Were Friday\u2019s Bitcoin ETF Outflows?<\/h2>\n<p>Bad for one day, small for the funds. Five ETFs sold and the rest sat flat, by <a href=\"https:\/\/sosovalue.com\/assets\/etf\/us-btc-spot\" target=\"_blank\" rel=\"noopener\">SoSoValue\u2019s count<\/a>:<\/p>\n<p><strong>IBIT (BlackRock):<\/strong> -$233.7 million<br \/>\n<strong>FBTC (Fidelity):<\/strong> -$201.0 million<br \/>\n<strong>ARKB (ARK 21Shares):<\/strong> -$129.6 million<br \/>\n<strong>GBTC (Grayscale):<\/strong> -$53.3 million<br \/>\n<strong>BITB (Bitwise):<\/strong> -$25.7 million<\/p>\n<p>That still left the funds holding $98.14 billion. Laevitas analyst Rick Maeda said\u00a0the outflow was under 1% of assets and called it \u201csimply a de-risking day, and not capitulation.\u201d<\/p>\n<p>October has seen this twice already. Heavy two-day outflows on October 7 and 8, then October 22 and 23, were followed by inflows within a session or two.<\/p>\n\n<p>The week ended $202.6 million down. October ended $515.9 million down, and those two numbers are now the bar for a November turn.<\/p>\n<h2>Could Hackers Really Target a Bitcoin ETF?<\/h2>\n<p>No one has attacked one, but the warning rests on how Binance and Bybit were robbed. \u201cI suspect IBIT is already on North Korea\u2019s shortlist,\u201d OneKey founder Yishi Wang wrote on Friday, in a post seen 192,000 times.<\/p>\n<p>I suspect IBIT is already on North Korea\u2019s shortlist.<\/p>\n<p>In February 2025, the attackers behind the Bybit hack compromised a Safe{Wallet} developer\u2019s Mac through a malicious project disguised as legitimate Docker-related tooling. They had access for 17 days before the theft, giving\u2026<\/p>\n<p>\u2014 Yishi (@ohyishi) <a href=\"https:\/\/x.com\/ohyishi\/status\/2116043031896072472?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">October 30, 2026<\/a><\/p>\n\n<p>His case runs in three steps:<\/p>\n<p><strong>The method.<\/strong> The group behind Bybit sat inside a Safe{Wallet} developer\u2019s Mac for 17 days in 2025, then tricked signers into approving a $1.5 billion theft from cold storage. TRM Labs ties the Binance hack to the same North Korean group, TraderTraitor, and Binance has pointed to a compromised DevOps engineer\u2019s laptop. The keys never have to leave cold storage if the approval screen lies.<br \/>\n<strong>The concentration.<\/strong> IBIT holds roughly 815,000 BTC, about $63.7 billion at today\u2019s price, and Coinbase is its active custodian. Anchorage Digital is a backup, but Wang says the fund\u2019s filing shows no plan to move coins there.<br \/>\n<strong>The cushion.<\/strong> A Binance-sized $6 billion theft would be about 9.5% of IBIT, or around $4 a share. Wang notes BlackRock doesn\u2019t insure the coins separately, and Coinbase\u2019s $320 million crime policy is shared across all its customers.<\/p>\n<p>Coinbase pushed back before the warning landed. Its security chief <a href=\"https:\/\/x.com\/JLunglhofer\/status\/2115928711392378954\" target=\"_blank\" rel=\"noopener\">Jeff Lunglhofer posted<\/a> on Thursday that \u201cCoinbase is safe,\u201d adding that it was blocking sends to the hacked Binance wallets and had made \u201cadjustments to our cold storage systems solely out of an abundance of caution.\u201d<\/p>\n<p>No authority has named IBIT as a target, and Wang sells hardware wallets, so self-custody is his business. Still, the numbers in his post are the fund\u2019s own.