FTX and more than 100 affiliated companies entered Chapter 11 bankruptcy on November 11, 2022. Soon afterward, incoming chief executive John J. Ray III told the bankruptcy court that locating and protecting company property was an immediate priority because a substantial portion of the estate’s assets might be “missing or stolen.”
An expert take by Ethan Cross, HakTechs.com Lead Analyst
That statement was an early warning about the condition of FTX’s records, controls and cryptocurrency holdings. It was not a final calculation showing that every unavailable dollar had been taken in a single theft.
Several problems were unfolding at once. Customer deposits had been diverted to or commingled with Alameda Research, FTX’s affiliated trading firm. Other holdings were tied up in illiquid investments or tokens that could not be sold quickly. Incomplete records made some assets difficult to locate, while separate unauthorized cryptocurrency transfers were detected around the time of the bankruptcy filing.
Bankruptcy professionals later reconstructed the books, secured cryptocurrency, sold investments, pursued litigation and negotiated settlements. The court confirmed FTX’s reorganization plan in October 2024, and the plan became effective on January 3, 2025. Creditor distributions have continued since then, including a fifth distribution of approximately $900 million scheduled for July 31, 2026.
When FTX Entered Bankruptcy
The withdrawal crisis
FTX’s collapse accelerated in early November 2022 after questions emerged about Alameda Research’s balance sheet and its dependence on FTT, a token issued by FTX. Customers rushed to withdraw their money, creating demands the exchange could not meet.
Reuters reported that traders attempted to withdraw approximately $6 billion over a 72-hour period. A document reviewed at the time reportedly showed about $14.6 billion in assets against $13.86 billion in liabilities, but only around $900 million of those assets were considered liquid.
That distinction was central to the crisis. A company can report billions of dollars in assets while still lacking enough cash or readily saleable property to meet immediate withdrawal requests.
The failed rescue attempt
Binance announced a nonbinding agreement to consider acquiring FTX’s non-U.S. business, but withdrew after conducting due diligence. With no rescue deal and no way to satisfy the volume of withdrawals, FTX moved toward bankruptcy.
The November 2022 Chapter 11 filing
FTX Trading, Alameda Research and numerous related entities filed for Chapter 11 protection on November 11, 2022. Sam Bankman-Fried resigned, and restructuring specialist John J. Ray III became chief executive.
Ray’s first declaration described unreliable financial information, inadequate accounting systems, weak cash controls and decision-making authority concentrated among a small group of executives. He also said the debtors did not yet know precisely how much cash the group held on the filing date.
Why FTX’s Assets Appeared to Be Missing
Customer funds transferred to Alameda Research
The largest part of the shortfall did not come from one external hack. Prosecutors and regulators established that customer deposits were routed to Alameda Research and used for trading, investments, loan repayments, political contributions, real estate and other expenditures.
The U.S. Department of Justice said Bankman-Fried channeled billions of dollars in customer deposits to Alameda while telling customers that their funds were protected and kept separate. He was later convicted on fraud and conspiracy charges and sentenced in March 2024 to 25 years in prison.
The SEC also alleged that Alameda received an effectively unlimited line of credit funded by FTX customers and was exempted from important risk controls applied to other users.
Poor accounting and incomplete records
FTX’s recordkeeping failures made it unusually difficult to determine which entity owned a particular asset, where funds had been transferred and whether balances shown in customer accounts were backed by assets the exchange actually held.
Ray’s declaration said the organization lacked the accounting, cybersecurity, cash-management and risk-management systems expected at a company responsible for customer property. Customer cryptocurrency deposits were also absent from certain balance sheets, which further complicated the initial reconstruction.
Illiquid investments and limited available cash
Some FTX and Alameda holdings were not missing in the literal sense. They existed, but could not be sold quickly or were worth far less under distressed market conditions than their stated values suggested.
Alameda held large quantities of FTT and other affiliated or thinly traded tokens. These assets could carry a quoted market value without providing much practical liquidity. Selling a large position could push the price down sharply, leaving the company with far less cash than the balance sheet implied.
What Was Suspected to Have Been Stolen?
