Knight Capital's order router sends millions of unintended orders in 45 minutes, 1 August 2012
The typed evidence object. This is the working store; the case page is the reader's form.
| Layer / facet | Value | Type | Sources | Conf. |
|---|---|---|---|---|
| Mandate: principal | Knight Capital Americas, a broker-dealer with market access | fact | In the Matter of Knight Capital Americas LLC, Exchange Act Release No. 70694, Administrative Proceeding File No. 3-15570 (SEC order); SEC press release 2013-222, "SEC Charges Knight Capital With Violations of Market Access Rule" | high |
| Mandate: objective | Fill 212 small retail orders received from customers | fact | In the Matter of Knight Capital Americas LLC, Exchange Act Release No. 70694, Administrative Proceeding File No. 3-15570 (SEC order); SEC press release 2013-222, "SEC Charges Knight Capital With Violations of Market Access Rule" | high |
| Actor | The SMARS router; a repurposed flag activated old Power Peg code still present on an eighth server that had not received the new code | assertion | In the Matter of Knight Capital Americas LLC, Exchange Act Release No. 70694, Administrative Proceeding File No. 3-15570 (SEC order) | high |
| Inputs | Orders carrying the repurposed flag; 97 automated emails before the open identified an error but were not designed as alerts and were not acted on | fact | In the Matter of Knight Capital Americas LLC, Exchange Act Release No. 70694, Administrative Proceeding File No. 3-15570 (SEC order) | high |
| Decision | Power Peg's cumulative-quantity check had been moved in 2005 and never retested, so the code no longer stopped sending child orders when a parent was filled | assertion | In the Matter of Knight Capital Americas LLC, Exchange Act Release No. 70694, Administrative Proceeding File No. 3-15570 (SEC order) | high |
| Envelope: constraints | The account was not linked to pre-set firm-wide capital thresholds, and position limits did not account for exposure from outstanding orders | assertion | In the Matter of Knight Capital Americas LLC, Exchange Act Release No. 70694, Administrative Proceeding File No. 3-15570 (SEC order) | high |
| Action | Millions of orders routed in about 45 minutes to fill 212 parent orders, producing over 4 million executions in 154 stocks for more than 397 million shares; a net long position of about $3.5 billion in 80 stocks and a net short position of about $3.15 billion in 74 stocks (SEC order, paragraph 1). The SEC press release summarises this as 'more than 4 million orders'. | fact | In the Matter of Knight Capital Americas LLC, Exchange Act Release No. 70694, Administrative Proceeding File No. 3-15570 (SEC order); SEC press release 2013-222, "SEC Charges Knight Capital With Violations of Market Access Rule" | high |
| Outcome | State: harm. Loss of more than $460 million; Knight Capital Group merged with GETCO into KCG Holdings on 1 July 2013; KCG was acquired by Virtu Financial on 20 July 2017. As of 2017. | fact | In the Matter of Knight Capital Americas LLC, Exchange Act Release No. 70694, Administrative Proceeding File No. 3-15570 (SEC order); SEC press release 2013-222, "SEC Charges Knight Capital With Violations of Market Access Rule"; KCG Holdings, Form 8-K12G3 and Exhibit 99.1 on completion of the Knight Capital Group and GETCO merger, July 2013; Virtu Financial Completes Acquisition Of KCG Holdings (press release, Form 8-K Exhibit 99.1) | high |
| Evidence: event | SEC order narrates the deployment, the flag, the eighth server, and the 45 minutes | fact | In the Matter of Knight Capital Americas LLC, Exchange Act Release No. 70694, Administrative Proceeding File No. 3-15570 (SEC order) | high |
| Evidence: causality | SEC found Knight lacked adequate safeguards to limit market-access risk and failed to review its controls | assertion | SEC press release 2013-222, "SEC Charges Knight Capital With Violations of Market Access Rule" | high |
| Recovery: automated fallback | None; Knight had no procedures to halt the router in response to its own aberrant activity | interpretation | In the Matter of Knight Capital Americas LLC, Exchange Act Release No. 70694, Administrative Proceeding File No. 3-15570 (SEC order) | high |
