in April 2024 a fintech lost track of $85 million of its customers' money.
nobody hacked it. and the trustee's reports never established where it went.
it just... couldn't say whose money was whose.
this is the Synapse story, and if you've ever seen "FDIC insured" on a fintech app, you need it.
first, how your dollars actually sit at most fintechs:
> the app doesn't hold your money. a partner bank does.
> the bank holds one big account "for benefit of" every user of the app. an FBO account.
> the app, or a middleware vendor behind it, keeps the ledger of who owns what inside that one account.
> your balance screen is that ledger. not the bank's books.
sound familiar? it's the pot model from my custody post, running on dollars instead of coins.
Synapse was the middleware in the middle. it ran the ledger connecting dozens of consumer apps to a handful of banks.
then it went bankrupt.
> the banks could see one big number
> the apps could see their users' balances
> the ledger that mapped one to the other lived inside the bankrupt company
more than 100,000 people were locked out of their savings. for months.
a former FDIC chair was appointed trustee and started reconciling. the ledger said customers were owed $265 million. the banks held $180 million.
the gap: somewhere between $65 and $96 million, depending on the report. and the source of it was never pinned down.
here's the part that surprised everyone: FDIC insurance did nothing.
because FDIC insurance covers a bank failing. the banks didn't fail. the ledger did.
"FDIC insured" on an app is a promise about the bank's survival, not the app's. Voyager taught crypto that lesson in 2022. Synapse taught fintech the same one in 2024.
(this is also the real answer to "why does a card take a year to launch." after Synapse, banks stopped taking a fintech's ledger on faith.)
so the test from my custody post has a twin.
for coins: point to my coins.
for dollars: point to my dollars.
any company touching your money should answer three things:
> where does the money physically sit?
> who keeps the ledger?
> who reconciles that ledger against the bank, and how often?
if the answer to the third is "the same company that keeps the ledger," you've found the gap before it finds you.
in 2021 you could deposit bitcoin on a platform and earn 6%.
bitcoin doesn't pay interest. no coupon, no dividend, no rent.
so who was paying, and why?
that question was the entire due diligence. almost nobody asked it.
start from first principles: yield on an asset that produces nothing has to be manufactured somewhere else. there are only a few factories:
> lend it to a trader who pays to borrow it (you now hold their credit risk)
> the basis trade: long spot, short futures, pocket the gap (real, but only in bull markets)
> the GBTC premium: buy bitcoin, wrap it, sell the wrapper at a markup (real, until it wasn't)
> DeFi farming: park it in code and collect tokens (code risk plus token risk)
> new deposits pay old depositors (this one has a name)
every one of those is a trade. every trade has a season.
here's what happened to the season.
in the bull market, traders paid up to borrow bitcoin. annualized funding on futures ran into the double digits. the GBTC wrapper sold at a premium that sometimes topped 30%. lending bitcoin genuinely earned real money.
then in February 2021 the GBTC premium flipped to a discount. the basis trade compressed. the honest yield on bitcoin drifted toward zero.
the promised yield didn't.
that's the whole autopsy in one sentence: the trades ended, the promises didn't, and the gap had to be filled with something.
the something was risk. specifically, unsecured loans to the same handful of hedge funds still willing to pay up, because they were the ones in trouble.
receipts:
> Voyager lent more than $650 million to a single hedge fund, Three Arrows Capital, unsecured. more than half its entire loan book, one borrower. the fund defaulted in June 2022. Voyager was bankrupt within two weeks.
> BlockFi lent the same fund about a billion. in February 2022 the SEC had already fined BlockFi $100 million for selling its yield product as an unregistered security. after the fund blew up, BlockFi took a $400 million lifeline from FTX. it went down with FTX in November.
> Celsius paid up to 17% APY. the court-appointed examiner later found that new customer deposits were, in part, funding the rewards and propping up the company's own token. the CEO pleaded guilty to fraud and was sentenced to 12 years.
and the tell that should have ended every one of those conversations early: Voyager told customers their deposits were FDIC insured. the FDIC and the Fed publicly ordered them to stop. the insurance covered the bank failing. not Voyager failing.
the physics underneath all of it:
yield above the riskless rate is a risk premium. it exists because someone is holding a risk. if you can't say who, it's you.
so before you accept yield on your bitcoin, ask the three-word question:
name the trade.
then ask what happens to your coins when that trade stops working. because every trade stops working.
the honest structure is boring. your bitcoin sits, earns nothing, and stays yours.
the yield you didn't earn is the risk you didn't take.