$66 million.
That is the number a former FTX law firm and an outside auditor agreed to pay to settle customer claims over the fraud. It is the headline. It is the closure. It is, depending on which crypto newsletter you read this week, "accountability."
Let me decompose it before anyone calls it that. Two defendants — a law firm and an audit shop — one combined figure, paid into a settlement that ends their exposure to the people who lost money. Not a fine paid to a regulator. A settlement paid to customers, which means it is calibrated not to the harm but to the cost of continuing to litigate. That distinction is the entire article, and I am going to spend the rest of it on the part everyone skips.
Here is the advice this settlement should kill, and won't: "Use the exchange that's been audited." You have read it. I have read it a thousand times — on affiliate review sites, in the pinned tweet of every "crypto educator" with a referral link, in the comparison tables that rank exchanges by whether a logo from a professional services firm appears on a transparency page. The gatekeeper is the safety net. The auditor signed off, so the money is real. That is the conventional wisdom. It is wrong in a specific, checkable way, and FTX's own paperwork is the proof.
The Gatekeepers Were Never the Safety Net You Were Sold
Concede the strong version of the argument first, because it deserves respect. An auditor and a law firm do impose real friction. A firm that attaches its name to a balance sheet has reputational capital at risk, and reputational capital is a genuine, if soft, constraint. The "audited exchange is safer" crowd is not hallucinating a benefit. There is one. I am not going to pretend otherwise.
Now watch the conclusion collapse anyway.
FTX had professional gatekeepers around it the entire time. It had a law firm. It had auditors signing off on financials. And the customers still lost their deposits, and the resolution — years later — is a $66 million payment from those same gatekeepers. Read that sequence again. The gatekeepers' presence did not prevent the loss. The gatekeepers' presence produced a settlement *after* the loss. Those are completely different products, and retail keeps buying the second one believing it is the first.
The math that should bother you is the direction of the $66 million. It flows from gatekeeper to customer only after the customer has already been made whole or not-whole through a separate, grinding bankruptcy estate. The settlement is not the recovery. It is a side payment to close a liability. If your mental model of "audited" was "someone is standing between me and the abyss," the FTX timeline just told you that someone was standing there to negotiate the size of their own check, not yours.
And the affiliate sites will not update. They will not, because "trade on the regulated, audited exchange — affiliate link below" is the entire business model, and the word "audited" is doing load-bearing work it was never engineered to carry.
A Dated Attestation Is the Only Receipt That Survives a Collapse
This desk runs on receipts. Normally that means a transaction hash and a block number — and I want to be honest about a limit here, because the whole point of this publication is that I don't manufacture authority. I am not going to hand you a fabricated block height to make this paragraph sound forensic. What I *can* hand you is the closest thing to an on-chain receipt that the exchange transparency pages actually publish: the date of the last proof-of-reserves attestation. That date is checkable. A vague "we're audited" is not.
So look at the dates, because they are the receipt.
Binance's last proof-of-reserves audit lands at 2025-03-01, reserve status verified. OKX, same date, 2025-03-01, verified. Bybit at 2025-03-12, verified. Bitget at 2025-02-20, verified. And then MEXC — last audit 2024-12-10, reserve status *partial*.
One of these is not like the others. Four exchanges carry a recent, verified attestation timestamped inside a two-week window this spring. The fifth is sitting on an attestation from December of last year with a reserve status that the data itself flags as incomplete. That gap is the only thing on the page that means anything, and it is the one thing no "best exchanges 2026" listicle will put in its comparison grid, because a stale partial attestation does not photograph well next to a green checkmark.
Here is the part the FTX settlement forces me to add, though, and it is uncomfortable for my own argument — so I'll back up.
A verified attestation dated 2025-03-01 proves what reserves looked like on a date. It does not prove liabilities. Proof of reserves without proof of liabilities is half a balance sheet, and half a balance sheet is exactly the document that lets a firm look solvent right up until the morning it isn't. FTX is the cautionary tale precisely because the visible side of the ledger looked fine. So when I tell you the attestation date is the only receipt that survives a collapse, I mean it survives as *evidence of when someone last looked* — not as a guarantee of what they found on the other side of the book. The date is necessary. It is nowhere close to sufficient. Anyone selling you the date as sufficiency is selling you the same thing FTX's auditor was.
Verified Reserves and a 2.3 Trust Score Can Coexist — That Is the Whole Point
Now the trap inside the trap.
Binance carries the highest security posture in this set — a CER security score of 9.4 — verified reserves, a March attestation, the deepest book in the market at roughly $18,500 million in daily volume, and a Trustpilot rating of 2.3. Bybit, smaller, sits at a 9.1 security score and a 4.5 Trustpilot. Bitget, an 8.9 and a 4.6. Read those two columns side by side and the conventional wisdom short-circuits, because the safest infrastructure in the group has the angriest customers, and the listicle methodology has no idea what to do with that.
