Strange FTX Hack Upon Bankruptcy Finally Attracts US Feds

Someone mysteriously withdrew hundreds of millions of dollars in crypto from FTX wallets as it declared bankruptcy last month

article-image

FTX’s Sam Bankman-Fried | Exclusive art by Axel Rangel modified by Blockworks

share

The US Department of Justice (DOJ) is reportedly probing an apparent hack worth $372 million on crypto exchange FTX as it filed for bankruptcy on Nov 11.

Blockchain analytics unit Elliptic initially relayed that $663 million in various cryptocurrencies belonging to FTX was suspiciously on the move. Transfers worth $180 million turned out to be FTX sending funds into cold storage, while alleged hackers quickly swapped the remaining $477 million into ether and stablecoin DAI.

FTX CEO John Jay Ray III confirmed the hack the following day, and said the company was in contact with law enforcement regarding the matter. The value of crypto lost in the incident has since dropped to $372 million, per Bloomberg, which cites bankruptcy filings.

This latest probe is reportedly separate from existing fraud cases against former FTX CEO Sam Bankman-Fried. The DOJ investigation could send the hacker to prison for a maximum of 10 years if found guilty of as-yet hypothetical charges related to computer fraud.

Kraken’s chief security officer initially said the exchange was aware of the identity of the assailant, however later appeared to walk back those claims.

Bankman-Fried himself has also suggested in interviews that the hacker could be someone from within FTX, or someone who managed to install malware onto a former employee’s computer.

“I’ve narrowed it down to like eight people. I don’t know which one it was,” Bankman-Fried told YouTuber Tiffany Wong.

The disgraced entrepreneur, who is currently out on bail in California, was in charge of FTX when it reportedly funneled $10 billion in customer funds to affiliated trading unit Alameda Research over the years. Lawyers estimate FTX owes funds to up to one million users, with the largest 50 creditors out of pocket by some $3.1 billion.

Bankman-Fried now faces an eight-count federal indictment including wire and securities fraud charges. “This is one of the biggest financial frauds in American history,” US Attorney Damian Williams has said. 

Former FTX and Alameda executives Gary Wang and Caroline Ellison have both pleaded guilty to federal criminal charges, and are cooperating with authorities with further investigations.


Get the news in your inbox. Explore Blockworks newsletters:

Tags

Upcoming Events

Old Billingsgate

Mon - Wed, October 13 - 15, 2025

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

Industry City | Brooklyn, NY

TUES - THURS, JUNE 24 - 26, 2025

Permissionless IV serves as the definitive gathering for crypto’s technical founders, developers, and builders to come together and create the future.If you’re ready to shape the future of crypto, Permissionless IV is where it happens.

Brooklyn, NY

SUN - MON, JUN. 22 - 23, 2025

Blockworks and Cracked Labs are teaming up for the third installment of the Permissionless Hackathon, happening June 22–23, 2025 in Brooklyn, NY. This is a 36-hour IRL builder sprint where developers, designers, and creatives ship real projects solving real problems across […]

recent research

Research Report Templates.png

Research

Despite ending its points program, Hyperliquid has maintained a dominant market position with 77% of perpetuals DEX volumes, though overall volume has decreased from early 2025. It is the only DEX that has been able to compete with CEX volumes. Hyperliquid's success stems primarily from rapid, relevant token listings and superior UX for users and market makers, particularly its API - which is how market makers interact with the protocol. The controversial oracle price override during the JELLY incident exposed risks in the Hyperliquid Liquidity Pool (HLP), though the team has since implemented risk management adjustments. The HyperEVM is currently underoptimized and lacks necessary precompiles, but represents an important strategic expansion to enable asset issuance and DeFi composability.

article-image

The Balkan micronation went from Bitcoin economy to blockchain buzzwords in 10 years

article-image

While BTC’s year-to-date price drop resembles that of the S&P 500, some crypto stocks have fared way worse

article-image

The first batch of earnings reports from big banks shows lending is on the rise, a sign businesses and consumers are feeling better about the economy

article-image

Movement is “conducting an internal investigation stemming from recent events,” according to a company Slack message

article-image

Four firms prepare their launches on the Toronto Stock Exchange while the SEC mulls proposals

article-image

Publicly-listed Janover announced last week that a group of ex-Kraken employees had acquired a majority stake in the company