The collapse of FTX
How commingled customer assets, affiliated-party exposure, illiquid collateral, and a withdrawal run became an exchange failure.
Why this event still matters
FTX's collapse was not primarily an order-book failure or a conventional trading loss. US authorities found that customer deposits had been diverted to affiliated Alameda Research, which received special privileges on the platform. Account screens continued to display balances that the exchange could not honor when customers attempted to withdraw them. [1][3][5]
Confidence deteriorated rapidly in early November 2022 as attention focused on Alameda's exposure to FTT and other affiliated, illiquid assets. Falling token values weakened the apparent collateral behind obligations to FTX. A wave of withdrawals then exposed a multibillion-dollar deficit, and FTX and numerous affiliates filed for bankruptcy on 11 November. [2][3][4]
Event reconstruction
Confidence weakens
Questions about Alameda's balance sheet and FTT concentration intensify.
Withdrawals accelerate
Customers seek to remove assets while affiliated-token prices fall.
Withdrawals pause
FTX halts customer withdrawals as the liquidity and solvency crisis becomes visible.
Bankruptcy filing
FTX and numerous affiliated entities enter bankruptcy proceedings.
The risk was outside the visible order book
FTX customers could observe prices, positions, and account balances, but those interfaces did not reveal how customer assets were handled behind the platform. The SEC alleged that customer funds were diverted to affiliated Alameda Research and that Alameda received special treatment, including exemptions from important risk controls. [1][2]
This distinction is fundamental: a market can display deep liquidity and functional trading software while the institution responsible for custody and settlement carries undisclosed balance-sheet risk. [1][2]
Why proof of reserves alone is incomplete
A wallet attestation can show that an exchange controls certain assets at a point in time. It does not by itself reveal all customer liabilities, secured borrowing, affiliated claims, off-balance-sheet commitments, or whether the assets have been pledged elsewhere. Reserves and liabilities must be evaluated together, with governance over how either can change after the snapshot. [1][3]
FTX also demonstrates the limits of trusting a platform's own risk engine as evidence of institutional safety. The CFTC alleged that Alameda had an allow-negative feature and an effectively unlimited credit line. A control is only protective if administrators cannot secretly exempt the party whose failure would endanger the system. [3][4]
The difference between custody and market access
Keeping assets on an exchange can make trading and margin transfers faster, while withdrawing them reduces direct custody exposure but may slow the ability to react. The correct balance depends on strategy, settlement design, withdrawal reliability, and how much capital must remain immediately available. The relevant decision is an explicit exposure budget, not an absolute slogan. [1][2]
Non-custodial systems can reduce one part of this risk when users retain control until a signed action, but they still rely on contracts, oracles, interfaces, sequencers, or execution providers. The asset path should be mapped from wallet authorization through collateral custody and final settlement. Each point where another party can delay or alter the result is a separate dependency. [1][3]
Affiliated collateral created circular exposure
According to the SEC complaint, Alameda held substantial quantities of FTT and other illiquid, affiliated assets while owing large amounts to FTX. A token issued by the same corporate ecosystem cannot be treated like independent collateral when confidence in that ecosystem is the source of stress. [1][2]
When concern about FTT intensified, falling token value weakened the collateral supporting affiliated obligations. Attempts to sell or hedge could further reduce the market value, creating a reflexive balance-sheet problem. [2]
The withdrawal run exposed insolvency
Customer withdrawals accelerated in early November. On 8 November, FTX paused withdrawals while FTT fell sharply. The SEC complaint alleged that billions of dollars in loans to Alameda were effectively unrecoverable, leaving the platform unable to satisfy customer claims. [1][2]
A liquidity problem concerns the timing of otherwise adequate assets. A solvency problem means assets are insufficient. Withdrawals can reveal either, but a rescue based only on short-term funding cannot repair a large asset deficit. [1][2]
Application to non-custodial trading
Non-custodial architecture should be evaluated at each stage. A wallet can retain control before deposit while a trading provider still controls collateral or settlement after assets enter its system. Marketing language is less useful than tracing the exact asset path. [1]
Provider diversification, limited idle balances, tested withdrawals, verifiable account state, and clear segregation rules can reduce exposure. None converts a centralized counterparty into a risk-free venue. [1][2]
What the criminal record established
Initial regulator documents described allegations, an important distinction at the time they were filed. A federal jury later convicted Samuel Bankman-Fried, and the Department of Justice stated at sentencing that he had misappropriated billions of dollars of FTX customer funds while also defrauding investors and Alameda lenders. [1][3][5]
The CFTC described undisclosed code features that permitted Alameda to maintain an effectively unlimited line of credit and avoid normal automated liquidation treatment. The case illustrates why controls that apply to customers provide little protection if an affiliated party can be exempted from them by administrators. [3][4]
What to carry forward
FTX demonstrates that a sophisticated interface and an automated liquidation engine do not prove sound custody, segregation, governance, or solvency. Platform risk has to be assessed separately from market risk. Traders need to know who controls collateral, whether affiliated parties receive exceptions, what can be verified independently, and how much capital remains exposed if withdrawals stop. [1][2][3][4][5]
Customer and affiliated-party exposures were not properly separated
Illiquid affiliated tokens supported circular collateral assumptions
A withdrawal run exposed a solvency deficit rather than only a timing mismatch
A trading interface cannot prove segregation of assets
Self-custody and provider exposure must be evaluated separately
Platform risk controls do not replace governance and verifiable reserves
Sources and primary documents
Claims above link to the numbered records used in this case file.
Expanded case file with a full introduction, deeper analysis, conclusions, and claim-level citations.
Report an issue with this case file