Bitcoin’s tape of the past 24 hours seemed designed for crypto investors, as BTC breached the $90,000 threshold in the early hours of December 29, only to give back those gains less than 12 hours later.
Traders like TedPillows posted clown emojis next to charts showing repeated peaks and valleys, while CryptoSeth called the behavior of “fraud goods,” pointing to the same sawtooth pattern repeating itself 30 times.
Furthermore, Wimar X outright blamed Binance and Wintermute, claiming: “multi-billion dollar manipulationvisible on-chain. However, the on-chain transfers involving Wintermute, as shown in his screenshot, totaled less than $30 million.
Yet the question is not whether the accusations are unfounded, but whether the data can distinguish between opportunistic stop-hunting and a structurally fragile, over-indebted market that breaks down in the same way every time someone leans on it.
The microstructure tells the story
Binance’s cumulative volume delta, which consists of buy aggressor volume minus sell aggressor volume built up over time, shows a clean pattern: a sharp intraday spike driven by aggressive buying, CVD rising as market orders increase offers, followed by an equally sharp reversal driven by aggressive selling, while CVD collapses as traders enter bids.
The price ends about where it started, the net CVD is almost flat across the entire window.
That’s exactly what a “flicking through the book, harvest stops, late momentum, then fades away” sequence looks like. It’s not a slow trend building belief, it’s a quick up and down move that leaves the market virtually unchanged, but would be profitable for anyone trading on both feet.
The tape does not reveal who initiated the movement or whether it was coordinated, but it does show that the movement itself was driven by aggressive directional flow, rather than passive sequence coordination. These are indicators of market manipulation.
This is not a one-time print. Same V-shaped spikes and retracements played out for Bitstamp and Bybit until December. Different locations, similar patternrepeated over time.
That suggests the environment itself is friendly to the very behavior traders accuse: a structurally fragile, over-indebted market, where someone continues to lean into obvious stop zones because the market continues to work.
It proves not to be the same trader every time. The market is easy to control for anyone with enough size and speed to move the price on a thin book and then rebalance the stock and collateral across the various locations before the move reverses.
Someone is quitting hunting
The tape is very similar to a classic stop hunt, as liquidity is scarce during the holiday season. CoinGecko data shows that Binance is consistent remain below $10 billionwhile other major exchanges have recently failed to even reach $1 billion in volume.
Moreover, Coinglass data shows that open interest changed by 0.08%, -0.67% and 0.03% respectively in the last 1 hour, 4 hours and 24 hours.
The liquidations across those horizons totaled tens of millions of dollars, spread between longs and shorts, and not the massive unilateral wipeouts that come with blowing up a hugely busy trade.
Prices in other locations broadly followed Binance rather than disconnecting, indicating the move was not isolated to one order book. And the snapshots along the chain show a reshuffling of custody, not the side of the transactions or the profit-and-loss trajectory of a particular wallet.
Professional agencies were active, as on-chain data shows that more than 87 BTC left Binance to a Wintermute deposit wallet, but what they did and why remains unclear.
Taken together, the evidence fits the pattern of opportunistic profiteering in thin order books. Aggressive buying drives Bitcoin to a sharp intraday peak, aggressive selling brings it back, and the cumulative flow ends roughly flat.
Repeated inverted V-shaped moves across Bitstamp, Bybit and Binance, plus a burst of cross-venue flows from Binance to market maker and exchange addresses, all point to a market that can be easily traversed for short-term profits for well-capitalized traders.
The evidence suggests opportunistic tampering with the tape. The behavior traders describe is plausible and supported by the pattern, but the data does not identify a specific orchestrator or demonstrate intent beyond a reasonable doubt.
What the data does show is that the environment is structurally vulnerable to exactly the kind of stop-hunting that traders accuse, and that the tape looks like someone has taken advantage of it.