FTX Investigating Possible Hack Hours After Bankruptcy Filing

https://www.nytimes.com/2022/11/12/business/ftx-cryptocurrency-hack.html

A day after it filed for bankruptcy, the collapsed cryptocurrency exchange FTX said on Saturday that it was investigating “unauthorized transactions” flowing from its accounts, as crypto researchers documented suspicious transfers of $515 million that may have been the result of a hack or theft.

John J. Ray III, the newly instated chief executive of FTX, said in a statement that “unauthorized access to certain assets has occurred,” and that the company was in touch with law-enforcement officials and regulators. As part of the bankruptcy process, the company has been moving its remaining crypto funds to a more secure form of storage.

The suspicious movement of funds marked a new twist in a dramatic series of events that kicked off earlier in the week, when the exchange faced a run on deposits and was unable to meet demand. On Friday, the company filed for bankruptcy, and Sam Bankman-Fried, FTX’s founder and chief executive, announced his resignation, with Mr. Ray, a corporate turnaround specialist, replacing him.

The implosion of Mr. Bankman-Fried’s cryptocurrency exchange has already cost customers billions of dollars in lost crypto deposits, setting off law-enforcement investigations that could lead to criminal charges.

But the full impact of FTX’s dramatic collapse is only beginning to take shape. In his relatively short time as a multibillionaire, Mr. Bankman-Fried built up an astonishingly broad business empire, with investments in dozens of smaller crypto firms and partnerships with businesses as varied as Anthony Scaramucci’s investment firm SkyBridge Capital and the N.B.A.’s Miami Heat. He also became an influential Democratic Party donor, promising to spend as much as $1 billion during the 2024 election cycle.

Now, all those ventures have been thrust into chaos.

BlockFi, a crypto lending platform that Mr. Bankman-Fried had helped finance, said this past week that it was suspending operations as a result of the collapse. The price of Solana, a cryptocurrency that Mr. Bankman-Fried promoted heavily, has crashed. And the team behind the FTX Future Fund, a charitable operation bankrolled by Mr. Bankman-Fried, announced their resignations.

FTX paid high yields to companies that stored assets on its platform, which led many crypto start-ups to treat it as a bank. Genesis, a trading platform, said this past week that it had $175 million in funds locked up with FTX. The company moved to secure a $140 million cash infusion from its parent company, Digital Currency Group, a spokeswoman for the firm said.

Pantera Capital, a crypto hedge fund, told investors in a letter on Friday that under 3 percent of its $4.5 billion in assets had been in FTX stock and FTT, a token created by the company, before the collapse. As FTX was seeking a bailout on Tuesday, the firm moved to sell the majority of its FTT tokens and told its portfolio companies to do the same, said Paul Veradittakit, an investor at the firm.

“The safest thing right now is to hold cash or self-custody,” Mr. Veradittakit said. Self-custody means holding one’s own assets, rather than parking them with a service provider like an exchange.

News of the possible theft started spreading on Twitter late Friday night, as crypto enthusiasts examined public transaction records documenting the movement of cryptocurrencies. A report by the crypto research firm Elliptic pegged the amount that may have been stolen or hacked at $515 million.

The exact nature of the transfers remained unclear. It could have been the result of a hacker gaining access to the exchange’s system, or an insider with special access seeking to abscond with funds. Asked about the transfers, Mr. Bankman-Fried said in a text to The New York Times, “We’re sorting through it with the bankruptcy” team.

In its post, Elliptic said the cryptocurrencies that were suspiciously transferred from FTX were rapidly moved through decentralized exchanges — crypto marketplaces that operate based on code and have fewer guardrails than centralized exchanges like Coinbase. The researchers described the transfers as “a common technique used by hackers in order to prevent their haul being seized.”

When cryptocurrency is stolen, it’s often difficult for the thieves to convert it into usable cash. Because crypto transaction records are public, experts can track the movement of the funds, gathering clues about the identities of the thieves.

But a major theft would make it even more difficult for FTX to refund customers and other creditors who have already lost billions of dollars in the firm’s collapse.

After failing to meet a surge of withdrawal requests this past week, FTX is estimated to owe $8 billion, according to people familiar with the matter. Amateur investors stored their crypto savings on FTX, which was widely regarded as a safe and easy-to-use platform, even in the wild world of crypto. How much those customers are repaid will depend on the bankruptcy process. In an initial filing on Friday, FTX said it had more than 100,000 creditors.

When a traditional bank teeters on collapse, there’s often an expectation that the government could step in and save it. That is not the case with crypto, which has experienced a series of bank runs this year that have left customers scrambling to cash out before their investments vaporized.

“You as a customer are like, ‘Oh shoot, I don’t want to be the last one where there’s no funds left to actually give me my money back, so I’m going to try to withdraw,’” Mr. Veradittakit of Pantera Capital said.

As speculation about the suspicious FTX fund transfers spread on Twitter, crypto industry officials appeared to be piecing together the situation in real time. After reports circulated that someone involved in moving funds had an account on Kraken, another crypto exchange, Kraken’s chief security officer, Nick Percoco, tweeted, “We know the identity of the user.”

Ryne Miller, the general counsel of the U.S. arm of FTX, quickly responded. “Interested in anything you are open to share,” he said. “Could you reach out to me?” A Kraken spokesman did not immediately respond to a request for comment.

Mr. Bankman-Fried’s collapse was a stunning fall from grace for an executive who had been compared to titans of finance like John Pierpont Morgan and Warren Buffett. But as the bankruptcy has thrown his empire into turmoil, a different picture is emerging.

Investigators at the S.E.C. and the Justice Department are examining whether Mr. Bankman-Fried improperly used customer funds to prop up Alameda Research, a trading firm that he also owns. FTX lent as much as $10 billion in customer funds to Alameda, according to a person familiar with the finances.

Months before the bankruptcy, cracks were emerging. Mr. Bankman-Fried reacted defensively when offered feedback that he was overextending himself and needed to hire more staff, according to someone close to him. He also delayed bonus payments to employees that were supposed to go out in the middle of the year, making the payments months late, the person said.

And Mr. Bankman-Fried reacted with irritation when an employee asked to receive more of the bonus in cash rather than equity, the person said, saying that staff who didn’t want a stake in the company should leave.

FTX did not respond to a request for comment.