Unauthorized transactions after the collapse
Separate from the earlier diversion of customer funds, FTX reported unauthorized transactions shortly after the bankruptcy filing. Blockchain researchers observed substantial cryptocurrency outflows from wallets associated with the exchange.
Early estimates varied. Reuters reported that Elliptic classified approximately $515 million as suspected stolen, while around $186 million appeared to have been moved by FTX into secure storage. Nansen identified roughly $659 million in total outflows but did not classify every transfer as theft.
These were preliminary blockchain estimates. They should not be confused with the much larger amount of customer money misappropriated through Alameda before the bankruptcy.
Assets moved into cold storage
FTX personnel also transferred digital assets into cold wallets after detecting unauthorized activity. Cold storage keeps private keys offline and can reduce the risk of further remote access.
Because protective transfers and suspicious transfers occurred during the same chaotic period, outside observers could not immediately classify every wallet movement. A large outflow from an exchange-controlled wallet did not automatically mean the assets had been stolen.
Why early blockchain estimates differed
Blockchain-analysis firms used different wallet labels, time windows and classification methods. Some measured all observed outflows, while others tried to separate suspected theft from transfers made by the restructuring team.
Investigators also had to determine who controlled the receiving addresses and whether each transaction had been authorized. That is why early reports used terms such as “suspicious,” “unauthorized” and “suspected stolen” instead of presenting one settled theft figure.
Missing, Stolen, Misappropriated and Illiquid: Key Differences
| Term | What It Meant in the FTX Case | Why the Difference Matters |
|---|---|---|
| Missing | Assets that could not initially be located, verified or assigned to the correct entity because the company’s records and controls were incomplete. | Some of these assets were later found, secured or recovered. |
| Stolen | Assets suspected or confirmed to have been removed through unauthorized transactions. | Not every wallet outflow observed during the collapse represented theft. |
| Misappropriated | Customer funds used for purposes customers had not authorized, particularly through Alameda Research. | This conduct occurred before the bankruptcy and was central to the criminal case. |
| Illiquid | Investments or tokens that could not be converted into cash quickly without a substantial loss. | An asset can exist while still being unavailable to meet immediate withdrawals. |
What Bankruptcy Investigators Found Later
Reconstructing FTX’s records
The restructuring team rebuilt records across a large network of companies, bank accounts, cryptocurrency wallets and investments. The work included determining which debtor owned each asset, reconciling customer claims and securing property held across multiple jurisdictions.
Recovering and selling assets
The estate raised funds through cryptocurrency recoveries, investment sales and other transactions. One important source of value was FTX’s investment portfolio, including its stake in artificial-intelligence company Anthropic.
By the time the bankruptcy plan was approved in October 2024, FTX estimated that it would have approximately $14.7 billion to $16.5 billion available for distributions.
That total represented estate assets that had been located, recovered or converted into cash. It did not show that the original shortfall had never existed.
Litigation, settlements and clawbacks
The estate also pursued claims against former executives, investment recipients and other parties. Bankruptcy clawback actions can seek the return of certain payments or transfers made before a filing, while negotiated settlements can recover value without taking every dispute through a full trial.
These efforts increased the pool available to creditors. They did not amount to a reopening of FTX as a functioning cryptocurrency exchange; the process remained a bankruptcy wind-down.
What Happened to FTX Customers?
Why customers became creditors
Once FTX entered bankruptcy, customers could no longer simply withdraw the cryptocurrency displayed in their accounts. They had to participate in the claims process and establish what the bankruptcy estate owed them.
The official claims portal displayed customer balances as of the November 11, 2022 petition time. Eligible claimants also had to complete identity verification, tax documentation and distribution-provider requirements before receiving payments.
How claims were valued
Claims were generally valued in U.S. dollars using cryptocurrency prices from around the bankruptcy filing date. The confirmed plan projected that many customer classes would receive more than 100% of their allowed dollar-denominated claim values, including interest or supplemental recovery provided under the plan.
The plan became effective on January 3, 2025. By July 2026, FTX had announced its fifth distribution, with cumulative plan distributions listed at 105% for allowed FTX.com and FTX U.S. customer-entitlement claims and 120% for convenience claims, subject to plan terms and rounding.
