Kraken Sues Etana Over $25M Custody Fraud
Anyone who has ever signed a custody agreement on behalf of an exchange knows the clause that matters: the one about commingling. It's the line you hope you never have to litigate. Kraken's parent company Payward is now litigating exactly that, and the numbers in the filing are the kind that ruin a quarter.
On Monday, Payward filed a second amended complaint in the U.S. District Court in Colorado against Etana Custody and its CEO Dion Brandon Russell, alleging more than $25 million in client funds were misappropriated through what Kraken calls a "Ponzi-like" scheme. Etana is already in court-supervised liquidation. The receiver is in the building. The lawsuit is about who pays, and how much.
What Happened
The relationship between Kraken and Etana was a fiat on-ramp partnership that ran for years. Kraken says it entrusted Etana with hundreds of millions of dollars over that span, treating the custodian as a routine plumbing layer between bank rails and the exchange. As CoinDesk reported, the relationship cracked open in April 2025 when Kraken tried to withdraw roughly $25 million in reserve funds and got stalled.
According to the complaint, Etana responded with fabricated reconciliation issues and misleading explanations. The reason, Kraken alleges, was simple: the money wasn't there. Etana had allegedly commingled custodial assets with operating funds, spent them on operating expenses and risky investments, and was relying on new deposits to cover shortfalls. That's the textbook definition of the structure Kraken's filing labels Ponzi-like.
Two specific allocations stand out. Etana allegedly deployed at least $16 million of Kraken-related funds into promissory notes issued by Seabury Trade Capital, which later defaulted. Kraken says that money was never returned and may have been diverted to cover company expenses. Separately, Etana is accused of using customer assets to finance a foreign-exchange hedging strategy while keeping any investment income for itself. Throughout, Kraken alleges, Etana kept issuing account statements and dashboard updates showing balances as secure.
Colorado regulators moved in 2025, issuing a cease-and-desist order and raising capital requirements. Etana entered liquidation proceedings in November 2025 and is now under a court-appointed receiver. Kraken is seeking at least $25 million in damages, potential treble damages under civil theft claims, injunctive relief, and attorneys' fees. The complaint targets Russell personally, alleging he exercised near-total control. Matt Turetzky, Kraken's head of litigation, summed up the posture: "we will find you, we will sue you, and we will not stop until justice has been served."
Technical Anatomy
Strip away the legal language and the failure mode is depressingly familiar. A custodian holds segregated client assets. The custodian's internal ledger says the assets are intact. The custodian's actual on-balance-sheet position is something else entirely, because the assets have been pledged, lent, or invested. The dashboard you see as a client is a view over the internal ledger, not a view over reality. When everyone deposits more than they withdraw, nobody notices. The moment a single large client tries to pull, the gap surfaces.
The $16 million Seabury Trade Capital allocation is the most operationally interesting piece. Promissory notes are unsecured paper. Putting custodial reserves into unsecured paper is not a custody operation, it's a credit fund wearing a custody license. From a controls standpoint, this should have failed three different checks: an investment policy statement that limits asset deployment, a segregation control that prevents client funds from being used as principal, and a reconciliation process that ties client balances to specific identifiable assets at a bank or sub-custodian. None of those held.
The FX hedging allegation is the second tell. Using customer assets as margin for a hedging book while keeping the investment income is rehypothecation without consent and without disclosure. In traditional finance you'd need explicit signed agreements and the income economics would be negotiated. In crypto-adjacent custody, the controls were apparently informal enough that this could run.
The cover-up mechanism is the part every engineering lead should internalize. Kraken alleges Etana continued issuing account statements and dashboard updates showing customer balances as secure despite internal shortfalls. That's a reporting layer disconnected from the source-of-truth ledger. It's the same architectural smell that surfaced in multiple production incidents I've seen at fintechs: the customer-facing balance API reads from a cache or an internal accounting table, not from a settlement layer that reconciles to actual asset locations. When the two diverge, you don't get an alert, you get a lawsuit. My take: any custody dashboard that doesn't tie its displayed balance to a verifiable third-party attestation is just marketing.
Who Gets Burned
Start with the obvious: Etana's other clients. Kraken is the named plaintiff with $25 million on the line, but Etana served other exchanges and institutions in the same fiat on-ramp role. The receiver's claims pool is going to be larger than one lawsuit. Anyone who treated Etana as a passive plumbing vendor is now an unsecured creditor in a Colorado liquidation.
Next, mid-tier exchanges and brokers that rely on a single custodian or a single fiat on-ramp partner. The Kraken-Etana case is a reminder that vendor concentration in custody is balance-sheet risk, not procurement risk. Teams I've worked with at smaller venues often run with one banking partner and one custody partner because diligence is expensive. That's a fine posture until it isn't. The uncomfortable read: most exchanges below the top ten cannot survive a $25 million custodial loss without raising emergency capital or pausing withdrawals.
