FTX has restored full access to its claims portal, allowing customers of the bankrupt crypto exchange to continue filing and managing claims related to losses from the company’s collapse in November 2022. The update comes after FTX temporarily froze some user accounts in late August following a cybersecurity incident involving Kroll, the claims agent handling parts of the bankruptcy process.
In a public update posted on X, FTX said that all accounts affected by the incident have now been unfrozen after the company completed its review and assessment of the breach. The exchange also said it has implemented additional security measures to strengthen protections around the portal as claimants return to the platform.
Claims Portal Back Online
The restoration of full access is an important step for FTX customers and creditors who are trying to navigate the bankruptcy claims process. The portal plays a central role in allowing users to review claim information, submit documentation, and continue administrative steps tied to the exchange’s ongoing restructuring and asset recovery efforts.
FTX had suspended some accounts shortly after Kroll disclosed the security incident on Aug. 25. At the time, the move was presented as a precaution designed to protect users whose data may have been exposed. With the latest announcement, FTX is signaling that it believes the portal can once again support normal claimant activity.
What Happened in the Kroll Incident
According to Kroll, the breach stemmed from a highly sophisticated SIM-swapping attack targeting a T-Mobile US account belonging to one of its employees. The firm said the attacker was able to gain control of the employee’s phone number after it was transferred to the threat actor’s device without authorization from Kroll or the employee.
Kroll said the attacker then appears to have accessed certain files containing personal information tied to bankruptcy claimants in the cases of FTX, Blockfi, and Genesis. While the incident raised immediate concerns over sensitive claimant data, Kroll emphasized that it took steps to secure the affected accounts and stated that it had found no evidence that other systems or accounts had been compromised.
The case underscored the operational risks that can emerge even when core exchange infrastructure is not directly breached. In this instance, the exposure was linked to a third-party claims administrator rather than a direct attack on FTX’s own trading or custody systems. Even so, for creditors and former users already dealing with the fallout of FTX’s collapse, the incident added another layer of uncertainty to an already complex claims process.
Security Response and User Confidence
FTX has not detailed every new safeguard added to the claims portal, but its latest statement makes clear that the company reviewed the event before reopening access in full. By unfreezing all affected accounts, FTX appears to be trying to balance security controls with the need to keep the bankruptcy process moving forward.
For users, the reopening may provide some reassurance, but confidence is likely to depend on how clearly the estate and its service providers communicate about data protection, account monitoring, and future risk mitigation. Claimants in bankruptcy proceedings often need to submit or confirm sensitive identifying information, making portal security especially important.
The incident also highlights a broader issue for the digital asset sector and the restructuring industry: security vulnerabilities in telecom processes and third-party service relationships can create real downstream consequences. Even when a compromise is limited in scope, a breach involving claimant data can disrupt legal and administrative workflows, trigger account freezes, and complicate recovery efforts for creditors.
Bankruptcy Process Continues Alongside Asset Sales
The portal reopening comes as FTX’s bankruptcy estate continues to work through asset liquidation and creditor repayment plans. According to the report, FTX received approval from a bankruptcy judge to liquidate more than $3.4 billion in digital assets in order to repay creditors.
The disclosed holdings include around $560 million in bitcoin, roughly $192 million in ether, and approximately $1.16 billion in solana. These figures illustrate the scale and complexity of the estate’s crypto exposure and explain why the market has closely watched each step in the bankruptcy proceedings. Large asset sales tied to a major failed exchange can influence both creditor recovery expectations and sentiment across the broader crypto market.
At the same time, the claims portal remains a practical touchpoint for affected users. While liquidation headlines often focus on the size of token holdings, many former customers are more concerned with whether they can safely access their accounts, verify claim details, and participate in the legal process without further disruption.
Why the Update Matters
The reopening of the claims portal does not resolve the larger questions surrounding FTX’s collapse, creditor recoveries, or data security concerns. However, it does mark a meaningful operational milestone. Restoring full access means the bankruptcy estate can continue processing claims with fewer interruptions, and it allows affected customers to resume actions that may be critical to their recovery efforts.
Still, the Kroll incident serves as a reminder that bankruptcy administration in the crypto industry is not just a financial and legal challenge but also a cybersecurity one. Sensitive claimant information, external service providers, and high public visibility combine to create a complex risk environment.
For now, FTX’s message is straightforward: the claims portal is operational again, impacted accounts have been unfrozen, and added safeguards are in place. Whether that will be enough to fully restore user trust may depend on the portal’s performance in the weeks ahead and on whether any further details emerge about how claimant information was exposed and protected after the breach.