The Marginal Buyer Is an ETF: Reading Bull Market Microstructure Through Authorized Participant Flow

0xPlanB NFT

Watch the order book, not the chart.

On a Tuesday session earlier this quarter, aggregate 1% bid depth across the five largest spot venues — Binance, Coinbase, OKX, Bybit, Kraken — thinned by roughly a third inside ninety minutes. Bitcoin fell about 6%. The derivatives tape offered no explanation. Perpetual funding stayed flat. The quarterly basis barely twitched. Open interest was unchanged. That is not what an information event looks like. That is what a liquidity event looks like.

Then 4:00 p.m. New York printed. The ETF window closed with net creations in the low hundreds of millions. By the Asian open the candle was gone. Depth returned. Price returned. The tape healed as though nothing had happened.

I have watched that sequence enough times to stop calling it coincidence. It is the fingerprint of a market where the marginal buyer is no longer a spot trader with an opinion. It is an authorized participant arbitraging a creation basket against a futures hedge. The chart is downstream of the machine. Read the machine.

Most coverage treats a spot Bitcoin ETF as a large wallet that buys coins. It is not. It is a wrapper around a creation-and-redemption engine, and that engine only runs when three conditions line up.

An authorized participant — a market maker, a bank desk, an electronic trading firm — has two ways to create shares. Cash creation: deliver dollars and let the issuer's execution desk buy spot. In-kind creation: deliver coins directly. For the first year of US spot Bitcoin ETFs, only cash creation existed. In-kind redemption is now permitted, which shortens the arbitrage loop, reduces settlement friction, and strips out a layer of tax drag. That is a genuine structural improvement. It is also a structural speed-up. Speed cuts both ways.

Here is the part the retail feed skips. The AP does not want Bitcoin exposure. The AP wants basis. It buys spot, sells CME futures, and collects the annualized spread between the two. That is the trade. The coins end up in the trust. The directional risk ends up hedged at the CME. The AP keeps the carry.

So a headline reading "ETF logged $500 million of inflows" is not a statement about demand. It is a statement about the basis being wide enough to pay the AP to run the machine. The inflow is the output. The basis is the input. Confusing the two is the most expensive category error in this market.

Bitcoin trades 24/7/365. The ETF complex does not. Creation and redemption happen inside a 6.5-hour New York window, five days a week. The CME closes Friday afternoon and reopens Sunday evening. That leaves a structural hole — roughly two days a week where the largest pool of marginal demand physically cannot respond to price.

For fifteen years, spot crypto exchanges were the discovery venue and the CME was the echo. That relationship has inverted. The futures basis and the AP hedge now set the anchor. Spot follows.

This is not a thesis I pulled from a whitepaper. I rebuilt my flow models around it in early 2024, after watching a 15% drawdown in which ETF inflows held steady while spot exchange liquidity simply evaporated. I had been weighting spot depth as a leading indicator. It was lagging. Once I flipped the weights and started treating ETF flow data as the primary input, I caught a 12% rally two weeks before the broader market priced it. That is not genius. That is reading the right tape.

Follow the dollar leg and the picture sharpens further. Every cash creation settles in dollars, and a growing share of those dollars move through stablecoin rails before they ever touch a bank. Watch net USDC and USDT issuance as a funding proxy. When stablecoin float expands into an ETF inflow streak, the two are usually the same trade wearing different clothes.

And remember what the dollar leg actually is. Circle can freeze an address. It has done it, it will do it again, and it advertises the capability as a feature. Whatever you think of that policy, it is a structural fact: the settlement layer of the largest institutional on-ramp in crypto has an admin key. Code doesn't negotiate. Code executes what it was written to execute, and someone wrote a pause function.

The hedge leg is the real order flow.

When you see a creation print, you are seeing the first leg of a two-leg trade. The second leg — short CME futures — is where the AP's P&L lives. Track the annualized basis, not the headline.

Wide basis: APs are paid to create. Creations print. Spot gets a bid.

Compressed basis: the carry no longer covers cost of capital plus operational risk. Creations stop. The bid disappears.

Run the arithmetic. If the front-month CME contract trades at an annualized 8% over spot and an AP's blended cost of capital sits near 5%, there is a roughly three-point spread to harvest. That spread pays for the desk, the hedge, the custody, and the compliance overhead. Compress it to 3% and the trade is dead — not unprofitable, dead. The AP does not taper. It stops.