Institutional lenders and prime brokers in crypto are also exposed by association. Blockfills filed for bankruptcy in March 2026 after halting withdrawals, reporting roughly $75 million in losses, and facing its own lawsuit alleging misuse of customer funds. Two collapses inside two months in adjacent corners of the institutional stack is a pattern, not a coincidence. Counterparties to either firm should expect a fresh round of diligence questionnaires, capital calls, and tighter credit terms.
Regulators get a quieter win. Colorado already issued a cease-and-desist and raised capital requirements before the liquidation. Expect other state regulators and the SEC to cite this case as evidence that crypto custodians need the same segregation and audit standards as traditional trust companies. For platform leads, that means the compliance budget line item for 2026 just got harder to argue down.
Playbook for Crypto and DeFi
This week, do four things.
First, pull the list of every custodian, fiat on-ramp partner, and prime broker holding more than 1% of your treasury or client float. For each one, document the legal entity, the jurisdiction, the segregation language in the agreement, and the last time you received a third-party attestation of holdings. If the answer to the last question is "never" or "more than 12 months ago," that vendor is now on a watchlist.
Second, write a withdrawal drill into your operations calendar. Quarterly, request a non-trivial withdrawal from each custodian and time the response. Etana's $25 million stall lasted long enough to be litigated. A drill that surfaces a multi-day delay is a leading indicator worth more than any SOC 2 report.
Third, if you operate a custody dashboard or a balance API, audit the data lineage from the displayed number back to the asset location. The number on the screen should be derivable from a reconciliation against an external attestation, not from an internal accounting entry. If your engineers can't draw that lineage on a whiteboard in five minutes, you have a reporting layer that can lie.
Fourth, diversify counterparty exposure even if it costs basis points. Bitcoin sat at $80,338.23 at publication, down 2.05% on the day. Margins are thinner than they were a year ago, and the temptation to consolidate vendors for cost reasons is real. Don't. The cost of a $25 million write-off is two engineers worth of budget for a decade on a 10-person team. Pay the spread.
Key Takeaways
- Kraken alleges Etana misappropriated more than $25 million through commingling, a defaulted $16 million Seabury promissory note bet, and an unauthorized FX hedging strategy.
- The case is the second major institutional crypto failure in two months, following Blockfills' March 2026 bankruptcy and roughly $75 million in losses.
- The architectural failure mode is a customer dashboard disconnected from a real reconciliation against asset locations. Audit your own balance API this week.
- Vendor concentration in custody and fiat rails is balance-sheet risk. One-custodian setups should be on every CTO's risk register by Friday.
- Expect tighter capital and segregation rules from US state and federal regulators, with Colorado's 2025 actions against Etana as the template.
Frequently Asked Questions
Q: What is Kraken accusing Etana of doing?
Kraken's parent Payward alleges Etana commingled custodial client assets with operating funds, spent them on expenses and risky investments including $16 million in defaulted Seabury Trade Capital promissory notes, and used customer assets to back an FX hedging strategy. Kraken calls the structure "Ponzi-like" because Etana allegedly relied on new deposits to cover shortfalls while reporting balances as intact.
Q: How much money is at stake and what is Kraken seeking?
Kraken says more than $25 million in client funds were misappropriated and is seeking at least that amount in damages. The complaint also asks for potential treble damages under civil theft claims, plus injunctive relief and attorneys' fees, and names Etana CEO Dion Brandon Russell personally for allegedly directing the misconduct.
Q: What does this mean for other crypto exchanges and custodians?
It puts custodian counterparty risk back at the top of the agenda. Etana entered liquidation in November 2025 under a court-appointed receiver after Colorado regulators issued a cease-and-desist and raised capital requirements. Combined with Blockfills' March 2026 bankruptcy, expect tighter regulatory scrutiny, more frequent attestation demands, and pressure on exchanges to diversify custody and fiat on-ramp partners.
Copy Fail: 732 Bytes of Python vs Every Linux Crypto Node Since 2017
A 732-byte Python script can escalate to root on Linux kernels shipped since 2017. CISA added Copy Fail to KEV on May 1. Crypto infrastructure is squarely in scope.
Solana Ships Production Post-Quantum Signatures, Ethereum Still Researching
Solana shipped NIST-approved Falcon signatures across Anza and Firedancer while Ethereum sits in research. For $60B in staked SOL, that timing matters.
Ronin Drops Sidechain for OP Stack: Gaming's L2 Verdict
Ronin's May 12 move from independent sidechain to OP Stack rollup is a verdict on the post-2022 security math, and a signal for every gaming infra buyer.

