Bitcoin Breaks $78,000 as ETF Outflows and a THORChain Exploit Expose Crypto’s Weak Spots

Bitcoin’s drop to $78,000 is the clearest sign yet that the market has moved out of a waiting pattern and into a real break lower. What stands out today is not just weaker prices, but what gave way underneath them: leveraged longs were forced out, the recent ETF bid flipped into outflows after weeks of inflows, and THORChain’s exploit showed how quickly operational confidence can become a balance-sheet problem. After several editions where buyers still looked arguable, today shows a market with less protection across the board.

Bitcoin’s drop to $78,000 turned a soft support test into a liquidation break

Roughly $500 million in bullish crypto positions were reportedly liquidated as bitcoin fell to about $78,000. The price headline matters, but the more useful read is what failed underneath it: for the past week, bitcoin had looked weak but still propped up by buyers willing to absorb dips. That buying did not hold.

That shifts the setup from “still range-bound, still waiting” to a real break in market behavior. Earlier in the week, traders could still point to price levels, policy optimism, and the recent ETF bid as reasons not to overread every selloff. Now the sequence looks different. Price fell far enough to force leveraged longs out, those forced sales added more downward pressure, and the decline spread beyond bitcoin into majors like SOL and XRP. Once a move is driven by liquidation rather than patient repositioning, the market is no longer just debating direction; it is paying the price for having leaned the wrong way.

The absence of buyers is what makes this more than a technical chart event. Spot bitcoin ETFs just posted about $1 billion in weekly net outflows, ending a six-week inflow streak. That does not mean institutional demand vanished; cumulative inflows are still large, and the ETF complex remains huge. But one of the cleaner sources of marginal buying stopped acting like a dependable absorber of weakness at the same time leverage was still sitting in the market. When cash buyers step back, even temporarily, leveraged positioning has less room to survive a downside push.

There is also a macro link here, though the exact mix is harder to pin down cleanly in real time. If bond and equity stress are weighing on broader risk appetite, crypto does not need its own internal scandal to fall hard. It just needs fewer natural buyers and too many traders financing the same bullish view.

That is why today’s break stands out. A quiet market can hide fragility because buying looks real until it is tested all at once. Once the selling is forced, the question stops being whether bitcoin is near the bottom of a range and becomes who is still willing to buy it without leverage. In crypto, prices often look sturdy right up until that buying disappears.

Spot Bitcoin ETFs Lose $1 Billion in a Week, Removing a Key Buyer

Six straight weeks of spot bitcoin ETF inflows had made institutional demand look sticky. Last week broke that pattern hard: roughly $1 billion left the products, reversing a run that had pulled in about $3.4 billion.

That changes the read on bitcoin’s floor. In recent editions, ETF buying was one of the few concrete sources of demand under bitcoin even as retail participation looked thinner and macro conviction stayed uneven. That demand did not vanish over the long run - cumulative net inflows are still large, and total ETF assets remain above $100 billion - but it stopped behaving like a reliable dip buyer exactly when the market was slipping.

The daily pattern matters. Monday was slightly positive, then Tuesday turned negative, Wednesday saw the week’s largest hit at more than $635 million out, Thursday bounced back briefly, and Friday ended with another roughly $290 million leaving. That is not one ugly print caused by a single rebalance. It looks more like institutions deciding that near-term crypto exposure was optional, not urgent.

When ETF flows are positive, issuers and their trading counterparties have to source bitcoin to meet new demand. When flows turn negative, that demand disappears and can become selling pressure instead. In a fragile tape, that shift hits twice: first because fewer natural buyers show up on weakness, and second because traders who were counting on ETF demand as a backstop have to reprice how far bitcoin can fall before fresh money returns.

Some of the explanation offered for the move - rotation into AI equities, macro uncertainty, shifting attention after U.S. policy developments - is interpretation, not settled fact. But the practical takeaway is clear enough. Institutional demand is still real, just conditional. In this market, conditional buyers do not stop a break; they wait to see how deep it gets.

THORChain’s 02:14 UTC exploit shows how DeFi failures are becoming treasury events

At 02:14 UTC on May 11, THORChain node operators flagged anomalous outbound transactions. Within eight minutes, trading and outbound signing were paused. That response speed helped, but so did the next step: the protocol did not stop at containment. It moved to a recovery portal, told affected users to revoke malicious approvals, and set aside a treasury-funded refund pool matching the reported $10 million loss.

That sequence is the real case study here. The exploit hit 12,847 wallets across four chains, including 36.75 BTC and roughly $7 million in tokens on BNB Chain, Ethereum, and Base. In older DeFi incidents, users often got a freeze, a post-mortem, and a vague promise that governance would discuss compensation later. THORChain’s response treats remediation as part of incident handling itself. Once a protocol accepts that users may need to be repaid quickly, treasury design stops being a background governance topic and becomes part of the security model.

The suspected failure path makes that more than a public-relations exercise. The leading theory is a flaw in a GG20 threshold-signature implementation that let vault key material leak gradually, possibly involving a newly churned node that joined days before the attack. If that holds up, the problem was not a simple bad line of smart-contract code. It was a mix of cryptography, validator operations, and cross-chain signing. Those failures are harder for users to inspect in advance, which raises the pressure on protocols to build both monitoring and repayment tools ahead of time.

There are limits. Claims must be filed within 21 days, through June 4, and the root cause is still under investigation. A treasury-backed portal is not the same as full recovery, and it does shift part of the loss from users to the protocol’s balance sheet. Still, that shift is meaningful. It says the market is starting to price not just whether a protocol can avoid failure, but whether it can survive one without leaving users to absorb the damage alone.