Buying or Custody Transfers? A Four-Tier Test for Crypto Whale Flows

Source publication time: November 9, 2026, at 13:42:50 (UTC+8). Written by 2xnmore and translated into Chinese by TechFlow. The examples below refer to the reporting week discussed in that article.

A large token transfer does not necessarily represent a purchase. It may instead reflect an exchange withdrawal, a custodian reorganizing wallets, a collateral transfer or a staking-contract migration.

In its review of nine token movements, the source proposes ranking on-chain activity by how directly it demonstrates new buying demand. For exchange and custody analysis, the central distinction is between an executed trade and a change in where existing assets are held.

1. Stablecoin-funded purchases: the most direct evidence

The source ranks a wallet exchanging USDC or USDT for a token through decentralized liquidity pools as the strongest evidence of active spot buying. Unlike a simple transfer, this records an exchange of assets.

Its Ethereum example involved a wallet spending approximately $38 million in USDC to acquire 16,658 ETH, with ETH trading near $2,280. According to the article, the wallet’s cumulative purchases in that price range reached 27,553 ETH, involving more than $63 million in cash capital.

On Solana, the source reports that an anonymous large holder made a $10 million spot purchase of SOL during a declining, volatile market.

The author interprets these transactions as stronger evidence of buying conviction than wallet movements alone, and describes the repeated ETH purchases as support for a market bottom. That price-support conclusion is the author’s interpretation, rather than something established by the purchase amounts themselves.

2. Exchange withdrawals: assets leave a venue, but why?

Withdrawals establish that tokens moved out of an exchange’s wallets. They do not, by themselves, establish when a purchase occurred or whether the transfer represents a new investment decision.

The source identifies two Ethereum withdrawals:

  • 10,793 ETH, valued at approximately $24.6 million.
  • 6,000 ETH, valued at approximately $13.7 million.

Both reportedly arrived at newly created, previously empty addresses, with no short-term selling observed. Neither was accompanied by an immediate on-chain stablecoin swap.

The author considers post-OTC settlement deliveries or routine quarter-end segregation within institutional multisignature custody arrangements highly likely explanations. The article does not establish which explanation applies. More generally, it notes that withdrawals can also reflect market-maker consolidation, custody-provider wallet adjustments or multisignature migrations.

For Avalanche (AVAX), the source reports $8.4 million in tokens withdrawn from exchanges in batches. It argues that, without subsequent liquidity provision or ecosystem lending activity, the observable change is principally one of asset location—not proof of an imminent price increase.

For custody analysis, an unlabelled receiving address should therefore not automatically be treated as a newly identified independent buyer.

3. Exchange deposits: potential selling pressure, not proof of a sale

The source treats exchange deposits as a weaker signal requiring follow-up. Tokens sent to an exchange may be intended for sale, but they can also support collateral, hedging or derivatives-margin requirements.

One example concerns a wallet dormant for 18 months that deposited its entire 3,000 ETH holding, worth approximately $6.8 million, into Coinbase. The article reports that the assets were subsequently dispersed into hot-wallet infrastructure and that sustained large sell-side orders appeared on the exchange order book during the corresponding period.

The author interprets that combination as a more meaningful warning of selling pressure than the deposit alone. The reported timing remains an association, not independent proof of who placed the orders.

By contrast, the source describes market-maker addresses depositing tokens into Binance and withdrawing equivalent-value stablecoins within two hours. It characterizes these movements as cross-market arbitrage and inventory rebalancing rather than a standalone bearish signal.

4. Staking migrations: large transfers without new purchases

The article also describes transfers involving BNB and unnamed altcoins that had been promoted as inflows worth tens of millions of dollars.

According to the source, the underlying activity was a decentralized staking protocol’s contract upgrade and node migration: tokens were withdrawn from older staking pools and programmatically transferred into newly deployed V2 contracts.

The author notes that technical-maintenance transfers can reach hundreds of millions of dollars and trigger prominent automated alerts. In the examples described, however, the movement concerned existing positions rather than fresh purchases. The source assesses their net effect on secondary-market supply and demand as zero.

Three checks before calling a transfer “accumulation”

The source recommends examining three layers of evidence:

  1. Identify the exchanged asset. Was USDC or USDT actually spent to acquire tokens, or did tokens simply move between addresses?
  2. Investigate wallet relationships. Use tools such as Arkham or DeBank to check whether the sending and receiving wallets belong to the same institution or custody structure.
  3. Compare transfers with trading activity. Look for corresponding liquidity-pool or order-book effects, including slippage, price differences and basis premiums, rather than relying on transfer size alone.

The practical distinction is between evidence of execution and evidence of location. Exchange and custody transfers can be important, but their size alone does not establish new demand, beneficial ownership or an intention to sell.

Original article: TechFlow