There was no digital security at FTX; a group email was used as key to all assets

Feature Image: Stable Diffusion AI, Prompt “Group email as private keys”

III. ACTION TAKEN SINCE MR. BANKMAN-FRIED’S DEPARTURE

G - Digital Asset Custody

65. The FTX Group did not keep appropriate books and records, or security controls, with respect to its digital assets. Mr. Bankman-Fried and Mr. Wang controlled access to digital assets of the main businesses in the FTX Group (with the exception of LedgerX, regulated by the CFTC, and certain other regulated and/or licensed subsidiaries). Unacceptable management practices included the use of an unsecured group email account as the root user to access confidential private keys and critically sensitive data for the FTX Group companies around the world, the absence of daily reconciliation of positions on the blockchain, the use of software to conceal the misuse of customer funds, the secret exemption of Alameda from certain aspects of FTX.com’s auto-liquidation protocol, and the absence of independent governance as between Alameda (owned 90% by Mr. Bankman-Fried and 10% by Mr. Wang) and the Dotcom Silo (in which third parties had invested).

66. The Debtors have located and secured only a fraction of the digital assets of the FTX Group that they hope to recover in these Chapter 11 Cases. The Debtors have secured in new cold wallets approximately $740 million of cryptocurrency that the Debtors believe is attributable to either the WRS, Alameda and/or Dotcom Silos. The Debtors have not yet been able to determine how much of this cryptocurrency is allocable to each Silo, or even if such an allocation can be determined. These balances exclude cryptocurrency not currently under the Debtors’ control as a result of (a) at least $372 million of unauthorized transfers initiated on the Petition Date, during which time the Debtors immediately began moving cryptocurrency into cold storage to mitigate the risk to the remaining cryptocurrency that was accessible at the time, (b) the dilutive ‘minting’ of approximately $300 million in FTT tokens by an unauthorized source after the Petition Date and (c) the failure of the co-founders and potentially others to identify additional wallets believed to contain Debtor assets.

67. In response, the Debtors have engaged forensic analysts to identify potential Debtor assets on the blockchain, cybersecurity professionals to identify the parties responsible for the unauthorized transactions on and after the Petition Date and investigators to begin the process of identifying what may be very substantial transfers of Debtor property in the days, weeks and months prior to the Petition Date. The Debtors’ team includes business, accounting, forensic, technical and legal resources that I believe are among the best in the world at these activities. It is my expectation that the Debtors will require assistance from the Court with respect to these matters as the investigation and these Chapter 11 Cases continue.

68. Although the investigation has only begun and must run its course, it is my view based on the information obtained to date, that many of the employees of the FTX Group, including some of its senior executives, were not aware of the shortfalls or potential commingling of digital assets. Indeed, I believe some of the people most hurt by these events are current and former employees and executives, whose personal investments and reputations have suffered. These are many of the same people whose work will be necessary to ensure the maximization of value for all stakeholders going forward.