FTX: The Biggest Crypto Attack in History

TL;DR: FTX wasn’t hacked. It was looted by insiders. Sam Bankman-Fried diverted $8B in customer deposits to his hedge fund Alameda Research. When the scheme collapsed, $450M was stolen by insiders using compromised accounts. This is why self-custody matters.

November 2022. FTX went from $32B valuation to bankruptcy in 5 days. This wasn’t a technical hack. It was fraud at scale.

The Fraud (Not a Security Exploit)

FTX’s structure:

• FTX (exchange): Customer-facing platform where traders held deposits
• Alameda Research (hedge fund): Sam’s personal trading firm

Sam secretly transferred $8B in customer funds from FTX to Alameda. No loans. No collateral. Pure misappropriation.

Alameda used this capital for:

• Risky bets that failed
• Venture capital investments
• Buying a penthouse in the Bahamas
• Political donations ($40M to both parties)

The Mechanism (How They Hid It)

FTX’s accounting system had a “hidden” feature: Alameda Research got unlimited negative balance. They could go $8B in debt without triggering risk checks that would trigger for other users.

Sam’s chief technology officer built this. It was intentional.

When Binance CEO announced he’d sell FTX’s FTT token in November 2022, the house of cards collapsed. Customers started withdrawing. FTX had no capital (it was all in Alameda’s failed trades). Bankruptcy.

The Theft ($450M)

As FTX crumbled, insiders with access to corporate accounts siphoned $450M. Transferring it to Kraken and other exchanges.

They weren’t sophisticated. They left evidence everywhere. Blockchain transactions are immutable — authorities tracked every move.

Why This Matters for DeFi

FTX was a centralized exchange. Your funds weren’t in smart contracts. They were in a database controlled by people.

Those people committed fraud. And customers had no recourse until the bankruptcy court.

This is why DeFi exists. Not because it’s immune to hacks (it’s not), but because code replacing trust is more reliable than trusting people with billions.

The Security Lesson

You can’t audit your way out of insider fraud. FTX had investors, board members, external advisors. Nobody caught this until it was too late.

The only protection is:

• Self-custody: Hold your own private keys. No exchange can steal what you control.
• Hardware wallets: Ledger, Trezor. $100 investment for peace of mind.
• Don’t trust exchanges with significant holdings. Use them for trading, not storing.

I said it during my FTX coverage: “Preguntaros siempre si tenéis la clave privada, y si no la sabéis, es que no la tenéis.” Ask yourself: do you have the private key? If you don’t know, you don’t have it.

The Bottom Line

FTX lost $8B+ in customer funds. Not to hackers. To the company’s founders.

Sam Bankman-Fried was MIT educated, well-connected, politically active. None of that stopped him.

Self-custody isn’t paranoia. It’s math. The only way to guarantee your crypto is to control the keys.

Stay safe out there.

Learn more about DeFi security and self-custody at blockchainwhitehackers.com