Official MASTR logo MASTR
Menu
Contents
← Wiki home

Crypto history

FTX privileged Alameda account

How exceptional credit and risk treatment for an affiliated account undermined the protections advertised to ordinary FTX customers.

Guide · Sources below

Sam Bankman-Fried, as reproduced in MASTR’s FTX source post
Image source: FTX: insolvency in 2022 versus later recoveries · Open image ↗
In this article
  1. Risk controls can exist and still exclude the account that matters
  2. Credit, collateral and custody are separate questions
  3. The criminal outcome is a different record from the civil complaint
  4. What an examination of account privileges needs
  5. Connect the mechanism to the wider collapse
  6. Sources and further reading

Risk controls can exist and still exclude the account that matters

FTX promoted automated risk controls as a protection for customer assets. The SEC’s complaint announced on 13 December 2022 alleged that Alameda Research received exceptional treatment: access to a near-unlimited credit facility funded by customers and exemptions from important risk controls. It also identified exposure to illiquid, overvalued assets associated with FTX. The issue was not simply whether the exchange had liquidation software. It was which accounts that software constrained. SEC announcement of the FTX investor-fraud complaint.

A control demonstrated on an ordinary customer account does not establish how an affiliated trading account is treated. The customer may face margin limits and forced liquidation while a privileged account can continue accumulating obligations. A reviewer who tests only the normal interface can therefore confirm that a feature works and still miss the exception that defeats its purpose. The relevant object of review is the complete permission structure, including overrides.

Examine the exception
  1. Account scopeWhich accounts do the rules cover?
  2. Credit limitsWho may exceed the ordinary limits?
  3. Asset backingWhose assets fund the obligations?
  4. Independent oversightWho authorises and reviews overrides?

Credit, collateral and custody are separate questions

A credit limit determines how far an account may borrow. Collateral rules determine what supports that borrowing and how the collateral is valued. Custody concerns whose assets are available to fund the resulting obligations. These questions interact, but answering one does not answer the others. An affiliated borrower can appear well collateralised at a displayed price while the assets offered as backing cannot be sold at that price in sufficient size.

Consider a hypothetical venue that accepts a token issued by its own corporate group as collateral for a related trading firm. A small trade may establish a quoted price, but it does not establish the proceeds from selling a large holding under stress. If confidence in the venue falls, the affiliated token and the borrower can weaken together. This is a common-risk problem: the supposed protection can deteriorate at the same time as the exposure it is meant to cover.

The criminal outcome is a different record from the civil complaint

Sam Bankman-Fried was sentenced to 25 years in prison on 28 March 2024 after being convicted of fraud and conspiracy offences. The Justice Department described the misuse of billions in customer funds, alongside fraud against lenders and investors. The criminal outcome establishes more than the existence of an accusation, but it should still be cited for the findings it actually supports. DOJ sentencing announcement.

Keeping the records separate makes the account more precise. The SEC complaint explains allegations about representations to equity investors and Alameda’s treatment. The criminal sentencing record establishes the conviction and sentence in Bankman-Fried’s case. Neither should be silently substituted for a technical audit of every line of FTX code or for a legal outcome concerning a different employee. A named source and a date let the reader distinguish these uses.

What an examination of account privileges needs

A serious review would ask which accounts can exceed ordinary limits, who can grant that status, whether changes are logged and who reviews those logs. It would compare configured rules with the rules actually applied to affiliated accounts. It would also reconcile customer liabilities with the assets available to meet them, rather than infer solvency from a selected wallet balance. Permission records, account ledgers and custody records answer different parts of the problem.

Exceptions are not automatically improper: a system can have legitimate operational accounts or contractually defined credit arrangements. The critical questions are whether the exception is authorised, disclosed where required, backed by appropriate resources and constrained by independent oversight. The FTX example is useful because it shows why a convincing description of normal controls cannot substitute for investigating who can bypass them.

The FTX and Alameda history places the account privileges within the broader failure. The bankruptcy-claim valuation article addresses a different question: how claims and later recoveries are measured. Reading the two separately prevents a repayment headline from being mistaken for evidence that the original use of customer money was acceptable.

Sources and further reading

Related reading

foundations

EVM account state

Ethereum tracks balances, nonces, code and contract storage.

MASTR

Support independent research

The investigations, original evidence and guides here are free to read. Voluntary donations help fund the research and keep MASTR’s tools available.

Open wallet