FTX Estate Turns on the Whale It Once Called a Friend

A billion-dollar rift between a bankrupt exchange and the trader who once tested its defenses has spilled into court. FTX's estate has filed a last-minute lawsuit describing longtime DeFi governance provocateur Humpy the Whale as an organized criminal, alleging he siphoned nearly $1 billion from the exchange. The man behind that alias is identified in the filing as Nawaaz Mohammad Meerun.

Meerun's reputation in decentralized finance predates FTX. He is known for pushing protocols such as Balancer, SushiSwap, and Compound to their structural limits through what's often labeled a "governance attack" — episodes that repeatedly forced these projects to confront how centralized their supposedly decentralized systems really were.

FTX's new framing of him as a villain raises an awkward question: can it be fraud to exploit a system exactly as it was built, when the accuser was simultaneously defrauding its own customers?

The claims below are sourced from FTX's November 8, 2024 bankruptcy filing against Meerun (Case 22-11068-JTD, Doc 27822), available via Kroll as a downloadable PDF. Section numbers in parentheses below refer to that document.

01Setting the scene

FTX was once valued at $32 billion before its collapse in late 2022 amid revelations of large-scale fraud. Its estate has since pursued anyone holding funds that might be recoverable for creditors — and Humpy the Whale, a figure both admired and criticized across DeFi, is now a target.

FTX's complaint casts him as the architect of "massive market manipulation schemes" (1), while the wider crypto community has generally regarded him as someone probing the edges of what protocol rules technically permit. The two parties' history together began in 2021, when Meerun allegedly launched a series of trading maneuvers that FTX says exploited its margin lending system (28).

02The BTMX/MOB maneuver

Between January and March 2021, Meerun executed what the filing implies was an unusually sophisticated exchange play (28). The core idea was to dominate an illiquid token market and push FTX's margin system past its intended limits (28, 29, 30).

He accumulated 363 million BTMX tokens — close to half of the entire supply (28). Sustained buying pressure drove BTMX's price from $0.03 to $3.00, a roughly 10,000% increase over three months (28). That inflated holding then served as collateral to draw hundreds of millions of dollars out of FTX's margin system, while Meerun simultaneously built a large short position in MobileCoin (MOB) (30, 31).

BitMax flagged the suspicious activity to FTX as early as February (29). FTX's response, according to the filing, came from executive Ryan Salame, who suggested keeping the whale "as a friend" because he accounted for "50% of our margin platform" (36).

That leniency proved expensive. By March 28, Meerun had withdrawn $450 million (35). When FTX eventually tried to freeze his accounts, it neglected to also block withdrawals — an oversight that allowed him to pull out a further $150 million in a single day. Alameda Research was ultimately left to absorb Meerun's positions, inheriting a stack of near-worthless BTMX while its effort to cover his MOB short pushed that token's price up 750% over ten days (39, 40). Per Alameda's own internal records, the combined losses totaled $1 billion (41).

03Two more schemes

FTX's complaint also details two subsequent episodes. After tightening its margin rules following the BTMX/MOB incident, FTX found that Humpy adapted: he opened dozens of new accounts — several registered under kebab-themed email addresses, including "[email protected]" — and used them to run a BAO/TOMO/SXP exploit that extracted roughly another $200 million (42-47).

For a third maneuver, he split his KNC holdings across 64 separate subaccounts, circumventing FTX's newly imposed position limits (49). The scheme was eventually noticed by a junior FTX employee who spotted unusual KNC consolidation in a wallet connected to the earlier BAO/TOMO/SXP accounts (50).

Notably, despite FTX's characterization of him as running a criminal enterprise, Meerun later filed two bankruptcy claims worth a combined $13.2 million using his real name and address (54) — hardly the behavior of someone trying to stay hidden.

04Where strategy ends and manipulation begins

The BTMX/MOB trade wasn't simple token pumping; it exploited specific mechanics in how FTX priced collateral and managed risk. FTX's margin system permitted illiquid tokens as collateral, and its risk team apparently disregarded BitMax's direct warning about BTMX concentration (29). Salame's own remarks show leadership was aware of the concentration risk and chose to tolerate it (36).

Even after tightening margin rules post-BTMX/MOB (42), FTX's fix didn't address position aggregation across subaccounts — leaving the exact gap that the KNC scheme later exploited (49). In that sense, the later exploits weren't circumventing new security so much as walking through doors FTX left open.

Asked for comment, Humpy gave Rekt News the following statement: "Since this is a legal matter, details will be given in court, I only have a brief comment to make as follows: I have always operated within the parameters set forth by FTX exchange. I didn't receive any preferential favor regarding my FTX account. It can be proven that deposits I made to my FTX account largely exceeded all my withdrawals. Thus I encountered losses whilst trading at FTX. I have no ties to any organized crime networks, I'm not linked and never financed any extremist or terrorist network. Figures set forth by FTX Estate against me are misleading, and claims thrown out are baseless and unsubstantiated."

Among FTX's many allegations, one appears to be its most concrete and potentially provable: that Meerun created multiple accounts using forged KYC documents and fictitious addresses, a direct violation of FTX's terms of service (27, 43-45). His track record in DeFi governance follows a similar pattern — stress-testing systems, finding their weak points, and profiting from the gaps, which observers may characterize either as exploitation or as a form of price discovery.

05An exchange accusing others of what it did itself

Beyond the specific trading allegations, FTX's complaint also references money laundering networks, Eastern European crime syndicates, human trafficking, and even terrorist financing (58) — claims made "upon information and belief" without naming any organization, date, or specific incident (1, Legal Doc Intro). In contrast to the detailed, timestamped account of Meerun's trading activity, these broader claims are notably unsubstantiated.

The irony is hard to miss: this is the same exchange whose leadership joked about keeping Meerun around for his trading volume (36), the same exchange that forgot to block withdrawals from an account it was supposedly freezing (35), and the same exchange whose own vendor (BitMax) and employee both flagged the suspicious activity before it escalated (29, 50). Rather than intervening, FTX repeatedly let Alameda absorb the resulting losses (39) — a pattern that recurred throughout FTX's final months. Even the estate's own loss estimate is loosely pinned somewhere between $400 million and "a billion dollars" (41).

FTX is, after all, the same entity that manipulated markets using customer funds and betrayed the trust of its own users. In attempting to cast Meerun as DeFi's most dangerous villain, the estate's filing arguably does more to expose its own operational failures than his.

06What it means going forward

FTX's case illustrates how yesterday's boundary-pushing trader can become tomorrow's legal target. Each of Meerun's so-called "attacks" — on FTX and on DeFi protocols before it — exposed real gaps between decentralization's promises and its practical limits. Whether one calls his conduct exploitation or adaptation, it has repeatedly forced platforms to reexamine and harden their governance and risk models.

The full truth likely lies somewhere between FTX's dramatic account of an organized criminal network and Meerun's insistence that he simply followed the rules as written — a question discovery and further court proceedings will need to resolve. But if a centralized exchange couldn't secure its own margin system against a single sophisticated trader, the more pressing question may not be about the whale who found the cracks, but about the architects who built the system with those cracks in it.