Armani Ferrante, founder and CEO of crypto exchange Backpack, is calling on the entire industry to adopt mandatory withdrawal delays as a standard security measure. He made the case on July 15, arguing that any custody system becomes 'immediately more secure' with a delay, with no exceptions. His comments came as an $18 million exploit on the Arbitrum-based decentralized exchange Ostium underscored the very risk he aims to mitigate.
The logic behind slowing withdrawals
Ferrante's argument rests on a simple premise: instant withdrawals leave no room for error. If a hacker compromises private keys or exploits a vulnerability, funds can vanish before anyone notices. A mandatory delay, even a short one, creates a window for detection, intervention, and recovery. He is essentially advocating for the end of instant settlement as a default feature across all crypto platforms.
The Ostium exploit as a real-time example
Ostium, an Arbitrum-based decentralized exchange, suffered an oracle exploit that drained approximately $18 million in USDC, representing about 28% of its total value locked of $63 million. The attacker used a compromised oracle signer key to manipulate future-dated prices, feeding the protocol fake data to extract real funds. Ostium halted trading temporarily as investigations began. The protocol had previously raised $27.8 million from investors including General Catalyst and Coinbase Ventures.
A mandatory withdrawal delay would not have prevented the oracle manipulation itself, but it could have given Ostium's team time to detect the anomalous withdrawals and freeze them before the funds left the protocol entirely. That window is exactly what Ferrante wants to institutionalize.
Backpack's transparency-first philosophy
Ferrante is not just talking theory. Backpack has positioned itself as a transparency-first exchange, publishing daily proof-of-reserves attestations using zero-knowledge proofs. This approach emerged from the wreckage of FTX, which collapsed after misusing customer funds for years. Backpack's ZK-proof attestations are designed to make that kind of fraud architecturally difficult. Adding withdrawal delays fits neatly into that philosophy: if you are already committed to proving your reserves daily, adding a time buffer on outflows is a logical next step.
Trade-offs for traders and investors
For traders and investors, withdrawal delays are an easy litmus test. A platform willing to sacrifice some user convenience for better security is signaling that it prioritizes asset protection over growth metrics. However, mandatory delays come with real trade-offs. In volatile markets, the inability to move funds instantly can mean missing liquidation deadlines or failing to rebalance positions in time. For institutional traders operating with tight risk parameters, even a short delay could be operationally significant. The industry now faces a choice between speed and safety.