Skip to content
Active Currencies: 22,687
Market Cap: $2.606T
Bitcoin Dominance: 59.28%
24h Market Cap Change: $-2.96

XRP’s ‘Binance Hack 2026’ wallets move 40M tokens as ETF inflows persist

Binance hack-linked transfers raise fresh concerns over XRP’s recovery, while ETF inflows signal continued institutional interest.

XRP whale outflows surge after Binance has ETF demand holds – Is recovery still possible?

XRP’s latest withdrawal surge reflects more than routine whale activity, as Binance’s reported security breach triggered significant movements across exchanges.

At the end of October, there was a sharp increase in big XRP transfers. During that period, roughly 283 million XRP were withdrawn from Binance. Whales’ net outflows reached 226 million.

Investigators concluded that around 233 million XRP were sent to external accounts using compromised Binance accounts. Afterward, Binance suspended withdrawals, resulting in a 94.8% drop in large XRP withdrawals to 14.7 million on the 30th of October.

Withdrawals increased back up to 80 million XRP on the 1st of November after withdrawals started again

Source: CryptoQuant

If these large XRP are moved off of exchanges, they can potentially decrease the amount of XRP being held on exchanges and therefore limit short-term selling pressure. The fact that the hackers used compromised accounts complicates the indication of accumulation.

Thus, XRP may continue to be volatile due to the uncertain nature of the recent hacks.

40M XRP moves to unknown wallet

The movement of hack-linked funds has added another layer of uncertainty to Binance’s recovery efforts.

In one instance, a wallet labeled “Binance Hack 2026” transferred 40 million XRP worth approximately $50.49 million to another anonymous account also labeled “Binance Hack 2026.”

This implies that instead of simply being left inactive in their respective initial wallets, the hackers’ ill-gotten gains are actively being utilized and transferred on chain. However, the transfer does not confirm liquidation or movement into an exchange.

Source: Whale Alert

Instead, it adds more confusion regarding what exactly the hacker will do with the assets next, whether they plan to sell them, consolidate their stash, or set up future transfers.

Therefore, monitoring where the recipient wallet ultimately ends up and follows through on each of its subsequent transactions is crucial.

Ultimately, any movement toward exchange-linked addresses could increase concerns about potential selling pressure and recovery efforts.

XRP ETFs sustain inflows despite falling assets

Despite growing fears that the hack-related movements may result in a decrease in XRP’s exchange liquidity, institutional flows tell a more resilient story. Weekly inflows into XRP spot ETFs totaled $4.32 million by the end of October.

These inflows came after a one-week withdrawal of $1.84 million from those same ETFs occurred on the 16 of October. It appears that investors continued adding capital to these investment products regardless of ongoing market issues and uncertainty surrounding XRP.

Prior to this period of inflow, the funds investing in these ETFs attracted $11.31 million during the week ending on the 9th of October. As such, cumulative net inflows into these investment vehicles reached $1.81 billion.

Source: SoSoValue

However, total net assets declined from $1.66 billion to $1.42 billion throughout October as XRP’s market value weakened. This contrast suggests fresh institutional buying has not fully offset valuation losses, leaving ETF demand supportive but insufficient to reverse broader price pressure.


Final Summary

  • Ripple saw hack-linked Binance outflows surge, raising concerns over stolen funds and potential selling pressure.

  • XRP ETFs sustained inflows, but falling net assets highlight weak price performance.

Disclaimer: AMBCrypto's content is meant to be informational in nature and should not be interpreted as investment advice. Trading, buying or selling cryptocurrencies should be considered a high-risk investment and every reader is advised to do their own research before making any decisions.

Muriuki Lazaro

Journalist

Muriuki Lazaro is a on-chain data analyst with a B.Sc. in Data Science. Muriuki specializes in dissecting complex on-chain data into clear and accurate insights for readers in the crypto ecosystem, with a particular focus on Bitcoin.

AMBCrypto was founded in 2018 with a mission to simplify and bring the latest blockchain and cryptocurrency news to our readers. We have quickly grown into the digital news source for an emerging generation of cryptocurrency enthusiasts, reaching more than a million readers on a monthly basis, across the globe.