Bitcoin has returned to a key psychological price level as markets bounced back amid ongoing tensions in the Middle East.

Bitcoin prices reached $70,125 in late Monday trading on Coinbase, according to TradingView.

However, it hit resistance there as it did on Feb. 25 and had pulled back slightly to trade at $68,000 at the time of writing during the Tuesday morning Asian trading session. There has been an “insane reversal in the markets,” observed crypto analyst ‘Bull Theory’ on Tuesday.

“Just 24 hours ago, we saw extreme fear and panic when US futures opened Sunday night,” they said. US stock markets and crypto markets have rebounded strongly, they observed before adding:

“Markets don’t hate bad news; they hate uncertainty. Khamenei’s death didn’t spark chaos; it removed ambiguity, and the market priced that in immediately.”

Bitcoin Bucks War Panic Trend

“Traditional ‘risk-off’ playbooks say Bitcoin should be dumping right now,” said Macro outlet Milk Road. “If BTC can maintain this divergence from risk assets during sustained geopolitical stress, the ‘digital gold’ argument finds itself a new tailwind.”

“We understand war headlines make investors nervous, but we expect stocks to be up in March,” commented Fundstrat’s Tom Lee on Monday.

“This is exactly what happened in 2022 when Russia invaded Ukraine,” said analyst ‘CrediBull Crypto’.

They added that the day of the invasion marked a local bottom after months of drawdown, “and we spent a month climbing 40% back to the upside before continuation back down.”

“People’s first inclination during events like this is to panic and sell, which would have made you sell the local bottom in both these instances.”

Meanwhile, CryptoQuant analyst ‘Moreno’ said, “the sell-side pressure from recent buyers is fading. Panic is being replaced by patience, or at least exhaustion.”

“Despite the recent geopolitical escalation involving Iran, a type of event that historically triggers reactive selling, the data shows no meaningful spike in exchange inflows from short-term holders.”

There was no panic profit-taking, no loss capitulation, no reactive behavior from this typically event-sensitive cohort,” he added.

Santiment reported that as markets have rallied, social data indicated there was a “huge surge in positive sentiment as Bitcoin’s price was threatening to fall below $65,000.”

You may also like:

“Discourse is heavily invested in the Iran, Israel, and US conflict currently, so expect volatile movement based on any notable updates with the developments,” it added.

📈 As today’s markets have rallied, social data indicated there was a huge surge in positive sentiment as Bitcoin’s price was threatening to fall below $65K. Over the next 2 hours and 20 minutes, $BTC rallied +7% and reached $69.9K before running into $70K resistance for the time… pic.twitter.com/B3lWwtqABz

— Santiment (@santimentfeed) March 2, 2026

Advertisement

Crypto Market Outlook

Crypto market capitalization has gained 2.6% on the day to reach $2.42 trillion at the time of writing. The move was largely driven by Bitcoin, but Ether also reclaimed the $2,000 level and remains just above it at the time of writing.

Altcoin gains were minimal in comparison to the top two digital assets.

Bitcoin traded near $68,000 on Tuesday as U.S. spot ETFs pulled in $458 million, according to data curated by SoSoValue, marking one of the quarter’s strongest inflow days despite the ongoing conflict with Iran.

The inflows suggest institutional investors are treating bitcoin’s recent volatility stemming from the war as contained rather than systemic.

Singapore-based trading firm QCP Capital said in a recent note that the roughly $300 million in long liquidations triggered by the weekend headlines were “notable but contained,” arguing that positioning had already been materially lightened in recent weeks.

Options markets told a similar story, QCP wrote, with one-day implied volatility briefly spiking to 93% before quickly retracing, a sign traders were hedging event risk rather than bracing for prolonged escalation.

Meanwhile, U.S. spot bitcoin ETFs added $1.1 billion over three consecutive sessions last week, according to SoSoValue data previously reported by CoinDesk, with BlackRock’s IBIT accounting for roughly half.

Crypto hackers attempting to use “ClickFix” attacks to steal crypto have now turned to impersonating venture capital firms and hijacking browser extensions in their two most recent attacks. 

According to a report by cybersecurity firm Moonlock Lab on Monday, scammers are using fake venture capital firms such as SolidBit, MegaBit and Lumax Capital. The hackers are using the firms to contact users via LinkedIn with partnership offers, then funneling them to fake Zoom and Google Meet links. 

When a target clicks the fraudulent link, they are taken to an event page featuring a fake Cloudflare “I’m not a robot” checkbox. Clicking it copies a malicious command to the clipboard and prompts the user to open their computer’s terminal and paste the so-called verification code, which executes the attack.

“The ClickFix technique is what makes the final step so effective,” the Moonlock Lab team said. “By turning the victim into the execution mechanism—having them paste and run the command themselves—the attackers sidestep the very controls the security industry has spent years building. No exploit. No suspicious download.”

Moonlock Lab alleges that a person using the name Mykhailo Hureiev, listed as the co-founder and managing partner at SolidBit Capital, has been a primary point of contact for the initial LinkedIn phase of the scam. Two X users have also reported suspicious conversations with a Hureiev account.

However, Moonlock Lab notes that the campaign’s infrastructure is sophisticated and designed to rotate identities as soon as one front is exposed.

Chrome extension hijacked to steal crypto

Meanwhile, crypto hackers have, until recently, been spreading a malicious Chrome extension with a “ClickFix” attack angle.

QuickLens, an extension that lets users run Google Lens searches directly in their browser, was removed from the web store after it was compromised to push malware, John Tuckner, the founder of cybersecurity firm Annex Security, said in a Feb. 23 report.

After QuickLens changed ownership on Feb. 1, a new version was released two weeks later containing malicious scripts that launched ClickFix attacks and other information-stealing tools. Tuckner noted that the extension had around 7,000 users. 

The hijacked extension reportedly searched for crypto wallet data and seed phrases to steal funds. It also scraped the contents of Gmail inboxes, YouTube channel data, and other login credentials or payment information entered into web forms, according to a eSecurity Planet report on March 2.

ClickFix attacks are used to target many industries

The ClickFix technique has gained popularity among threat actors since last year, according to Moonlock Lab, because it forces victims to execute the malicious payload manually, bypassing standard security tools.

Related: February crypto losses hit lowest level since March 2025, says PeckShield

However, security researchers have been tracking its use since at least 2024, with targets spanning a wide range of industries. 

Microsoft Threat Intelligence sent out a warning in August last year that it had been tracking “campaigns targeting thousands of enterprise and end-user devices globally every day.”

Meanwhile, cyber threat intelligence company Unit42 reported in July last year that the “relatively new social engineering technique” has been impacting industries such as manufacturing, wholesale and retail, state and local governments, and utilities and energy.

Magazine: Would Bitcoin really be at $200K if not for Jane Street? Trade Secrets