The Outlier Lab

Case Study - Robinhood Infinite Leverage Glitch (2019)

In November 2019, Robinhood Gold users found that a buying-power calculation counted borrowed-money option sales as their own capital, enabling outsized leverage; Robinhood restricted accounts and patched the system.

What happened

Conceptually, margin buying power should come from the customer's equity. Robinhood's calculation treated proceeds from certain option sales, which were funded with borrowed money, as if they were the customer's capital. Leverage fed on itself, because more borrowing produced more buying power. This is a Business Logic Exploitation in the risk engine, and no outside intrusion was involved.

As with the Chase "glitch" five years later, the crowd found it: the people exploiting it were real, identified customers who discovered the behavior and shared it publicly. Screenshots of oversized positions spread on social media and, for many, losses followed (one user posted the loss of about $50,000 of borrowed buying power on a put-option bet).

When a heavily leveraged position moves against a customer whose real equity is a few thousand dollars, the broker absorbs the shortfall as an unsecured debit balance. Economically this is First-Party Fraud or credit loss on uncollateralized lending, which is a classification problem for Loss Taxonomy and Attribution.

About a month later, press reported claims of a follow-on variant: a different multi-leg options order type could still produce excess buying power while orders were pending. Robinhood said it would hold collateral for options positions from the pending state.

Diagram: Small margin deposit, Option sale proceeds counted as own capital, Buying power inflated, More borrowing, Outsized position, Adverse move: broker absorbs debit balance

Timeline

DateEvent
April 2019Robinhood applies for a national bank charter (context)
Early November 2019WallStreetBets users publicize the "infinite money" behavior
November 5, 2019Bloomberg reports the flaw. Robinhood says it is aware of isolated situations and contacting customers.
November 7, 2019Robinhood says it identified a small number of accounts with problematic trading, restricted them, and made a permanent system change, with continued monitoring
Late November 2019Robinhood withdraws its bank charter application. Press notes the timing after the glitch, but no causal link was stated.
Early December 2019Reports of a variant using pending multi-leg options orders. Robinhood says it will hold collateral from the pending state.
June 30, 2021FINRA fines Robinhood Financial $57M and orders about $12.6M in restitution plus interest, then a record. Findings include negligently giving customers false or misleading information, at times since September 2016, about margin eligibility, cash balances, buying power and margin calls. FINRA does not tie the findings to the November 2019 incident.

Mechanisms involved

Control gaps

GapWhy it mattered
Buying-power logic not independently validated for complex option combinationsA mis-specified rule fed on itself (New Product and Promo Launch Review, Model Risk Management)
No ceiling on leverage relative to deposited equityPositions of hundreds of times equity were possible (Velocity and Exposure Limits)
No real-time alert on buying power far exceeding account equityThe anomaly showed up on social media first (Trading Pattern Signals, Transaction Pattern Anomalies)
Pending-order state not collateralizedIt allowed a follow-on variant

Detection and response

Public reporting shows a social-media-first discovery, a holding statement on day one, and account restrictions plus a system fix within about 48 hours of the Bloomberg story. That timing is reasonable once the problem was known. The weakness was the detection gap before that. A follow-on variant through a different order state suggests the first fix addressed the specific path rather than the general rule that buying power should never exceed what equity and collateral support.

Outcome

AreaOutcome
CompanyAccounts restricted, system patched, monitoring added. No public loss figure.
Regulatory (adjacent)FINRA's June 2021 action ($57M fine, ~$12.6M restitution) shows regulators treat buying-power and margin displays as a customer-protection issue in their own right, apart from any fraud by customers.
CustomersSome reported large losses on borrowed buying power. Commentators noted possible restitution or securities-fraud exposure for users who knowingly exploited the error. No resulting cases were found.
ReputationalThe incident came amid regulatory skepticism of Robinhood's banking ambitions. The charter application was withdrawn weeks later.

Lessons for practitioners

  1. Treat buying-power and credit logic as fraud surface. Margin, instant deposits and provisional rewards are all forms of extending credit. Put invariant checks in production, such as "buying power can't exceed what equity and collateral support," and alert when they break (Playbook - Business Logic Exploit Response Members).
  2. Fix the general invariant. The variant that followed shows why patching one order type isn't enough. Re-test the general rule across all order states (pending, partially filled, multi-leg) (Fraud Strategy Lifecycle).
  3. Watch the forums. WallStreetBets is effectively a crowdsourced test team. Monitoring social channels for your brand plus "glitch" or "free money" is cheap early warning (Threat Intelligence and Horizon Scanning).
  4. Have a kill switch ready. Restricting affected accounts in hours depends on a pre-approved authority to freeze a feature or cohort (Fraud Incident Response).
  5. Decide how to classify the loss. First-party abuse of an error sits between third-party fraud and ordinary credit loss. Pick a category so it doesn't disappear into credit losses (Loss Taxonomy and Attribution, Fraud Labeling and Feedback Loops).
  6. The pattern travels. Compare Case Study - Pinduoduo Coupon Exploit (2019) (promo logic) and Case Study - Chase Infinite Money Glitch (2024) (funds availability). In each case value was extended ahead of what existed, and the crowd found the gap. See Brokerage and Investing.

Sources