Connect with us
DAPA Banner

Crypto World

Ark Invest’s Bitcoin ETF hit by $30m outflow as spot funds see $171m drain

Published

on

Ark Invest’s Bitcoin ETF hit by $30m outflow as spot funds see $171m drain

Ark Invest’s Bitcoin ETF saw one of the sharpest single‑day outflows of the month this week, as investors yanked tens of millions of dollars from spot products just as Bitcoin slid back toward the mid‑$60,000s.

Summary

  • U.S. spot Bitcoin ETFs recorded about $171 million in net outflows on March 27, with Ark Invest’s ARK 21Shares fund among the hardest hit.
  • Ark’s CEO Cathie Wood, long one of Bitcoin’s loudest institutional bulls, now faces a tape where her flagship crypto vehicle is bleeding capital even as she reiterates long‑term upside.
  • The reversal in flows undercuts part of the “institutional floor” narrative that has supported Bitcoin since U.S. spot ETFs launched in early 2024.

The latest data show U.S. spot Bitcoin (BTC) ETFs posted a combined $171.12 million in net outflows on March 27, the largest one‑day withdrawal in more than three weeks and a stark contrast to the steady inflows seen earlier this month. According to ETF flow trackers, BlackRock’s IBIT led redemptions with roughly $41.9 million out, followed by Fidelity’s FBTC at about $32 million, while Ark Invest’s ARK 21Shares ETF saw approximately $30.5 million leave in a single session. Those exits hit as Bitcoin slipped back toward $70,000, with selling pressure from ETF desks reinforcing a broader risk‑off move across digital assets.

For Cathie Wood, the numbers add short‑term pain to a long‑running conviction trade. The Ark founder has for years argued that Bitcoin could eventually reach $500,000 if corporate treasuries and institutional allocators push even 5% of portfolios into the asset, telling CNBC at the SALT Conference that “the price will be ten‑fold what it is today” if that thesis plays out. Ark has backed that view with positioning, building exposure across vehicles such as its Next Generation Internet ETF and, more recently, via its ARK 21Shares spot product, which quickly became one of the most closely watched newcomers in the U.S. ETF lineup.

Advertisement

Yet the latest redemption wave shows how tactical those same institutions can be when macro conditions sour. Market data providers say investors are rotating out of risk assets on the back of sticky inflation, uncertainty over the Federal Reserve’s rate‑cut path, and escalating geopolitical tension around Iran, all of which have pushed volatility higher and forced some fast‑money players to de‑risk. “This pattern of inflows and outflows is becoming a key indicator of institutional positioning,” one ETF flow note observed, pointing out that even newer funds and smaller trusts such as VanEck’s HODL and Grayscale’s mini‑BTC product joined Ark’s ARKB in posting redemptions.

The move matters because Ark has been central to the story that spot ETFs would anchor Bitcoin with a deeper, more stable institutional base. Earlier in March, U.S. spot funds briefly flipped back to net inflows, including a day when the complex added about $167 million in fresh cash, suggesting some large accounts were willing to buy dips. That pattern appears to have reversed, at least temporarily, with several consecutive outflow days culminating in Thursday’s $171 million drawdown, undercutting the idea that ETF demand alone can offset macro shocks or positioning washes in derivatives.

Still, most analysts tracking Ark and its peers see the current outflows as tactical rather than a structural rejection of Bitcoin. Flows tend to whipsaw around options expiries, CPI releases, and geopolitical headlines, and Ark’s own research — including its latest Big Ideas 2026 report — continues to frame Bitcoin as a multi‑cycle, high‑conviction allocation rather than a quarter‑to‑quarter trade. For investors watching Wood’s ETF specifically, the question now is whether renewed inflows reappear on the next bout of weakness, or whether this week’s $30‑plus million exit marks the start of a longer period in which Ark’s name recognition is not enough to keep nervous capital from heading to the sidelines.

Advertisement

Source link

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Friday’s eth.limo Hijack Caused by Social Engineering on EasyDNS

Published

on

Friday’s eth.limo Hijack Caused by Social Engineering on EasyDNS

Ethereum Name Service gateway eth.limo has revealed that the domain hijacking on Friday was caused by a social engineering attack directed against EasyDNS, its domain name service provider. 

According to a postmortem published by eth.limo on Saturday, an attacker impersonated one of its team members to initiate an account recovery process with easyDNS, granting access to the eth.limo account and allowing them to alter domain settings.

“The NS records were changed and directed to Cloudflare… Once we understood that a DNS hijack had taken place, we immediately notified the community as well as Vitalik Buterin and others. We then began contacting EasyDNS in an attempt to respond to the incident,” the company said.

Eth.limo serves as a Web2 bridge, providing access to around 2 million decentralized websites using the .eth domain name. Hijacking the service could allow an attacker to redirect users to malicious websites. Ethereum co-founder Vitalik Buterin warned users Friday to avoid his blog until the incident was resolved.

Advertisement

Mark Jeftovic, CEO of easyDNS, has publicly accepted responsibility for the incident in its own postmortem report. 

“We screwed up and we own it,” said Jeftovic on Saturday. 

“This would mark the first successful social engineering attack against an easyDNS client in our 28-year history. There have been countless attempts.”  

Both companies have pointed to the Domain Name System Security Extension (DNSSEC) in thwarting the hacker’s attempts to do further damage. 

The attacker couldn’t produce valid cryptographic signatures, so Domain Name System resolvers rejected the attacker’s forged DNS responses, causing users to see error messages instead of being redirected to malicious sites. 

Advertisement

“DNSSEC was enabled for their domain when the attackers attempted to flip their nameservers, presumably to effect some manner of phishing or malware injection attack, DNSSEC-aware resolvers, which most are these days, began dropping queries,” Jeftovic said. 

Source: eth.limo

In its postmortem, eth.limo noted that because the attacker lacked the signing keys, they were unable to bypass the safeguards, which likely “reduced the blast radius of the hijack. We are not aware of any user impact at this time. We will provide updates if that changes.”

easyDNS makes changes since the attack

Jeftovic described the social engineering attack as “highly sophisticated,” and said easyDNS is still conducting a post-mortem on how the breach occurred, and has already begun rolling out changes to prevent a recurrence.

Source: easyDNS

“In eth.limo’s case, we will be migrating them to Domainsure, which has a security posture more suited toward enterprise and high-value fintech domains, TLDR there is no mechanism for an account recovery on Domainsure, it’s not a thing,” he added.

“On behalf of everyone here, I apologize to the eth.limo team and the wider Ethereum community. ENS has always had a special place in our heart as the first registrar to enable ENS linking to web2 domains and we’ve been involved in the space since 2017.”

Related: RaveDAO denies manipulation as Binance, Bitget probe RAVE trading activity

Advertisement

The eth.limo incident is the latest in a series of domain hijackings targeting crypto projects. Days earlier, decentralized exchange aggregator CoW Swap lost control of its website after an unknown party hijacked its domain. 

Steakhouse Financial, a DeFi advisory and research firm, similarly disclosed at the end of March that it had lost control of its domain to an attacker.

Magazine: Will the CLARITY Act be good — or bad — for DeFi?