DotSwap V1 Exploit Drains 8.5 BTC as Short-Term Holders Capitulate at a Loss

The timeline is short and ugly. According to a security notice from DotSwap—the Bitcoin-native asset trading protocol now operating as On Nexus—an attacker exploited a legacy server-side signing path in DotSwap V1, the original swap platform launched in 2024. Over roughly four hours on October 25, the attacker drained approximately 8.5 BTC, valued near $685,000 at the time, from V1 liquidity pools and V1 accounts. Because V1 custodied pool liquidity in a multisig arrangement, the loss falls on liquidity providers who deposited BTC into those pools; every V1 deposit is affected. Importantly, the protocol states that trading users’ self-custodial wallets were not touched. V1 had already been slated for retirement once the full migration to Nexus completed, and it is now offline. The incident is a reminder that deprecated infrastructure remains live attack surface long after a team’s attention has moved to a successor product—an operational-risk theme that has repeatedly surfaced in crypto this year, including in the record $5.6B hack that briefly pushed BTC below $78,000, as covered in Bitcoin Holds Near $78K After Record $5.6B Hack Tests Market Resilience.

DotSwap’s response has followed the standard playbook: the team says it is tracing the funds in coordination with exchanges and analytics partners and will publish a full post-mortem. That is necessary but not sufficient for LPs, who bear the loss directly. The distinction between custodial pool risk and self-custody matters here—traders who simply swapped through V1 kept their keys and their coins, while depositors who supplied liquidity absorbed the hit. For the broader market, the dollar figure is small relative to BTC’s daily settlement volume, so the price impact is more sentiment than flow. Still, the event lands in a news mix that already carries 7 bearish stories against 14 bullish ones, and it reinforces a persistent institutional critique: Bitcoin-adjacent DeFi protocols keep accumulating smart-contract and server-side vulnerabilities that erode trust even when the base layer is unaffected. Watch for the post-mortem to clarify whether any portion of the 8.5 BTC is recoverable and whether Nexus inherits any of the same signing architecture.

The more consequential signal for price is what short-term holders are doing. On-chain analyst Axel Adler Jr. reports that coins sent to exchanges by holders with less than six months of age have flipped from profit-dominated to loss-dominated. The 24-hour exchange inflow balance sits at -18.6K BTC, versus +10.4K BTC a week earlier, and touched -23.1K BTC on October 26; the negative reading has persisted since August. Equally telling, the share of inflow volume arriving in profit has collapsed from 75% to 16%, the lowest level on record for that metric. In plain terms, the marginal seller is no longer a momentum chaser locking in gains—it is a recent buyer capitulating near or below cost basis. Adler’s framework is careful: inflow balance measures the net difference in coins moved to exchanges, not confirmed sales, and a transfer is not a trade. But the direction is unambiguous. A return to positive inflow balance with the profit-share back above 50% would signal that profit-taking has regained control; until then, the risk is that loss-driven inflows expand again. Derivatives coverage has led recent news flow, and the current setup—funding that is firm but not euphoric, with open interest that has not aggressively rebuilt—suggests leverage is not yet amplifying the spot weakness. That is a small mercy: liquidation cascades need crowded positioning, and the market is not there.

The technical picture is neutral with a defensive tilt. RSI-14 sits at 52—dead center, neither oversold nor overbought—while momentum reads 55 and trend strength is a soft 4, consistent with a market that has corrected but not broken. The 50-week moving average near $75,800 is the line in the sand; a weekly close above it keeps the door open for recovery, while losing it would put the broader structure under pressure. On shorter timeframes, the $78,000 area has acted as a pivot—BTC slipped below it during the record hack episode and has been oscillating around it since. Immediate support clusters in the $75,800–$76,500 zone, with a deeper shelf near $72,000–$73,000 if the weekly MA fails. Resistance is stacked at $80,000–$81,500, where prior breakdown supply and round-number psychology coincide, and then $84,000–$85,000. The 200-period moving average on daily charts sits above spot, so rallies into the low $80,000s should be treated as tests until proven otherwise. The technical score of 65/100 reflects this middling posture: trend and momentum components are not confirming a new leg lower, but they are not yet confirming a reversal either.

Projecting forward, the momentum drift favors range-bound trade between roughly $75,800 and $81,500 until either the weekly MA breaks or the profit-share metric on exchange inflows recovers above 50%. A decisive weekly hold above $75,800 with improving breadth would lift the technical score toward the low 70s and open a retest of $84,000. A weekly close below the 50-week MA would likely drag the score into the 50s and shift focus to the $72,000 shelf. Position sizing should reflect that asymmetry: the risk of a structural break is real but not yet realized, and the reward for patience is a cleaner entry once the loss-selling wave exhausts.

The News Sentiment Score of 59/100—14 bullish stories against 7 bearish—is a mildly constructive reading that has been remarkably stable through a noisy stretch. Recent coverage has seen the score oscillate in a narrow band: 62 during the Iole 151-BTC liquidation episode, 64 when ETF inflows returned, 58 on a market-commentary-heavy day, and 59 now. That persistence is itself informative. In past cycles, sentiment scores in the high 50s to low 60s have coincided with consolidation phases where bad news is absorbed without capitulation in price—exactly the pattern here, where an 8.5 BTC exploit and a wave of short-term loss selling have not dislodged the 50-week MA. The comparison to the record $5.6B hack episode is instructive: that event was orders of magnitude larger in dollar terms yet produced a similar sentiment footprint, because the market has learned to separate protocol-level failures from base-layer integrity. The risk is complacency. If loss-driven inflows accelerate and the profit-share metric stays pinned near 16%, sentiment could roll over toward the low 50s, a zone that has historically preceded deeper corrections. For now, the balance of stories—ETF inflows returning, derivatives bid firm—keeps the score above neutral. Context from BTC Sentiment Climbs to 62 as Iole's 151-BTC Liquidation Meets Firm Derivatives Bid shows how quickly a single large liquidation can move the needle without breaking the tape.

Three catalysts matter over the coming sessions. First, the DotSwap post-mortem and any fund-tracing updates: recovery of even part of the 8.5 BTC would soften the LP loss and remove a headline risk. Second, the short-term holder inflow data—specifically whether the profit-share of exchange inflows climbs back above 50% and the inflow balance turns positive, which Adler flags as the condition for profit-taking to regain dominance. Third, macro liquidity: ETF flows have returned but slowed to $17.2M daily in the most recent read, and the four-day streak totaling $440.8M is encouraging but not yet a trend, as detailed in ETF Inflows Return but Slow to $17.2M as BTC Sentiment Hits 64. Risk management should center on the $75,800 weekly MA: a weekly close below it argues for reducing exposure and hedging into the $72,000 shelf, while a hold with improving inflow metrics justifies adding on strength toward $81,500. Keep position sizes moderate—the technical score of 65 and sentiment of 59 describe a market with edge neither to bulls nor bears, and the loss-selling wave has not yet run its course.