What FTX Taught Policymakers: The Exchange Collapse That Changed Everything

On November 2, 2022, a CoinDesk article revealed that Alameda Research — the trading firm controlled by FTX founder Sam Bankman-Fried — held the bulk of its assets in FTT, FTX’s own exchange token. Within a week, FTX had collapsed, $8 billion in customer funds had vanished, and the world’s second-largest cryptocurrency exchange had filed for bankruptcy. Sam Bankman-Fried was arrested in the Bahamas in December 2022 and ultimately convicted on seven counts of fraud and conspiracy.

No single event has done more to shape the trajectory of crypto regulation. FTX was the stress test that policymakers had been warned about but hoped would never happen. When it did, it handed regulators worldwide both a mandate and a blueprint.

What Actually Went Wrong

The core failure at FTX was not complex. Customer deposits — held at FTX in the belief that they were segregated and safe — were transferred to Alameda Research and used for leveraged trading, venture investments, and political donations. There was no segregation. There was no independent custody. There was no meaningful audit. Customers who deposited Bitcoin believed they owned Bitcoin; in reality, they held an unsecured claim on an insolvent firm.

This is a failure mode that traditional finance solved decades ago. Bank deposits are insured up to statutory limits. Broker-dealer customer assets are held in segregated accounts under SEC Rule 15c3-3 — the Customer Protection Rule — and insured through SIPC. Futures customer funds are segregated under CFTC Part 1 rules. Crypto exchanges in 2022 operated under none of these frameworks in most jurisdictions.

The second failure was leverage and interconnection. Alameda’s losses were amplified by borrowed funds, much of it borrowed from FTX customer assets. When Alameda’s positions deteriorated, the hole it created was too large to fill. The contagion spread to every counterparty that had exposure to FTX or had lent to Alameda: BlockFi, Genesis, Voyager, and dozens of smaller firms.

Direct Policy Consequences

United States: The GENIUS Act and CFTC Jurisdiction

In the US, FTX transformed the political calculus on crypto legislation almost overnight. Bankman-Fried had been one of the industry’s most prominent advocates for federal legislation, including a bill that critics argued would have benefited FTX’s business model. His arrest discredited a particular strand of pro-crypto lobbying and opened space for more aggressive regulatory proposals.

The GENIUS Act (Guiding and Establishing National Innovation for US Stablecoins) includes explicit customer asset protection provisions that are direct responses to FTX. Issuers must hold reserves in segregated accounts, and those assets cannot be rehypothecated or lent out — the precise failure mode at FTX. The GENIUS Act does not cover exchanges directly, but it established a legislative principle: crypto customer assets must be protected in ways analogous to traditional financial regulation.

The CFTC has used the FTX collapse to press its claim to jurisdiction over crypto commodity spot markets. The agency argued that had FTX been regulated as a commodity exchange under the Commodity Exchange Act, the customer protection rules that apply to futures commission merchants would have prevented the commingling. Congressional testimony from CFTC Chair Rostin Behnam after the collapse was explicit: the CFTC needed the authority it was requesting in digital commodity exchange legislation.

The FIT21 Act, passed by the House in May 2024, and the subsequent CLARITY Act both include provisions requiring registered digital commodity exchanges to segregate customer assets — provisions drafted with FTX directly in mind.

United Kingdom: FSMA 2023 and FCA Registration

The UK’s Financial Services and Markets Act 2023 extended regulation to cryptoasset exchange activities, with FCA authorization required for firms operating in or from the UK. The accompanying regulatory framework, developed by the FCA through consultations in 2024 and 2025, includes requirements for the segregation of client assets that closely mirror MiFID II client asset rules. The October 2027 go-live date for the full regime reflects the FCA’s deliberate pace, but the policy direction — treating crypto exchange customer assets with the same legal protection as traditional brokerage assets — was set by FTX.

Singapore: DTSP Framework

Singapore’s Monetary Authority of Singapore (MAS) introduced the Digital Token Service Provider (DTSP) framework as part of amendments to the Financial Services and Markets Act. The framework requires licensed exchanges to hold customer assets separately from firm assets and subjects them to capital requirements calibrated to protect customers against firm insolvency. MAS had already been tightening crypto regulation before FTX, but the collapse accelerated implementation timelines and strengthened the segregation requirements. Singapore had been home to several FTX-affiliated entities, which created reputational pressure to demonstrate that its regulatory framework could prevent recurrence.

South Africa: CASP Licensing

South Africa’s Financial Sector Conduct Authority (FSCA) finalized its Crypto Asset Service Provider (CASP) licensing framework in 2023, with registration requirements that became mandatory. The framework requires CASPs to maintain adequate financial resources and implement controls over client assets. South Africa had been developing this framework before FTX, but the collapse provided political cover for the FSCA to finalize and implement rules that the industry had been contesting.

FSB: Cross-Border Cooperation

The Financial Stability Board’s response to FTX was its October 2023 framework for crypto-asset regulation, which placed cross-border cooperation at its center. FTX had exploited regulatory arbitrage — headquartered in the Bahamas, serving customers globally, with entities in multiple jurisdictions. The FSB’s framework requires that crypto-asset service providers meet the same standards as comparable traditional financial institutions and that regulators share information across borders. The “same activity, same risk, same regulation” principle was articulated explicitly as a lesson from FTX.

The Deeper Lesson

FTX revealed that the fundamental architecture of most crypto exchanges was incompatible with basic investor protection principles. Exchanges were operating as combined custodians, trading platforms, and in some cases proprietary traders — with no separation of functions and no legal obligation to protect customer assets.

The traditional financial system learned these lessons painfully over the course of a century: the Glass-Steagall Act separated commercial and investment banking; the Securities Exchange Act of 1934 created customer asset protection rules; ERISA protected pension assets. The crypto industry compressed this learning into a decade, and FTX was the catalyzing event.

The regulatory response has been consistent across jurisdictions: exchanges must segregate customer assets, must not use customer assets for proprietary activities, must hold adequate capital, and must submit to oversight. These are not novel or burdensome requirements. They are the minimum infrastructure for a functional financial market.

What FTX ultimately taught policymakers is that the absence of regulation is not a neutral choice. When FTX failed, it was not just customers who lost — it was the credibility of the entire crypto ecosystem. The exchanges and protocols that had operated responsibly were tarred with the same brush. Regulation, properly designed, protects not just customers but the industry itself.

The policy legacy of FTX is not a set of punitive restrictions. It is a recognition that crypto exchanges are financial intermediaries and must be regulated as such.