HostDeFi › Is Backpack legit

Is Backpack legit? The exchange born inside FTX's wreckage that bought a piece of it back

Backpack has the most unusual legitimacy file in crypto: an exchange whose parent company lost $14.5 million when FTX collapsed, built back anyway, got licensed in Dubai — then bought FTX's European arm for ~$32.7M to take its MiFID II license and inherit its ~110,000 users. Every step is documented.

Legitimacy assessment · updated 2026-09-28 · not financial advice

“Is Backpack legit” gets asked because its story sounds manufactured: the company that lost the most to FTX ended up owning a piece of FTX. But every strange beat is public-record — registered entities, a Dubai license, a documented acquisition, and a founder who wrote the whole story as it happened.

Every claim below names its source and date.

The company is real, named, and licensed

Backpack is built by Coral, founded by Armani Ferrante (ex-0x/Apple engineer, creator of the Anchor Solana framework) and Tristan Yver (ex-FTX US head of strategy) — both named, public operators with long documented track records. The exchange entity operates under a Dubai VARA (Virtual Assets Regulatory Authority) license — a real regulatory license in a real jurisdiction, not a paper registration.

The company's other product line is equally documented: Mad Lads (a top Solana NFT collection it created), the xNFT executable-app standard, and the Backpack wallet — an actual software suite with users, not a landing page.

The Anchor provenance matters more than it sounds: Ferrante wrote the framework most Solana programs are built in — the company's founder is quite literally the author of the tooling the ecosystem runs on. That is a developer-credibility fact that no anonymous team can imitate and no marketing budget can buy.

The FTX origin story, verified

The September-2022 file is the unusual part: Coral raised a $20 million strategic round co-led by FTX Ventures and Jump Crypto — and then lost ~$14.5 million of it when FTX collapsed two months later, because the treasury had been held on the exchange. Ferrante publicly described the aftermath as “cockroach mode” — the company survived on almost nothing while shipping anyway.

That origin is the opposite of a scam signal: it is a documented catastrophe that a real company survived in public, with receipts — the loss amount, the round structure, and the survival story all on record.

There is a useful contrast with how actual fraud collapses look: FTX-style implosions produce bankruptcies, clawbacks, and vanished founders. Coral's version produced a public loss disclosure, a team that kept shipping through it, and products (Mad Lads, the exchange) that were built in the aftermath rather than before it — the scar tissue is part of the documented file.

It is also the kind of founding story that produces a specific kind of company: one that learned counterparty risk by losing to it. An exchange whose first treasury was destroyed by a fraudulent exchange has, as an institutional memory, a more visceral understanding of why custody and licensing matter than a team that only read about it — which is part of why the licensing record is genuinely earned by experience rather than merely claimed on a page.

The FTX EU acquisition — the strangest legitimate move of 2025

On January 7, 2025, Backpack acquired FTX EU — the collapsed exchange's European subsidiary — for approximately $32.7 million, gaining its MiFID II financial license and its ~110,000 KYC'd users, and taking on the duty of distributing claims to former FTX EU customers. The FTX bankruptcy estate initially disputed whether the sale was properly authorized; the dispute was later resolved.

Read what that means for legitimacy: a regulator-issued MiFID II license — the real EU financial-instrument license, not a VASP registration — now sits inside Backpack's corporate structure, acquired through a documented court-adjacent process. A fake company does not end up owning the licensed remnant of the most scrutinized bankruptcy in crypto history.

It is also worth being exact about what the license is: MiFID II is the EU's real financial-instruments regime — the license that lets a venue offer regulated derivatives to European users — not a lightweight crypto registration. Acquiring it by purchase rather than application was the fast path, and the fact that it withstood the estate's own scrutiny (the initial dispute, then resolution) is itself a legitimacy signal: the transaction survived adversarial review.

What legitimacy does and doesn't cover

Backpack's file answers the company question thoroughly — named founders, a real Dubai license, a real EU MiFID II license, documented products across wallet, NFTs, and exchange, and a survival record through the worst possible founding catastrophe. It does not answer the venue-risk question: it is a centralized exchange, it holds user funds, and its small size means the failure mode is real even if the entity is real.

The honest nuance the cheerleading skips: the FTX EU acquisition makes Backpack simultaneously more legitimate (licensed, supervised) and more complicated (it inherited a creditor-relations obligation inside the biggest fraud bankruptcy in crypto). Both are true at once.

What the FTX thread actually proves

There is a symmetry in the Backpack file that is easy to miss: the company was nearly killed by an exchange fraud, and then bought a regulated piece of that same exchange's wreckage. The creditors it now owes distributions to are, in a real sense, its predecessors' victims — and taking on that obligation was a choice, not an accident.

For the legitimacy question this cuts the right way twice: the original loss proves the company is not a paper entity (frauds do not get victimized by other frauds and survive to tell it), and the acquisition proves it operates at a level where regulators, courts, and a bankruptcy estate were all party to the transaction. The whole arc happened in public, in documents, with adversaries checking the work.

The verdict, precisely

Is Backpack legit? Yes — verifiably: named public founders, a Dubai VARA license, an EU MiFID II license acquired through a documented purchase, a real product suite, and the most-documented survival story in the cohort losing $14.5M to FTX and building back anyway). The honest caveat is size, not existence — it is a small centralized exchange, and its legitimacy as an entity is stronger than its demonstrated durability at scale.

For the reader the practical split is: as an entity Backpack is verifiably real — two jurisdictions’ licenses, named founders, a documented acquisition, and a survival story with the receipts still public. As a counterparty it carries the ordinary (and real) risk of a small centralized exchange holding user funds — a category of risk that legitimacy does not remove, only situates honestly — and it is the caveat to carry, not the one to skip.

Frequently asked