Why repayment remained controversial
Receiving more than 100% of a bankruptcy-date dollar claim does not necessarily restore the cryptocurrency a customer originally held.
Crypto prices rose substantially after November 2022. A customer whose holdings were converted into a dollar claim near the market lows could therefore receive the full allowed amount plus additional value and still end up worse off than if the original cryptocurrency had remained in the account.
For that reason, claims that customers “got everything back” can be misleading. The result depends on whether recovery is measured against the November 2022 dollar value or the later market value of the digital assets originally held.
What the FTX Collapse Revealed About Crypto Custody
Exchange balances versus independently controlled assets
A balance displayed inside a centralized exchange account is a claim against the platform. It is not the same as holding cryptocurrency in a wallet whose private keys the customer controls independently.
This does not mean every centralized exchange will fail. It means customers depend on the exchange’s solvency, custody controls, recordkeeping and ability to honor withdrawals.
Governance and segregation of customer funds
FTX’s failure was closely tied to weaknesses in governance and accounting. Affiliated entities were deeply intertwined, Alameda received exceptional treatment, and customer deposits were not adequately separated from corporate and trading activities.
The case shows why customer-property segregation, independent oversight, reliable financial statements and firm limits on related-party transactions matter.
Limits of treating an exchange like a bank
Cryptocurrency exchanges may provide services that resemble financial accounts, but their legal and regulatory protections can differ from those attached to regulated bank deposits. Customers should not assume that an exchange balance includes deposit insurance or guarantees equivalent to a conventional bank account.
Frequently Asked Questions
When did FTX file for bankruptcy?
FTX Trading, Alameda Research and numerous affiliated companies filed for Chapter 11 bankruptcy protection on November 11, 2022. Certain related filings followed shortly afterward.
How much money was initially reported missing from FTX?
There was no single settled figure. Early reports referred to different problems, including customer funds transferred to Alameda, the exchange’s liquidity shortfall, assets that could not be located and suspicious wallet transfers.
Were FTX’s assets stolen or transferred to Alameda Research?
Both occurred, but they were separate issues. Billions of dollars in customer deposits were misappropriated through Alameda, while additional unauthorized cryptocurrency transfers were reported around the bankruptcy filing.
What were the unauthorized transactions reported after the filing?
They were cryptocurrency movements from FTX-linked wallets that the company said had not been authorized. Analysts classified some transfers as suspected theft and others as protective movements into cold storage.
Why were some FTX assets considered illiquid?
Some holdings consisted of private investments, affiliated tokens or large positions that could not be sold quickly at their stated values. They therefore could not provide enough immediate cash to satisfy customer withdrawals.
How much did the FTX bankruptcy estate later recover?
When the plan was approved in October 2024, FTX estimated that approximately $14.7 billion to $16.5 billion would be available for creditor distributions. Recoveries and distributions have continued under the confirmed plan.
Will customers receive their original cryptocurrency back?
Generally, no. Distributions have been based on allowed dollar-denominated claims valued as of the bankruptcy date rather than the return of each customer’s original cryptocurrency holdings.
Why are some creditors unhappy even when claims exceed 100% recovery?
Because the recovery percentage is measured against the November 2022 dollar value of the claim. Customers may still miss gains they would have received if they had retained their original cryptocurrency through the later market recovery.
Final Summary
FTX’s warning that assets might be missing or stolen described an urgent accounting and asset-protection problem at the start of an unusually complex bankruptcy. It did not mean that every unavailable asset had disappeared through one hack.
The later record showed several distinct failures. Customer funds had been misappropriated through Alameda Research, FTX lacked reliable accounting and governance systems, some holdings were highly illiquid, and unauthorized digital-asset transfers occurred around the time of the collapse.
Bankruptcy professionals later located, secured, sold and recovered substantial value. A reorganization plan was confirmed in October 2024, became effective in January 2025 and has produced multiple creditor distributions.
Even so, repayment based on November 2022 dollar values is not the same as restoring customers’ original cryptocurrency positions. It also does not mean that every creditor was made economically whole.