I'll tell you what to do with it. They are measuring different things, and conflating them is the same category error that made "FTX is audited" sound like "FTX is safe."
A security score and a reserve attestation measure the custody and the infrastructure — can the thing get hacked, is the collateral demonstrably there on the date checked. A Trustpilot rating measures whether a withdrawal got stuck and whether support answered. Both are real. Neither is the other. And the FTX gatekeeper settlement is what happens when an entire industry — auditors, law firms, review sites, the educator with the referral link — lets the credential stand in for the underlying thing it was supposed to verify.
The $66 million is that substitution, priced. It is what the credential is worth once the underlying thing it vouched for turns out to be hollow: a fraction, paid late, by the people whose name on the door was the reassurance in the first place.
The Number That Should Decide Your Next Move
One number, then I'm done.
Not the $66 million — that one's already spent, already closed, already a press release. The number is 2024-12-10. That is MEXC's last attestation date, sitting next to a *partial* reserve status, on an exchange that will happily extend you 200x leverage on futures and asks for no KYC to deposit. The FTX settlement is the past tense of letting a credential substitute for a check. That December date is the present tense of the same thing, and it is the one number that should decide whether you keep size on an exchange whose proof is both older and admittedly incomplete.
The settlement closed. The lesson it was supposed to teach did not. Check the date on the attestation yourself, and treat "audited" as the beginning of the question, not the answer.
This started as a piece about a $66 million settlement and the closure it was supposed to represent. It turned, somewhere around the second section, into an argument I did not plan to make against my own favorite receipt — the attestation date — because FTX is the reason I can't honestly sell you a date as a guarantee. The settlement is the easy story. The harder one is that the gatekeepers were never the wall, and the only person reading the liabilities side of the ledger is going to have to be you.
FAQ
What does the $66 million FTX settlement actually cover?
It resolves customer claims against two former FTX gatekeepers — a law firm and an outside auditor — over their role around the fraud. Critically, it is a settlement paid to customers to close litigation exposure, not a regulatory fine and not the bankruptcy recovery itself. A settlement figure is typically calibrated to the cost of continued litigation rather than to the full scale of customer harm, which is why the headline number can look small relative to what was lost.
Does an exchange having a proof-of-reserves audit mean my deposits are safe?
No. Proof of reserves shows what an exchange's assets looked like on the attestation date — for example, Binance and OKX both carry a verified attestation dated 2025-03-01. It does not prove liabilities. A firm can show real reserves while hiding the obligations against them, which is precisely the gap FTX exploited. Treat a recent, verified attestation as necessary evidence, not as a solvency guarantee.
How can Binance have a 9.4 security score but only a 2.3 Trustpilot rating?
Because they measure different things. The CER security score (9.4 for Binance) and the verified reserve attestation describe custody and infrastructure — resistance to hacks, demonstrable collateral. The Trustpilot rating (2.3) reflects user experience: stuck withdrawals, support response. Bybit's 9.1 score with a 4.5 Trustpilot shows the same split from the other side. Conflating the two is the same error as reading "audited" as "safe."
Which exchange in this group has the weakest reserve proof?
MEXC. Its last proof-of-reserves audit is dated 2024-12-10 with a reserve status listed as partial — both older and explicitly incomplete compared to Binance, OKX (2025-03-01), Bybit (2025-03-12), and Bitget (2025-02-20), all marked verified. MEXC also offers up to 200x futures leverage and requires no KYC to deposit, which raises the stakes of relying on a stale, partial attestation.
Is "use the audited exchange" still good advice after this settlement?
It is incomplete advice presented as complete. The settlement shows gatekeepers — auditors and law firms — present throughout FTX's existence did not prevent customer losses; they produced a payment afterward. The presence of a credential is not the presence of solvency. Use the attestation date and reserve status as a starting filter, then ask the harder question the credential cannot answer: what do the liabilities look like?
Why does the attestation date matter more than whether an exchange is "audited"?
Because a date is checkable and a vague claim is not. "We're audited" is marketing; "verified reserves, last audit 2025-03-01" is a timestamped, falsifiable statement you can compare across exchanges. The date tells you when someone last looked at the reserve side of the book. It still says nothing about liabilities — but at minimum it converts a slogan into a piece of dated evidence you can hold the exchange to.
Does a settlement like this mean FTX customers are made whole?
Not through the settlement itself. The $66 million flows from the gatekeepers to customers separately from the bankruptcy estate that handles the primary recovery. It is a side payment closing the gatekeepers' liability, not the mechanism that restores deposits. Reading the settlement as "customers got their money back" misunderstands what the payment is — it ends a lawsuit against two defendants rather than reversing the underlying loss.