FTX and Alameda: Hidden Customer-Fund Access and the CFTC’s Corporate Remedy

The FTX Alameda customer funds fraud case produced a civil order requiring FTX Trading and Alameda Research to pay $8.7 billion in restitution and $4 billion in disgorgement over a scheme that diverted customer assets to Alameda. The order’s agreed findings describe customers seeing deposits credited to their exchange accounts while their money sat in Alameda’s bank accounts, and a hidden software privilege let Alameda withdraw assets it did not have. If you worked on the code, the customer ledger or the movement of money, those are different views of the same fraud.

FTX operated a centralized digital-asset exchange, primarily for derivatives. Alameda was a trading and investment firm that supplied market making and liquidity to the platform. The Commodity Futures Trading Commission’s corporate enforcement action connects what FTX promised customers to the access it gave its trading affiliate, then sets repayment terms that work through the bankruptcy process.

How FTX Customer Deposits Reached Alameda

The court’s consent order describes FTX launching in 2019 without bank accounts to accept and hold customer deposits. Customers wired ordinary currency to Alameda-controlled accounts instead, including accounts in the name of North Dimension, an Alameda subsidiary. FTX personnel generally credited the corresponding amount to each customer’s internal exchange account, even when the money remained in Alameda’s bank account.

That distinction matters to anyone who has worked on a deposit reconciliation. The balance visible to the customer showed what FTX had credited, while the bank record showed which company held the cash. Opening FTX’s own customer bank accounts in 2020 did not end the route through Alameda; some customer deposits continued to arrive there afterward.

The platform depended on Alameda for more than a place to receive deposits. FTX matched buy and sell orders through an electronic order book, ran a peer-to-peer margin lending program, and offered an over-the-counter portal through which customers could trade directly with Alameda. Alameda helped maintain liquidity and asset balances and participated in FTX’s backstop liquidity program. The companies shared employees, offices, systems, accounts and communications, and moved assets between themselves without effective documentation or tracking.

Digital assets had their own route out. Alameda could use its FTX account to withdraw customer assets from the exchange’s online wallets, and customers were not told about that access. The court found that Alameda used both the bank deposits and the digital assets for its trading, investment and borrowing activities from FTX’s launch.

FTX and Alameda’s Hidden Withdrawal Access

The CFTC restitution order identifies FTX and Alameda’s hidden withdrawal access as a privilege built into the exchange’s code. Alameda’s account combined a $65 billion borrowing limit with an Allow Negative flag that let it withdraw digital assets while its balance was below zero and exempted it from automatic liquidation.

FTX had promoted its automated liquidation system as a feature that limited risk. Yet the affiliate helping supply the exchange’s liquidity could bypass it. We call that protection with a hole cut for the house’s own trader.

The customer contract told a different story. FTX’s Terms of Service said customers retained ownership and control of their digital assets, and expressly stated:

FTX also publicly represented that it segregated customer assets and regularly reconciled customer balances against the assets it held. The court found that the companies instead commingled those assets and used them as Alameda’s own trading and investment capital. The promise belonged to the customer-facing business. The exception belonged to its affiliate.

The Liability That Disappeared From View

FTX’s internal fiat@ftx account represented the Alameda bank accounts holding customer deposits. It reflected as much as $11 billion in assets at certain times before the collapse. A customer credit, a bank deposit and that internal account entry described different parts of the money’s path.

Alameda’s investment portfolio made the withdrawal privilege especially consequential. It held large amounts of FTT, FTX’s exchange token, which customers could use for trading-fee discounts. Alameda valued its holdings at the quoted market price without an appropriate discount for the price collapse that selling such a large position would cause. It used FTT and other illiquid tokens as collateral for loans that at times totaled more than $10 billion in notional value.

When lenders called loans and demanded more collateral during May and June 2022, Alameda lacked enough liquid assets to meet those obligations. The court found that Alameda increased its use of customer assets to repay outside debts. By about midyear, its dollar liability to FTX had reached approximately $8 billion.

At the founder’s direction, FTX executives moved that liability to another customer account. They reassigned an Alameda subaccount so that its connection to Alameda was no longer readily identifiable, with system notes describing it as ftx-fiat-old. The negative balance ceased to be apparent as Alameda’s liability on FTX’s ledgers, while the account retained the withdrawal and liquidation exceptions. Moving the label did nothing to replace the money.

