FTX US General Counsel says the exchange has moved remaining funds to cold wallets to “mitigate damage” following a series of “unauthorized transactions”
Millions of dollars started to mysteriously move from FTX late Friday U.S. hours.
CoinDeskShaurya Malwa
Context & Ripple Effects
This lands in the middle of FTX's 72-hour unraveling: two days earlier, SBF told staff withdrawals were effectively paused after roughly $6B of net outflows, and the same day's reporting showed spreadsheets indicating at least $1B of client funds moved to Alameda was unaccounted for. The general counsel's move to cold wallets is the exchange's last-ditch containment step — locking down whatever hot-wallet balances remain while unauthorized transfers are still draining the exchange.
First-order effects
Customers' remaining FTX balances are frozen in cold storage with withdrawals already halted, converting a liquidity run into a full stoppage of fund access.
The attacker or attacker(s) behind the unauthorized transactions lose direct access to hot-wallet funds, capping further drain — though, per later reporting, the all-night containment effort still ended with a $415M–$432M loss to unidentified hackers.
Second-order effects
The estate's recovery accounting has to absorb the hack as a distinct loss category — FTX later itemized the $415M in unauthorized third-party transfers inside the ~$5.5B in liquid assets identified for recovery, complicating creditor distributions.
Third-order effects
The episode hardens the case that exchange insolvency plus weak internal controls — including the backdoor Alameda used to withdraw billions that US employees had reported — makes hot-wallet custody untenable, pushing the industry toward cold-storage-first custody and independent control verification as the default standard for any surviving exchange.
The trend: Exchange collapses are forcing the industry to treat custody architecture — cold storage, access controls, verifiable fund segregation — as the core trust product rather than an operational detail.
Following the Chapter 11 bankruptcy filings - FTX US and FTX [dot] com initiated precautionary steps to move all digital assets to cold storage. Process was expedited this evening - to mitigate damage upon observing unauthorized transactions.
#CertiKSkynetAlert 🚨 FTX US general counsel @_Ryne_Miller announced that FTX was in the preliminary steps to move all assets to cold storage and the process was expedited by recent ‘unauthorized transactions’. We will continue to update with more information as it rolls out. http…
Tips when your company goes bankrupt (actually applies to everything legal in my experience): don't talk about it on social networks. Any lawyer will tell you to stfu about this kind of shit because anything you say is a liability to yourself and others. #notlegaladvice
@_Ryne_Miller Now the general counsel is saying this was planned in advance? Directly contradicting himself from hours ago. Bizarre behavior https://twitter.com/...
Voyagers, as a result of the Chapter 11 filing by @FTX_Official and FTX US we have reopened the bidding process and are in active discussions with alternative bidders. For more information, please read our joint press release with @VoyagerUCC: https://www.newswire.ca/...
Narrow escape of a double disaster for @investvoyager creditors. Same thing happened with Bitcoinica creditor's funds being trusted with Gox back in the day. I warned of this possibility and people thought I was fear mongering. Top bidder for balances most likely to be insolvent …