- VanEck’s BNB ETF (VBNB) led October inflows among US-listed spot crypto ETFs tracked by SoSoValue, with about $99 million.
- Most of that inflow arrived on October 2, 2026, before Binance disclosed a $6.3 billion hot wallet theft on October 29, 2026.
- Broader crypto ETF flows were negative in October, led by $1.61 billion in outflows from Ethereum funds and $515 million from Bitcoin products.
BNB exchange-traded funds attracted the most money of any US-listed spot crypto ETF category in October 2026, according to SoSoValue data. The inflows came mostly in early October, weeks before Binance reported one of the largest crypto thefts on record. Meanwhile, investors withdrew capital from Bitcoin, Ethereum and Solana products over the same month.
What Happened
The US-listed VanEck BNB ETF, which trades under the ticker VBNB, recorded $99 million in net inflows during October 2026. That placed it ahead of NEAR-linked funds at $35 million and XRP products at $19 million. SoSoValue’s daily flow table shows that roughly $97 million entered on October 2, 2026, accounting for about 98.8% of the monthly net total. Fund assets rose from about $3 million on October 1 to roughly $100 million on October 2 and $103 million on October 5. Later movements were small, with about $1 million coming in on October 9 and $285,000 leaving on October 15.
On October 29, 2026, Binance said attackers had compromised its hot wallets at around 20:05 UTC and stole an estimated $6.3 billion in tokens. The exchange said it would cover the loss using corporate funds and its Secure Asset Fund for Users, while working with token issuers and investigators to freeze the stolen assets. Binance later said approximately $3 billion had been frozen on-chain.
VBNB’s assets fell from $98 million on October 29, 2026, to $92 million on October 30, 2026. Those figures also reflect movements in BNB’s market price, so the decline cannot be attributed solely to redemptions.
Why It Matters
The timing of the BNB inflows is central to how the data should be read. Because the bulk of the allocation predates the breach, the October ranking does not show investor reaction to the hack. It instead reflects demand that was already in place before the incident. Investors in VBNB hold exposure to the BNB token through custody arrangements separate from Binance, with qualified custodians including Anchorage Digital and BitGo. Its shares represent exposure to BNB rather than ownership of the exchange, a distinction that became more relevant once the theft was disclosed.
For the broader market, the Bitcoin figures point to fragile demand. US spot Bitcoin ETFs lost roughly $643 million on October 30, 2026, reversing a positive month-to-date balance and leaving October with $515 million in net withdrawals. The funds had been on course for a third consecutive month of inflows, and the reversal came after four consecutive sessions of buying. Bitcoin fell below $80,000 after the Binance breach, though the selloff also followed weak ETF demand that predated the incident, so it is difficult to assign the full decline to the hack.
Bitcoin-focused research firm Ecoinometrics had earlier warned that the recent inflows were too small to establish lasting demand. After the October 30 outflows, the firm said: “ETF investors aren’t buying the dip. They’re selling it.”
Market Context
October’s flows were uneven across assets. Ethereum funds experienced the steepest retreat, with $1.61 billion in monthly withdrawals. That was the largest monthly outflow since US spot Ether funds began trading in July 2024. Solana ETFs lost $144 million over the same period. The contrast with BNB’s inflows shows that investor interest in individual products varied considerably, even within a month of broad withdrawals.
Binance’s response to the theft has also drawn attention. By November 1, 2026, the exchange reported it had replenished about 95% of the affected assets, with purchases of harder-to-source tokens still underway. It began reopening withdrawals in phases on the same day and said the initial surge in withdrawal requests had since eased. In a November 2, 2026 update, Binance said it had completed the full zero-knowledge proof for its October 31, 2026 reserve snapshot covering ten tokens. It also said acquisitions of the remaining assets were continuing.
What to Watch Next
The first full trading week of November 2026 will be an important test of demand for BNB products following the breach. Readers should monitor whether VBNB sees net inflows or outflows as the market absorbs the news and as Binance’s recovery progresses. Binance has said it plans a broader reserve snapshot on November 4, 2026, followed by a proof that it estimates will take 40 to 50 hours to generate. Updates on how much of the stolen amount is recovered or frozen, and on the status of phased withdrawal reopening, will also help clarify the situation.
For Bitcoin and Ethereum products, the key question is whether the late-October outflows mark a short pause or the start of a longer trend. Daily ETF flow data from SoSoValue will be the most direct indicator. Readers should note that flow figures do not separate redemptions from price effects and should be interpreted with that limitation in mind.
Source: original report

