Strange FTX Hack Upon Bankruptcy Finally Attracts US Feds

Someone mysteriously withdrew hundreds of millions of dollars in crypto from FTX wallets as it declared bankruptcy last month

article-image

FTX’s Sam Bankman-Fried | Exclusive art by Axel Rangel modified by Blockworks

share

The US Department of Justice (DOJ) is reportedly probing an apparent hack worth $372 million on crypto exchange FTX as it filed for bankruptcy on Nov 11.

Blockchain analytics unit Elliptic initially relayed that $663 million in various cryptocurrencies belonging to FTX was suspiciously on the move. Transfers worth $180 million turned out to be FTX sending funds into cold storage, while alleged hackers quickly swapped the remaining $477 million into ether and stablecoin DAI.

FTX CEO John Jay Ray III confirmed the hack the following day, and said the company was in contact with law enforcement regarding the matter. The value of crypto lost in the incident has since dropped to $372 million, per Bloomberg, which cites bankruptcy filings.

This latest probe is reportedly separate from existing fraud cases against former FTX CEO Sam Bankman-Fried. The DOJ investigation could send the hacker to prison for a maximum of 10 years if found guilty of as-yet hypothetical charges related to computer fraud.

Kraken’s chief security officer initially said the exchange was aware of the identity of the assailant, however later appeared to walk back those claims.

Bankman-Fried himself has also suggested in interviews that the hacker could be someone from within FTX, or someone who managed to install malware onto a former employee’s computer.

“I’ve narrowed it down to like eight people. I don’t know which one it was,” Bankman-Fried told YouTuber Tiffany Wong.

The disgraced entrepreneur, who is currently out on bail in California, was in charge of FTX when it reportedly funneled $10 billion in customer funds to affiliated trading unit Alameda Research over the years. Lawyers estimate FTX owes funds to up to one million users, with the largest 50 creditors out of pocket by some $3.1 billion.

Bankman-Fried now faces an eight-count federal indictment including wire and securities fraud charges. “This is one of the biggest financial frauds in American history,” US Attorney Damian Williams has said. 

Former FTX and Alameda executives Gary Wang and Caroline Ellison have both pleaded guilty to federal criminal charges, and are cooperating with authorities with further investigations.


Get the news in your inbox. Explore Blockworks newsletters:

Tags

Decoding crypto and the markets. Daily, with Byron Gilliam.

Upcoming Events

Javits Center North | 445 11th Ave

Tues - Thurs, March 24 - 26, 2026

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

recent research

Research Report Templates (8).png

Research

Kinetiq has established itself as Hyperliquid's dominant liquid staking protocol, holding 82.5% of LST market share with $610M in TVL. The protocol is now expanding beyond its kHYPE staking core into higher take-rate verticals: iHYPE for institutional custody rails, Launch for HIP-3 capital formation, and Markets for builder-deployed perpetuals. We view Markets, launching Jan. 12, as the highest-potential product line given its mechanically scalable, activity-linked unit economics. Near-term revenue remains anchored by kHYPE's KIP-2 fee schedule (~$1.6M annualized), while Markets provides embedded optionality if HIP-3 economics normalize post-Growth Mode. KNTQ's setup is relatively clean: zero insider unlocks until November 2026, 6.2% buyback yield from staking revenue, and cleared airdrop overhang. Risks center on unproven Markets execution, declining kHYPE TVL despite ongoing incentives, and competition from Hyperliquid's native initiatives.

article-image

BTC finished the week up 1.6%, while L2s, RWAs and the treasury trade continued to grind lower

article-image

DTCC moves DTC-custodied Treasuries onchain via Canton, while Lighter’s LIT launches trading at a fees multiple in Hyperliquid territory

article-image

In the 90s, rapt audiences worldwide watched a coffee pot — will that fascination ever turn to crypto?

article-image

Some systems improve by failing — and crypto has no choice

article-image

Yield Basis introduces an IL-free AMM design that already dominates BTC DEX liquidity

article-image

Maybe tokenholders don’t need the rights that corporate shareholders have come to expect

Newsletter

The Breakdown

Decoding crypto and the markets. Daily, with Byron Gilliam.

Blockworks Research

Unlock crypto's most powerful research platform.

Our research packs a punch and gives you actionable takeaways for each topic.

SubscribeGet in touch

Blockworks Inc.

133 W 19th St., New York, NY 10011

Blockworks Network

NewsPodcastsNewslettersEventsRoundtablesAnalytics