$950 Million Short, Two Perfect Timings: The Suspicion of Insider Trading in Crude Oil Before Trump's Ceasefire

marsbitPublished on 2026-04-09Last updated on 2026-04-09

Abstract

On April 7, 2026, approximately three hours before former President Trump announced a two-week ceasefire with Iran, an unusually large sell order of 8,600 crude oil futures contracts (worth $950 million) was executed during a low-liquidity trading window. This triggered a 15% drop in oil prices the next day. A nearly identical trading pattern occurred on March 22, just minutes before Trump delayed strikes on Iranian energy facilities. The trades, involving both Brent and WTI crude, displayed a repeated "signature" of 6,200 contracts, suggesting possible insider trading. In the March 22 incident, the oil short was accompanied by coordinated long positions in S&P 500 E-mini futures and additional WTI shorts, forming a paired trade betting on de-escalation. Similar suspicious activity was observed on the prediction market Polymarket, where newly created wallets placed large, winning bets on a ceasefire just before the announcement. U.S. Representative Ritchie Torres has called for an SEC and CFTC investigation. While federal agencies have recently reduced enforcement actions, the New York Attorney General is separately investigating using the state’s powerful Martin Act, which does not require proving intent to defraud.

On Tuesday, April 7, 2026, at 19:45 GMT, nearly three hours before Trump announced a "two-week ceasefire" between the U.S. and Iran on Truth Social. This time was a vacuum period when London traders were off work and Asian traders had not yet started, typically with only a few hundred crude oil futures contracts traded per minute. Within this one hour, someone sold approximately 6,200 Brent crude oil futures contracts plus 2,400 WTI crude oil futures contracts, totaling 8,600 contracts with a notional value of about $950 million.

The next day, as the Asian market opened, crude oil prices dropped by about 15% at the open, with WTI falling below $100. According to Reuters, citing LSEG trading data, the size of this short position was "completely atypical for that time period." Representative Ritchie Torres wrote to the U.S. Securities and Exchange Commission (SEC) and the Commodity Futures Trading Commission (CFTC) on April 8, requesting an investigation.

This was not the first time. More precisely, it was the second recorded instance of the same "script" during this round of U.S.-Iran tensions.

The Same Trading Signature, