CFDs are complex instruments and come with a high risk of losing money rapidly due to leverage. 78.1% of retail investor accounts lose money when trading CFDs with this provider. You should consider whether you understand how CFDs work and whether you can afford to take the high risk of losing your money.
US English

FTX hacked? FTX.com withdrawals suspended after $500m of user funds drained by unknown party

By Peter Henn

15:28, 14 November 2022

Hands on a laptop
Has FTX been hacked? – Photo: Shutterstock

More trouble has hit the beleaguered FTX (FTT) crypto exchange after the revelation that nearly $500m worth of crypto was taken from it led to concerns that it had been hacked.

A tough time

The news came over the weekend, not long after it was announced that the platform, alongside its American subsidiary FTX US and Alameda Research, an investment company set up by FTX’s founder, disgraced former billionaire Sam Bankman-Fried, had applied for Chapter 11 bankruptcy at an American court. 

The problems started on Saturday 12 November – the day after it had filed for bankruptcy. 

Company lawyer Ryne Miller said that, while the exchange had already started moving its digital assets into an offline “cold storage” facility, the process had been sped up in order to, as he put it on Twitter “mitigate damage upon observing unauthorised transactions”.

Where was the money taken?

A report by blockchain analysis company Elliptic suggested that around $278m previously on the (ETH) blockchain and $106m from the under-fire solana (SOL) blockchain had been taken, with the remainder of the $477m shortfall coming in other tokens and coins on other blockchains. 

Elliptic pointed out that the news was announced via FTX’s Telegram channel in a message that said: “FTX has been hacked. All funds seem to have gone. FTZ apps are malware. Delete them. Don’t go on FTX site as it might download trojans.”

The company’s research also suggested that, as Miller had already said, around $186m worth of crypto had been taken offline by the exchange.

The issue has been clouded somewhat by reports that Bankman-Fried had installed a kind of exploit, or backdoor, which had allowed him to secretly transfer funds, allegedly belonging to FTX customers, between FTX and Alameda – claims which the man known in crypto circles as SBF has denied. 

In a statement, also tweeted by Miller, new FTX CEO John J Ray III said: “Consistent with their obligations as Chapter 11 Debtors-in-Possession, FTX US and FTX.com continue to make every effort to secure all assets, wherever located.

XRP/USD

0.53 Price
-4.770% 1D Chg, %
Long position overnight fee -0.0753%
Short position overnight fee 0.0069%
Overnight fee time 21:00 (UTC)
Spread 0.01168

BCH/USD

478.80 Price
-6.020% 1D Chg, %
Long position overnight fee -0.0753%
Short position overnight fee 0.0069%
Overnight fee time 21:00 (UTC)
Spread 2.50

ETH/USD

3,132.92 Price
-2.410% 1D Chg, %
Long position overnight fee -0.0616%
Short position overnight fee 0.0137%
Overnight fee time 21:00 (UTC)
Spread 6.00

DOGE/USD

0.15 Price
-6.080% 1D Chg, %
Long position overnight fee -0.0753%
Short position overnight fee 0.0069%
Overnight fee time 21:00 (UTC)
Spread 0.0012872

“Among other things, we are in the process of removing trading and withdrawal functionality and moving as many digital assets as can be identified to a new cold wallet custodian. As widely reported, unauthorised access to certain assets has occurred.

“An active fact review and mitigation exercise was initiated immediately in response. We have been in contact with, and are coordinating with law enforcement and relevant regulators.”

The largest crypto hacks in history

If the $477m does turn out to have been stolen, it would make it the sixth-largest crypto hack of all time. 

Earlier this year, the record was broken when hackers attacked the Ronin blockchain, home of the Axie Infinity play-to-earn gaming system, stealing $600m worth of ETH and about $25m worth of the USDC stablecoin. 

That hack has been reportedly linked to a group from North Korea by American authorities. 

Prior to that, the largest crypto heist came in 2021, when Chinese platform Poly Network was hacked for $611m. 

Both the 2018 Coincheck hack, which reportedly stole around $550m worth of crypto, and the 2014 Mt Gox attack, which saw around $480m worth of crypto taken, were also larger than the FTX incident, if Elliptic’s report is accurate. 

Markets in this article

ETH/USD
Ethereum / USD
3132.92 USD
-77.26 -2.410%
SOL/USD
Solana / USD
147.9300 USD
-9.0631 -5.790%

Related topics

Rate this article

Related reading

The difference between trading assets and CFDs
The main difference between CFD trading and trading assets, such as commodities and stocks, is that you don’t own the underlying asset when you trade on a CFD.
You can still benefit if the market moves in your favour, or make a loss if it moves against you. However, with traditional trading you enter a contract to exchange the legal ownership of the individual shares or the commodities for money, and you own this until you sell it again.
CFDs are leveraged products, which means that you only need to deposit a percentage of the full value of the CFD trade in order to open a position. But with traditional trading, you buy the assets for the full amount. In the UK, there is no stamp duty on CFD trading, but there is when you buy stocks, for example.
CFDs attract overnight costs to hold the trades (unless you use 1-1 leverage), which makes them more suited to short-term trading opportunities. Stocks and commodities are more normally bought and held for longer. You might also pay a broker commission or fees when buying and selling assets direct and you’d need somewhere to store them safely.
Capital Com is an execution-only service provider. The material provided in this article is for information purposes only and should not be understood as investment advice. Any opinion that may be provided on this page does not constitute a recommendation by Capital Com or its agents and has not been prepared in accordance with the legal requirements designed to promote investment research independence. While the information in this communication, or on which this communication is based, has been obtained from sources that Capital.com believes to be reliable and accurate, it has not undergone independent verification. No representation or warranty, whether expressed or implied, is made as to the accuracy or completeness of any information obtained from third parties. If you rely on the information on this page, then you do so entirely at your own risk.

Still looking for a broker you can trust?

Join the 610,000+ traders worldwide that chose to trade with Capital.com

1. Create & verify your account 2. Make your first deposit 3. You’re all set. Start trading