By November 7, 2022, FTX lacked sufficient assets to meet incoming withdrawal requests. Key personnel acknowledged internally that customer money was unavailable because it had been misappropriated, even as public assurances portrayed the problem as a temporary shortage of liquidity. For an employee who saw both accounts of the shortfall, the difference was what management knew and what it told customers.

Why a Wallet Transfer Is Only Part of the Story

A public transaction hash can show that assets moved without showing whose customer balance was credited inside an exchange or who authorized the movement. Hosted platforms can also transfer balances on internal ledgers without recording each transfer individually on a blockchain. That is why the bank account, internal customer ledger and withdrawal permissions matter together.

FTX makes the distinction concrete. A treasury record can show a customer deposit reaching an Alameda account. An internal ledger can show the customer receiving credit. The account settings can explain how Alameda drew on assets beyond its balance. The later reassignment of the liability adds another question: who changed the entry, and what did that change conceal?

For an engineering employee, the meaningful connection may be between a code change, the account it favored and the person who directed it. For someone in treasury, accounting or risk, it may be between a related-party transfer, a balance that no longer appears under the same account, and an internal explanation of the shortfall. We examine those connections with the insider who understands what the systems actually did.

The Founder Directed the Code and the Financial Story

In its summary of the indictment, trial evidence and public filings in the founder’s criminal case, the Justice Department describes him directing others to alter FTX’s code so Alameda could withdraw effectively unlimited cryptocurrency. It also describes false statements to financial institutions to conceal the misuse of customer dollar deposits. The same account says customer funds went into investments, political contributions and real estate, as well as repayment of Alameda’s loans.

The deception extended to the people financing the businesses. The Justice Department’s summary describes the founder directing the creation of false financial statements for Alameda’s lenders, inflating FTX’s revenue and profit figures for investors, and backdating contracts and other documents to conceal the conduct. Someone who prepared a lender statement or revised an investor presentation could therefore see a different part of the scheme from the person maintaining the withdrawal code.

A Separate Executive’s Money-Transmission Plea

In a separate criminal case, a former FTX executive pleaded guilty to conspiring to operate an unlicensed money transmitting business. He also admitted conspiring to make unlawful political contributions and defraud the Federal Election Commission. For a treasury or payments insider, the money-transmission plea puts the focus on which business accepted and moved customer value and who controlled that activity.

What Customer-Asset Insiders Can Recognize

The gap between a safety promise and the use of customer assets appears beyond FTX. In the Celsius founder’s criminal case, his guilty plea covered commodities fraud through misrepresentations about customer assets and securities fraud through manipulation of the CEL token. That case also described false claims about safety, profitability and risk. The common question for an insider is how the business used the assets behind the reassurance it sold customers.

At FTX, the answer runs through deposit instructions, account permissions, internal balances and the financial information sent outside the company. An employee may know why an exception existed or why a liability changed accounts even when no public transaction reveals the decision. Our work starts with that knowledge and connects it to what the company promised and where the customer money went.

The CFTC Corporate Remedy and Bankruptcy Payments

The Commodity Futures Trading Commission’s restitution order made FTX Trading and Alameda jointly responsible for the corporate obligations stated above. Restitution addressed losses caused by the violations, while disgorgement addressed gains received from them.

The repayment terms connect directly to the bankruptcy plan. Distributions satisfying FTX.com and FTX.US customer claims and Alameda lender claims receive dollar-for-dollar credit against restitution. Distributions toward the commission’s allowed disgorgement claim receive credit against that obligation. The order treats both obligations as satisfied if the specified plan is fully carried out and administered. The corporate remedy follows the money back toward customers and creditors, just as the fraud account follows it out through Alameda.

What Can a Crypto Fraud Whistleblower Receive?

The Commodity Futures Trading Commission’s whistleblower program can pay between 10 and 30 percent of the monetary sanctions collected. If you know how an exchange’s public promises differed from its internal controls, we can assess that information with you and bring in crypto fraud whistleblower lawyers for the case.

You Know What the Account Could Actually Do

If you know how customer money crossed from an exchange into an affiliate’s accounts, speak with our whistleblower experts about the access and transfers you saw. We build the case with you, bring in crypto fraud whistleblower lawyers who understand exchange custody and financial records, and stay beside you as we pursue your whistleblower case.