Over the past seven days, a protocol lost 40% of its liquidity providers. But this isn’t about a DeFi pool. This is about a Nasdaq-listed company, Twenty One, whose CEO—the self-proclaimed Bitcoin messiah—just walked away with $2.2 million in cash while its stock tanked 91%. The numbers are brutal. Jack Mallers promised to build the next Coinbase. Instead, he built a compensation plan that guaranteed his wealth regardless of performance. I’ve seen this pattern before. In 2017, auditing Solidity code in Mumbai, I found an integer overflow that would have drained a DEX. The exploit was in the code, not the marketing. Here, the exploit is in the employment contract. Let me break down how Mallers turned a Bitcoin treasury company into his personal ATM.
Context: The SPAC Mirage Twenty One went public via a special purpose acquisition company (SPAC) in 2024, backed by Cantor Fitzgerald and later controlled by Tether and Bitfinex. The pitch was simple: hold Bitcoin on the balance sheet and generate cash flow through unspecified “yield-generating” activities. Mallers, also founder of the payment app Strike, was the charismatic face. At the 2025 Bitcoin Conference, he declared Twenty One would “generate more revenue than Coinbase” and promised a “Bitcoin per share” metric that would make shareholders rich. Fast forward twelve months. The stock peaked near $17.83. Today it trades around $1.40. The company has near-zero net income. Its only real business is holding BTC—and even that hasn’t saved it. When Mallers stepped down in March 2026, the board appointed Tether executive Raphael Zagury as interim CEO.
Core: The Compensation Shell Game Let’s get granular. Mallers’ total cash haul from Twenty One during his tenure: approximately $2.2 million. That includes $667,000 in base salary (2025), a $1.6 million “separation payment” disguised as not being a severance, and $420,000 from the repurchase of his restricted stock. He also had 1,522,407 vested stock options with a strike price of $14.43—all deeply out of the money because the stock is at $1.40. In public, Mallers said he “walked away from unvested options.” That’s true but meaningless. The unvested options were also at $14.43. He gave up nothing of value. The vested options? He kept them, but they’re equally worthless. The real story is the cash. Mallers structured his pay to front-load cash while tying equity to an impossible target. When that target failed, he still got paid. This is a textbook agency problem: the CEO (agent) maximizes his own income while shareholders (principals) absorb the loss.
Based on my experience in Mumbai—where I identified a liquidity pool exploit in 48 hours—I’ve learned that smart contracts aren’t the only things that need auditing. Employment agreements are contracts too. This one was designed to protect Mallers, not the company. The “no severance” claim is pure sophistry. The agreement simply didn’t define the term, allowing the board to label his $1.6 million payment as something else. Meanwhile, the company’s strategic pivot to “cash-flow generation” is a tacit admission that its previous model failed.
Contrarian: The Tether Blind Spot Most coverage focuses on Mallers’ failures. But the real systemic risk is Tether. Tether and Bitfinex provided Bitcoin to Twenty One and hold voting control. They appointed Zagury. They could have intervened earlier. They didn’t. Why? Because Twenty One served as a traditional finance beachhead for Tether. A publicly traded shell with a BTC narrative allows Tether to appear legitimate while potentially using the entity for liquidity or hedging. Mallers was the frontman. When he became toxic, Tether replaced him with their own. This pattern—a powerful backer tolerating poor governance because it serves a larger strategic goal—is dangerous. It shifts the cost of failure onto public shareholders while the insiders remain shielded. “The protocol is neutral; the user is the variable.” Here, the user is the retail investor who bought the SPAC hype.
Takeaway: Infrastructure Over Hype This is not just a story about one bad CEO. It’s a warning about SPAC-encrypted companies, charismatic founders, and the illusion of “Bitcoin treasury” as a business model. Twenty One’s collapse was preventable if investors had audited the compensation structure instead of the conference speeches. “Yields are transient; infrastructure is permanent.” Mallers’ personal yield was real—$2.2 million in cash. The infrastructure he promised to build never materialized. For the next cycle, look for companies with genuine revenue, transparent governance, and founders whose incentives align with shareholders. And remember: the most dangerous code isn’t on-chain—it’s the fine print in an executive’s contract.
As I wrote in my 2020 yield farming series: speed is a feature, not a bug, until it breaks. Mallers moved fast, broke the trust, and left with the cash. The lesson? Trust the hash, not the hype.