That is why ETF inflow streaks die in clusters rather than fading. The trade is binary at the margin. Either the spread pays or it doesn't.

Which means the "sticky institutional bid" narrative is doing a lot of unearned work. Some of the money is genuinely sticky — model portfolios, long-horizon allocators, the slow dollar. But that is a minority of the flow. The majority is the arb. The arb leaves the moment the arb stops paying, and it leaves all at once.

Depth is a mirror, not a buffer.

Here is where the mechanical view gets uncomfortable. Most of the resting bids you see on a crypto order book are market-maker inventory. That inventory is financed. Increasingly it is financed by the same basis trade that drives the ETF machine.

When the basis is healthy, market makers quote wide and deep. When the basis flips, they pull simultaneously. Not because they coordinated. Because they all read the same signal.

This is the oldest failure mode in market structure: correlated liquidity providers collapsing into a single point of failure. I watched a version of it in 2020. I had a Python script running DEX-to-CeFi fee arbitrage — 4,200 trades in three months, about $18,000 captured. Then a Sushiswap fork incident spiked Ethereum gas, and 40% of the gains evaporated in under an hour. The strategy was fine. The assumptions underneath it were not. Gas is a cost, and cost is a liquidity condition.

Same lesson here. The depth chart looks like a cushion. It is a reflection. It reflects the funding conditions of the people who post it. Pull the funding, pull the depth. Smart contracts are brittle. So is the market-maker stack built on top of them.

The settlement clock is a liquidity variable.

Creations settle on a T+1 rhythm. That is not an administrative footnote. It is a clock that governs when the arb can recycle capital.

An AP that creates on Monday does not have that capital back until Tuesday. Over a five-day week, a desk running at full utilization gets roughly four turns. Slow the settlement, and you slow the machine. Speed it up, and the same dollar of capital can create more often — which mechanically amplifies the flow data without any change in real demand.

When you see creation volumes accelerate, ask whether the settlement cycle changed, or the basis widened. They look identical on a chart. They mean opposite things.

The custodian is a single point of failure.

Every one of these products settles into a small number of custodians. The ETF wrapper looks like diversification. The custody layer is concentration.

If you hold three different spot Bitcoin ETFs, you may hold one custody stack. One key ceremony. One operational team. One incident-response playbook. The share prices differ by a few basis points. The risk exposure is nearly identical.

I do not say this to alarm. I say it because concentration is invisible until it isn't. Counterparty risk does not announce itself. It shows up as a frozen withdrawal, a delayed NAV, a paused subscription. By then the position is already stuck.

The weekend is where the tail lives.

If the marginal buyer operates on a 6.5-hour weekday clock, then every hour outside that window is an unhedged hour.

Consider what a leveraged long actually holds over the weekend. The APs cannot create on Saturday. The CME is closed. There is no arbitrage channel connecting spot price to the institutional bid. Price can move 10% on thin weekend books, and no AP can respond until Monday morning.

Friday close to Monday open is not a small effect. It is the single largest gap-risk window in the asset class, and it is structural. It is not a bug that gets patched. It is the shape of the machine.

If you are running leverage into a Friday close, you are not expressing a view on Bitcoin. You are short a calendar option you did not know you sold.

Watch the stablecoin float, not the volume print.

Measures what matters, not what feels good.

Exchange-reported volume is the most gamed number in this industry. Wash trading is cheap and the incentive to print it is permanent. Ignore it.

What I track instead:

  • CME front-month annualized basis
  • Net AP creations and redemptions, in units, not dollars
  • Perpetual funding and the 3-month/1-month basis spread
  • Aggregated 1% depth across the five largest venues
  • Net stablecoin issuance on Ethereum and Tron
  • ETF premium or discount to NAV, and how long it persists

That is six inputs. All observable. None of them require trusting a narrative.

The one that matters most right now is the premium/discount. A persistent premium means the machine is running and the arb is being paid. A persistent discount means redemptions are the path of least resistance — and redemptions hit spot directly in a way creations do not, because creations can be sourced in-kind while redemptions historically had to find cash.

The 24-hour illusion.

Retail traders believe crypto trades continuously. Technically true. Functionally false.

