FTX Didn't Lose the Customer Money by Accident. The Code Was Written to Take It.

Somewhere in FTX's matching engine — the code that decided, in milliseconds, who got liquidated when a trade went bad — there was a setting. For every customer on earth, it was off: trade too big, lose too much, and the machine sold you out automatically to protect the exchange. For one account, it was on. That account could run negative. It could keep borrowing past zero, past every limit, with no margin call and no liquidation, drawing on customer money it did not own.² The account belonged to Alameda Research, the trading firm Sam Bankman-Fried also owned. The shortfall that followed was over $8 billion.² It did not appear by accident. Someone wrote the flag.

The official story is that SBF was a brilliant, sleep-deprived math nerd who got in over his head — chaotic, not criminal. It is a tidy story, and a jury rejected it in under five hours.⁴ The real story is colder: the conflict of interest at the center of FTX was not a lapse in oversight. It was the architecture. SBF didn't fail to separate the exchange from the trading firm. He built them as one machine, with himself as the only switch.

Three jobs, one person, no firewall

A normal exchange is a referee. It holds your money, matches your trades, and stays out of the game. The entire point is that it has no position in the market it polices. SBF collapsed that separation deliberately. He controlled FTX, the exchange where customers parked their cash. He controlled Alameda, the largest trader on that exchange. And he signed the core agreements and bank accounts for both, while the two firms shared employees, office space, systems, and accounts, moving large sums between them — often with no documentation and no effective tracking at all.⁶ The referee and the biggest player on the field were the same man, settling his own fouls. When you own both sides, the only thing standing between customer deposits and your trading desk is your own restraint. That is not a control. That is a temptation with a login.

Follow the money and the design becomes unmistakable. Customers thought they were depositing into FTX. They were depositing into bank accounts owned by Alameda — one of them held under a shell company blandly named North Dimension. Alameda commingled the funds and spent them: on trading, and on roughly $5 billion of SBF's outside venture bets in tech companies. The hole this left was recorded internally under the address 'fiat@ftx.com,' and dressed up for outside lenders as a generic 'loan' on Alameda's balance sheet.⁸ A multibillion-dollar misappropriation of customer cash, filed under an email alias. The disguise tells you they knew exactly what it would look like named honestly.

The flag that turned a conflict into an inevitability

Owning both sides is dangerous. Coding the danger into the product is something else. The CFTC's complaint describes an 'allow negative' flag and an effectively limitless line of credit, built into FTX's software, that let Alameda withdraw billions in customer assets without the automatic liquidation that disciplined everyone else.² This is the hinge of the whole story. A human conflict of interest can be checked — by a board, an auditor, a colleague with the nerve to say no. A coded one cannot. Once the exemption lives in the matching engine, it executes silently, instantly, every microsecond, with nobody in the loop to object. The temptation didn't depend on SBF deciding to give in each morning. It ran on its own. The customers' money flowed toward Alameda's losses the way water flows downhill: because the channel was dug that way.

The end was almost anticlimactic, because the structure had already decided it. In November 2022, CoinDesk reported that 40% of Alameda's $14.6 billion balance sheet sat in FTT — the token FTX itself had minted.⁷ Alameda's 'assets' were largely a coin its sibling company conjured, propping up loans against customer cash. The moment the market saw that the collateral and the obligation were the same family of paper, the run began. There was nothing real underneath to stop it, because the money that was supposed to be underneath had been spent.

Wasn't it just chaos and incompetence?

The fair objection — and SBF's own defense — is that this looks less like a scheme than a mess: a 30-year-old with no controls, no CFO, no adults, drowning in complexity he never managed. John Ray's own words seem to help that case, describing control concentrated in 'a very small group of inexperienced, unsophisticated and potentially compromised individuals.'³ Incompetence is real here. But incompetence and fraud are not alternatives, and the architecture refuses the innocent reading. You can stumble into a missing audit. You do not stumble into a code path that exempts your own trading firm from liquidation, route customer deposits into a shell company, and file the resulting hole under an email alias.²⁸ Those are choices that required building. The jury saw the difference, convicting on seven counts of fraud and conspiracy; the judge handed down 25 years and $11 billion in forfeiture.⁴ The 'in over his head' story explains the collapse's timing. It cannot explain the plumbing.

FTX failed where it was designed to fail. The genius of the structure — and it was a kind of dark genius — was to make the theft indistinguishable from the operation: customer deposits and Alameda's trading capital flowing through the same accounts, governed by the same man, exempted by the same code. There was no moment of crime to point to, only a machine doing exactly what it was built to do. SBF's defense asked the world to believe he never understood his own creation. The simpler reading is that he understood it perfectly, and built the one place in the system where every safeguard could be switched off — and put himself in it.