Source: the DOJ launched a criminal investigation into the alleged $370M+ in assets stolen as FTX declared bankruptcy, separate from its fraud case against SBF
DOJ are investigating an alleged cybercrime that drained more than $370 million out of FTX just hours after the cryptocurrency exchange filed for bankruptcy last month. Ava Benny-Morrison / @avabmorrison : DOJ probes how $372 million vanished in hack hours after crypto empire FTX filed for bankruptcy. In a small win for authorities, some stolen assets have already been frozen. https://www.bloomberg.com/...
Context & Ripple Effects
FTX’s bankruptcy lawyers had already told the court that a substantial amount of assets was stolen, while the DOJ was separately preparing a potential fraud case involving Sam Bankman-Fried. This inquiry separates the alleged post-bankruptcy asset drain from the conduct under examination in the fraud case.
The theft becomes a distinct recovery problem for the estate rather than simply another allegation about FTX’s management. Later recovery disclosures categorized $415 million in unauthorized third-party transfers, and authorities had frozen some of the assets cited here.
First-order effects
- The DOJ opens a criminal track focused on the alleged theft, distinct from its fraud investigation of SBF, while frozen assets give investigators and the FTX estate a potential recovery foothold.
- FTX’s bankruptcy process must account separately for assets allegedly removed by outside actors, alongside claims tied to the exchange’s broader collapse.
Second-order effects
- The separation of cases forces a clearer division between evidence concerning FTX insiders and evidence concerning the alleged hackers, potentially affecting how recovered assets are traced and returned.
- FTX staff’s subsequent effort to contain the heist during the collapse underscores that bankruptcy-era security controls and incident response become material to the estate’s recovery work.
Third-order effects
- If criminal investigations continue to treat exchange failures and external thefts as separate events, crypto insolvencies will face more complex parallel processes for prosecution, asset tracing, and creditor recovery.
- The episode adds to the later phone-hacking case tied to the FTX theft, illustrating how exchange collapses can expose both governance failures and acute custody-security risks.
The trend: Crypto failures are increasingly producing parallel legal and recovery tracks that distinguish alleged insider misconduct from external attacks on customer assets.