Module 16: Postmortems
Common Patterns Across Failures
Chapter 11 of 12 · about 4 minutes
11.1 Different stories, same shapes
After nine case studies, Mint noticed something. "The details are all different. An exchange in Tokyo, a smart contract, a Ponzi scheme, a Canadian exchange, a stablecoin, lenders, FTX, hackers, a liquidation cascade. But the warning signs keep repeating."
"That's the point of this module," said Hash. "Crypto failures don't repeat exactly. But they rhyme. Learn the rhymes, and you'll recognise the next one."
11.2 The ten recurring warning signs
| # | Warning sign | Cases where it appeared |
|---|---|---|
| 1 | Withdrawal delays or freezes | Mt. Gox, QuadrigaCX, Celsius, FTX |
| 2 | Yields or returns that are guaranteed, unexplained, or far above safe rates | BitConnect, Terra, Celsius |
| 3 | Opacity about where funds are held or how they're used | Mt. Gox, QuadrigaCX, Celsius, FTX |
| 4 | Concentrated control: one person, one key, or a few signers | QuadrigaCX, FTX, Ronin |
| 5 | Conflicts of interest and related-party dealings | FTX, Celsius |
| 6 | Reflexive structures where value depends on confidence in a related token | Terra, FTX |
| 7 | New or complex code holding large value | The DAO, bridges, DeFi hacks |
| 8 | Excessive leverage across the system | 3AC, the 2022 lenders, October 2025 cascade |
| 9 | Hype, celebrity promotion, and reputation as a substitute for evidence | ICOs, BitConnect, FTX, Terra |
| 10 | Security processes vulnerable to people and interfaces | Ronin, Bybit, 2026 hacks |
11.3 Mapping warning signs to defences
| Warning sign | Your defence | Module |
|---|---|---|
| Withdrawal delays | Withdraw early; keep long-term holdings in self-custody | Modules 1 and 2 |
| Unexplained yields | Trace every yield to its source; compare with safe rates | Module 15, Chapter 10 |
| Opacity | Prefer transparent protocols and regulated, audited platforms | Modules 9 and 14 |
| Concentrated control | Check governance, custody, and key management | Modules 2 and 5 |
| Conflicts of interest | Investigate related parties and incentives | Module 5, Chapter 11 |
| Reflexive structures | Ask what backs the value, and whether it depends on itself | Modules 5 and 9 |
| New, complex code | Size positions to survive total loss; value time without incident | Module 9, Chapter 13 |
| Excessive leverage | Keep your own leverage low; watch market positioning | Modules 7 and 12 |
| Hype as evidence | Check usage, value capture, and narrative stage | Module 11 |
| Process vulnerabilities | Read what you sign; use independent multisig; beware social engineering | Module 2 |
11.4 The deeper patterns
Beyond specific warning signs, three deeper patterns appear across almost every case.
1. Trust replaced verification. People trusted size, reputation, founders, investors, marketing, or code they hadn't examined. In each case, the information needed to verify was either missing, ignored, or deliberately hidden.
2. Incentives rewarded risk-taking. Founders, funds, and users were rewarded for growth and yield during good times, while the risks only showed up in bad times.
3. Leverage and connections turned problems into crises. Individual failures became industry-wide collapses because of borrowed money and hidden links between platforms (Module 9, Chapter 12).
"So the biggest lesson isn't 'avoid exchange X' or 'avoid token Y,'" said Node. "It's 'verify, don't trust.'"
"Which is, fittingly, the founding idea of Bitcoin itself," said Hash. "A system designed so you don't have to trust a bank. The irony is how often people recreated trust-based systems on top of it."
11.5 What hasn't failed
It's worth noticing what kept working through all these crises:
| Kept working | Why it matters |
|---|---|
| The Bitcoin and Ethereum base layers | Core protocols kept producing blocks through every crisis |
| Well-tested, transparent DeFi protocols | Many liquidated positions automatically and stayed solvent in 2022 |
| Self-custodied assets with good security | Unaffected by exchange and lender failures |
| Unleveraged long-term holders with sound personal finances | Could wait for recoveries (Module 15) |
The failures were mostly in the layers built on top: intermediaries, opaque products, leverage, and insecure processes.
11.6 Try it yourself
Compare the list of warning signs you wrote at the start of this module (Chapter 1) with the ten in section 11.2. Which did you anticipate, and which did you miss? Then apply all ten to every platform and protocol you currently use, noting any that show two or more signs.
Key takeaways from this chapter
- Crypto failures differ in details but repeat ten recurring warning signs.
- The signs are withdrawal delays, unexplained yields, opacity, concentrated control, conflicts of interest, reflexive structures, new complex code, excessive leverage, hype as evidence, and vulnerable security processes.
- Each warning sign has a defence taught earlier in this series.
- Deeper patterns: trust replaced verification, incentives rewarded risk, and leverage plus connections turned problems into crises.
- Base layers, transparent DeFi, good self-custody, and unleveraged holders with sound finances kept working through crises.
- The core lesson is "verify, don't trust," the founding idea of Bitcoin itself.