Between 9:30 a.m. and 4:00 p.m. New York, Bitcoin trades in a market wired to global institutional flow. Outside those hours, it trades in a market wired to itself. The difference in liquidity depth between the two regimes is not a detail. It is the dominant variable.

Think of it as a hydraulic system. During the New York window, pressure equalizes across the entire network — spot, futures, ETF, dollars. When the window closes, the institutional valve shuts and the remaining system pressurizes on its own. Thin. Fast. Prone to overshoot.

Any risk model that treats BTC volatility as a single constant is broken. You need at least two regimes: in-window and out-of-window. Most retail backtests use one. That is why they blow up.

In-kind redemption changes the exit.

This is the newest wrinkle and the least understood. In-kind redemptions let an AP take coins out of the trust rather than cash. On the surface that is good for liquidity: the arb can unwind without forcing the issuer to sell spot into the market.

Look closer. It also means the arb can unwind faster, with a smaller visible footprint, before the depth chart registers anything. The signal that used to telegraph itself through the tape — a redemption forcing spot sales — can now happen quietly.

Arbitrage hides in plain sight. It always has. The market's most reliable edge is not a secret indicator. It is the structural gap between how a thing is priced and how it is settled. In-kind redemption widened that gap in the AP's favor and narrowed it for everyone watching the tape.

The consensus reading of this market is that ETFs brought a permanent, price-insensitive bid. The implication: dips get bought mechanically, so buying dips is safe.

I think that is backwards, and the error is subtle.

The Marginal Buyer Is an ETF: Reading Bull Market Microstructure Through Authorized Participant Flow

What ETFs brought is a permanent arbitrage channel. Those are not the same thing. An arbitrage channel closes when the arbitrage closes. A price-insensitive bid does not.

Ask the uncomfortable question: how much of the inflow is the slow dollar, and how much is the arb? Nobody knows with precision, because creation data does not label the source. But you can infer it from behavior. Slow money does not stop creating on a basis compression. Arb money does. Watch the basis. When it compresses, watch whether creations stop. If they do, you have your answer about composition.

There is a second blind spot. Retail assumes the ETF bid is directional. It is not. It is financing. The AP is not long Bitcoin in any meaningful sense. The AP is long carry and hedged flat. When the carry goes to zero, the position is not "held through the drawdown." It is closed.

And the third blind spot is the pension narrative. The claim that sovereign wealth and retirement capital is quietly accumulating gets repeated so often it has stopped being examined. Some of it is true. Check the 13F filings and the mandate language before you accept the rest. A large share of disclosed institutional holders are broker-dealers and market makers with the ability and the mandate to hedge. That is not conviction money. That is plumbing money.

I learned the difference between being right and being paid in 2022. I modeled the Terra death spiral months before it happened — applied math, a $500M outflow breaks the peg, three times leverage on the short. The model was correct. The trade made $45,000. Then the regulatory aftershock froze exchanges and my withdrawal sat for ten days.

Right direction, wrong plumbing. Execution risk ate the edge.

The same distinction applies here. You can be correct that ETF flows drive price and still get run over, because the flows you are tracking are a derivative of a basis you are not tracking. Directional view, operational blindness.

Exit liquidity is a myth. Everyone's exit is the same corridor. In this market, that corridor runs through a 6.5-hour window, a CME hedge, and a dollar leg that someone else can pause.

Here is what I am watching, concretely.

The Marginal Buyer Is an ETF: Reading Bull Market Microstructure Through Authorized Participant Flow

The front-month CME basis, annualized. If it compresses below the level that covers an AP's cost of capital plus operational risk, creations stop. That prints before the price does.

The first net redemption day after a long creation streak. One day is noise. Three days is a regime.

Aggregated 1% depth. If depth thins while price holds, the cushion is already gone and the next move is mechanical.

Friday closes. Any leveraged position carried into a weekend is a bet that nobody needs the arbitrage channel until Monday. Sometimes that bet pays. It is still a bet.

Survival beats speculation. This is a bull market, and bull markets are where structural flaws get papered over with green candles. The plumbing does not care about the candles. When the basis that funds the bid compresses to zero, ask yourself one question: who is left holding the creation basket, and who do they sell it to?

The Marginal Buyer Is an ETF: Reading Bull Market Microstructure Through Authorized Participant Flow