<\/p>\n<p><strong>DISCOVER:<\/strong> <strong><a class=\"general-link\" href=\"https:\/\/99bitcoins.com\/news\/altcoins\/binance-hack-tether-circle-freeze\/\" target=\"_blank\" rel=\"noopener\">Binance Loses $6.3Bn in Largest Crypto Theft Ever as Tether and Circle Freeze $2.6Bn: What We Know About Binance Hack<\/a><\/strong><\/p>\n<h2>BTC USD Price Analysis: Can Bitcoin Clear $79,158?<\/h2>\n<p>Not yet, but it is getting closer. On the 4-hour chart, BTC USD has made higher lows at $77,114 on Saturday, $77,517 on Sunday, and $77,927 on Monday since the $76,326 bottom on October 30.<\/p>\n<p>The ceiling is close. Monday\u2019s push stalled at $78,878, just under the 4-hour 50 EMA (exponential moving average) at $79,158. The 200 EMA sits higher at $80,875, and both are still sloping down from the high.<\/p>\n<p>Key levels:<\/p>\n<p><strong>Resistance:<\/strong> $78,878, Monday\u2019s high, then $79,158 (4H 50 EMA) and $80,875 (4H 200 EMA)<br \/>\n<strong>Support:<\/strong> $77,114, Saturday\u2019s low, then $76,326, the post-hack bottom<\/p>\n<p>October 13 to November 2, 2026: BTCUSDT 4H chart. Source: <a class=\"general-link\" href=\"https:\/\/www.tradingview.com\/x\/uWeWtUj1\" target=\"_blank\" rel=\"noopener\">TradingView<\/a><\/p>\n<div class=\"nnbtc-table-wrapper\">\n<p>Path<br \/>\nWhat has to happen<br \/>\nNext stop<\/p>\n<p><strong>Push higher<\/strong><br \/>\nA 4-hour close above $79,158<br \/>\n$80,875, the 4H 200 EMA<\/p>\n<p><strong>Stall<\/strong><br \/>\nHolding between $77,114 and $78,878<br \/>\nMore higher lows under the 50 EMA<\/p>\n<p><strong>Slip<\/strong><br \/>\nA 4-hour close below $77,114<br \/>\n$76,326, the October 30 low<\/p>\n<\/div>\n<p>The ETF tape decides which. Another day of nine-figure outflows would make $76,326 the level that matters again.<\/p>\n<p><strong>DISCOVER: <\/strong><a class=\"general-link\" href=\"https:\/\/99bitcoins.com\/cryptocurrency\/next-100x-crypto\/\" target=\"_blank\" rel=\"noopener\"><strong>10+ Next Crypto to 100X In 2026<\/strong><\/a><\/p>\n<p>Follow 99Bitcoins on<a href=\"https:\/\/x.com\/99BitcoinsHQ\" target=\"_blank\" rel=\"noopener\"> X<\/a> For the Latest Market Updates, and Subscribe on<a href=\"https:\/\/www.youtube.com\/@99bitcoins\" target=\"_blank\" rel=\"noopener\"> YouTube<\/a> For Daily Expert Market Analysis.<\/p>\n<p>The post <a href=\"https:\/\/99bitcoins.com\/news\/bitcoin-btc\/btc-usd-etf-outflows-ibit-hack-warning\/\">BTC USD Holds $78,000 As OneKey\u2019s Founder Warns North Korean Hackers May Already Have BlackRock\u2019s IBIT on Their List<\/a> appeared first on <a href=\"https:\/\/99bitcoins.com\/\">99Bitcoins<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"<p>Bitcoin (BTC USD) traded at $78,210 on Monday, November 2, after US spot Bitcoin ETFs shed $643.3 million on Friday, their biggest one-day outflow since June 25, as investors pulled back from the Binance hack and a wallet maker warned the funds themselves could be next. The funds blinked. The price didn\u2019t. Friday\u2019s redemptions wiped [&hellip;]<\/p>\n","protected":false},"author":0,"featured_media":246535,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-246534","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-discovery"],"_links":{"self":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/246534"}],"collection":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=246534"}],"version-history":[{"count":0,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/246534\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/media\/246535"}],"wp:attachment":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=246534"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=246534"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=246534"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}