Major market maker secretly offloaded 1,213 BTC onto Binance during New Year’s Eve thin liquidity

Wintermute faced scrutiny for two recent events: dumping Bitcoin onto Binance during New Year’s Eve’s thin liquidity, then scrambling to accumulate coins in what appeared to be urgent buying ahead of the Fed announcement on Jan. 2.

The claims paint a picture of coordinated manipulation: sell into weakness, buy back cheaper. On-chain data supports the first accusation, but not the second.

The evidence comes from blockchain transaction records, not from exchange order books. Every flow analyzed involves addresses labeled by Arkham as belonging to Wintermute on one side and Binance hot wallets on the other.

This methodology captures custody transfers between the market maker and the exchange but reveals nothing about what happens inside Binance’s matching engine. A Bitcoin deposit could trigger immediate market sell orders or sit idle as inventory.

The blockchain records movement, not intent.

On-chain data confirms the Dec. 31 dump

On Dec. 31, 2025, Wintermute moved 1,518.6 BTC to Binance while withdrawing only 305.5 BTC, a net deposit of 1,213 BTC, worth approximately $107 million at the day’s prices near $88,000.

The timing concentrated during traditionally low-liquidity windows.

The largest transfers hit at 06:43 UTC (148.5 BTC) and 18:10 UTC (443 BTC), hours when Western markets sleep, and Asian trading desks wind down. Bitcoin dropped from $92,000 on Dec. 30 to break below $90,000 on Dec. 31, bottoming near $91,500 that evening.

Wintermute’s heaviest deposits bracket the intraday low.

The pattern persisted beyond New Year’s Eve. On Jan. 1, 2026, Wintermute pushed another 1,559.2 BTC to Binance while pulling 935.1 BTC back, a net deposit of 624 BTC, roughly $55 million.

On Jan. 2, the flow continued: 1,631.7 BTC deposited, 814.4 BTC withdrawn, for a net 817 BTC moving onto the exchange. Over three consecutive days, Wintermute deposited 2,654 BTC to Binance and withdrew 2,055 BTC, leaving roughly 600 BTC on the exchange’s infrastructure.

This directional flow supports the dumping accusation in raw magnitude and timing.

Wintermute moved substantial Bitcoin onto Binance precisely when liquidity thins and price pressure amplifies. Whether the firm executed immediate sales or staged inventory for gradual distribution remains unknowable from blockchain data alone.

Yet, the custody transfers themselves establish clear selling pressure during vulnerable market conditions.

Accumulation thesis debunked

The second accusation that Wintermute urgently accumulated Bitcoin on Jan. 2 collapses under scrutiny of the same on-chain records.

Across 14 transaction datasets spanning 05:15 to 17:55 UTC on Jan. 2, Wintermute received 2,091.8 BTC from external counterparties (including WBTC on Ethereum) and sent out 2,509.7 BTC.

The firm ended the day with 418 BTC, down from its start. That represents net distribution, not accumulation.

The hourly breakdown reveals classic two-sided market-making rather than directional buying. Wintermute showed net inflows during early-morning sessions and again around 09:00 and 13:00-14:00 UTC, totaling roughly 590 BTC in positive flow.

But those accumulation windows got swamped by net outflows concentrated at 10:00, 15:00, and into 17:00 UTC, where combined distributions exceeded 1,000 BTC. The cumulative position traced a sawtooth pattern, consisting of alternate buying and selling, that ended well below zero.

Urgent accumulation produces a steep upward ramp, and Wintermute’s Jan. 2 activity produced the opposite.

Counterparty analysis reinforces this interpretation. Wintermute pulled BTC from Gate, Crypto.com, Bullish, Bitfinex, KuCoin, and Bybit, exchanges that reported net inflows.

However, Binance alone absorbed 933 BTC of net deposits from Wintermute that day, dwarfing the inflows from other venues.

When netted across all tagged exchange addresses in the datasets, Wintermute’s CEX flows landed almost flat, with only single-digit BTC net movement. The bulk of the 418 BTC reduction came from outflows to unlabeled addresses not clearly identified as exchanges or DeFi protocols.

The gross turnover of 4,600 BTC documents intense trading activity. Yet, turnover measures velocity, not direction. A market maker rotating inventory across venues to capture spreads generates identical volume signatures to a trader accumulating a position.

The distinction lies in net flows. Wintermute’s Jan. 2 net flows point unambiguously toward distribution rather than accumulation.

What on-chain data can and cannot prove

Three constraints limit the conclusions that can be drawn from blockchain records.

First, the datasets capture only addresses labeled as Wintermute or specific exchanges, and activity involving untagged wallets disappears from view.

Second, on-chain transfers timestamp custody changes, not trades. A BTC deposit on Dec. 31 could remain untraded for days or execute instantly. The blockchain cannot distinguish.

Third, the analysis excludes activity on other networks and synthetic BTC products. Hedges through CME futures, perpetual swaps on offshore exchanges, or BTC-collateralized debt positions would not appear in spot BTC or WBTC transaction logs.

Within those constraints, the data establishes clear facts. Wintermute deposited substantial Bitcoin to Binance during year-end low-liquidity periods, with continued net deposits through Jan. 2.

That directional flow aligns with selling pressure during vulnerable market conditions.

The timing, scale, and persistence across three consecutive days support the Dec. 31 dumping accusation, though orderbook data would be required to confirm actual execution.

The Jan. 2 buying accusation finds no support in the same records. Wintermute ended that trading session with 418 BTC less than it started, demonstrating a net reduction rather than accumulation.

The firm turned over a massive volume but finished lighter on Bitcoin, not heavier, a behavior consistent with active market-making.

Transaction patterns show inventory rotation across venues, not panic buying.

The gap between blockchain transparency and orderbook opacity creates space for competing narratives. On-chain data proves Wintermute moved large Bitcoin positions onto exchanges during stressed market conditions.

Whether that constitutes manipulation or market-making depends on execution strategies invisible to blockchain observers.

The Dec. 31 flows warrant scrutiny, while the Jan. 2 flows do not support the accumulation narrative.