Customer Asset Transfer Authority Failure Through Unsegregated Funds and Exempted Internal Accounts at FTX

FTX operated as one of the world's largest cryptocurrency exchanges, serving over one million users across more than a hundred jurisdictions. Customers deposited funds — both traditional currency and cryptocurrency — with the understanding that their assets would be held on their behalf and available for withdrawal. FTX's terms of service stated that customer assets belonged to the customers and would not be used for the exchange's own purposes. Bankman-Fried publicly stated that customer funds were not lent out or used for proprietary trading.

FTX held regulatory licenses in the Bahamas and had engaged external auditors — Prager Metis and Armanino LLP — for financial audits. The exchange maintained a compliance department and internal systems for monitoring transactions. However, FTX's internal accounting systems included an account designated for Alameda Research that was exempted from the exchange's auto-liquidation engine and other compliance monitoring systems. This exempted account allowed Alameda to carry a negative balance on FTX — meaning Alameda could withdraw more than it deposited — without triggering the alerts and margin calls that would apply to any other account on the platform. The exemption was coded into the system by the exchange's own engineers.

On November 2, 2022, CoinDesk published a report revealing that Alameda Research's balance sheet was heavily concentrated in FTT — a token created by FTX — raising questions about the financial relationship between the exchange and the trading firm. Binance CEO Changpeng Zhao publicly announced he would liquidate his firm's FTT holdings, triggering a collapse in FTT's price. FTX customers initiated mass withdrawals. Within days, FTX could not meet the withdrawal requests because the customer funds were not there — approximately $8 billion had been transferred to Alameda Research and used for trading, venture investments, real estate purchases, political donations, and personal expenditures.

FTX filed for bankruptcy on November 11, 2022. The new CEO — John Jay Ray III, who had overseen Enron's liquidation — stated in court filings that he had never seen such a complete failure of corporate controls and such a complete absence of trustworthy financial information. The bankruptcy proceedings revealed that FTX had no accurate accounting of customer balances, that corporate funds were used to purchase personal items including real estate for employees, and that the exchange's financial records were maintained in a manner the bankruptcy team described as fundamentally inadequate.

The exchange's assertion that customer funds were segregated was a statement in its terms of service and public communications. No independent custodian held the funds in accounts legally separated from FTX's and Alameda's operational assets. No external verification process confirmed on an ongoing basis that the funds reported in customer accounts were actually present. The auditors engaged by FTX issued audit opinions, but the bankruptcy proceedings raised serious questions about the quality and scope of those audits — Prager Metis was subsequently charged by the SEC with improper audit practices.

The exempted account was the mechanism by which the segregation was violated. FTX's compliance systems — the automated monitoring, the margin engine, the liquidation triggers — applied to every account on the platform except one. Alameda's account was exempt from the controls that were supposed to prevent any single entity from withdrawing more than it deposited. Because the exchange built and controlled its own compliance infrastructure, it could create an exception within that infrastructure. The compliance system was not independent of the entity it was supposed to constrain. The controls existed. The exemption to the controls existed inside the same system. The segregation promise existed as a policy statement. The backdoor through the policy existed as a line of code.

Bankman-Fried was convicted in November 2023 of fraud and conspiracy charges and sentenced to twenty-five years in federal prison. Several co-conspirators pleaded guilty and cooperated with prosecutors. The bankruptcy estate recovered substantial assets, enabling partial distributions to creditors. The SEC, CFTC, and DOJ pursued enforcement actions addressing both FTX's operations and the auditing firms. The collapse accelerated regulatory efforts to establish comprehensive frameworks for cryptocurrency exchange oversight, including proposals for proof-of-reserves requirements, mandatory asset segregation, and independent custodial verification — the controls whose absence the FTX collapse demonstrated.