| Recovery: technical | Knight's technology team tried to identify and fix the problem while the orders were going out; removing the new code from the seven correctly deployed servers made it worse by sending more parent orders to the Power Peg code (SEC order, paragraph 27). The order says Knight stopped sending the orders after about 45 minutes but does not say how. | fact | In the Matter of Knight Capital Americas LLC, Exchange Act Release No. 70694, Administrative Proceeding File No. 3-15570 (SEC order) | high |
| Recovery: accountability | $12 million penalty, censure, cease-and-desist, independent consultant review; consented without admitting or denying | fact | SEC press release 2013-222, "SEC Charges Knight Capital With Violations of Market Access Rule" | high |
Controls
| Status | Control | Canonical |
|---|---|---|
| failed | Alerting design (SEC order, paragraph 19: the 97 'Power Peg disabled' emails were not designed as system alerts and were generally not reviewed; paragraph 41: integrating these reject messages into monitoring 'could have prevented the events of August 1') | C-I4 Warnings designed as alerts |
| failed | Deployment verification across servers; Second-technician deployment review (absent); Regression testing of dormant code (absent). SEC order, paragraph 9(A): no controls reasonably designed to prevent the entry of erroneous orders 'at a point immediately prior to the submission of orders to the market'; paragraph 21: no adequate controls in SMARS to prevent erroneous orders; paragraph 41: a double-check of the deployment 'could have identified that a server had been missed' and retesting the Power Peg code in 2005 could have identified the disabled cumulative-quantity function | C-D1 Pre-execution validation |
| absent | Kill switch (SEC order, paragraph 21: no procedures 'to halt SMARS's operations in response to its own aberrant activity'; paragraph 42: no clear guidance on when to disconnect a malfunctioning system from the market) | C-X2 Kill switch faster than the actor |
| absent | Firm-wide capital threshold (SEC order, paragraphs 9(B) and 22: Knight 'did not have pre-set capital thresholds in the aggregate for the firm' and its position limits 'did not account for the firm's exposure from outstanding orders') | C-X1 Rate and magnitude limits |
Unmapped
- Pre-action warning available to the principal (the 97 emails): no layer holds warnings that precede the action
Inference
inference The Securities and Exchange Commission's order shows failures from deployment to recovery: a deployment that missed one of eight servers with no second review, 97 reject emails before the open that were not designed as alerts, dormant code moved in 2005 and never retested, no firm-wide capital threshold linked to order entry, and no procedure to halt the router. The order names three controls that it says could have averted or identified the problem: a double-check of the deployment, treating the reject emails as alerts, and retesting the code in 2005. It also finds the router kept sending orders because no firm-wide capital threshold was linked to order entry, but does not say how much of the loss a threshold would have prevented; that it would have bounded the loss is the Register's reading, because a threshold limits exposure whatever the cause. The record does not say how the orders were stopped.
Sources
| ID | Record | Type | Link |
|---|---|---|---|
| SEC-ORD | In the Matter of Knight Capital Americas LLC, Exchange Act Release No. 70694, Administrative Proceeding File No. 3-15570 (SEC order) | regulator primary record | sec.gov ↗ checked 2026-10-20 |
| SEC-PR | SEC press release 2013-222, "SEC Charges Knight Capital With Violations of Market Access Rule" | regulator primary record | sec.gov ↗ checked 2026-10-20 |
| KCG | KCG Holdings, Form 8-K12G3 and Exhibit 99.1 on completion of the Knight Capital Group and GETCO merger, July 2013 | company primary record | sec.gov ↗ checked 2026-10-20 |
| VIRTU | Virtu Financial Completes Acquisition Of KCG Holdings (press release, Form 8-K Exhibit 99.1) | company primary record | sec.gov ↗ checked 2026-10-20 |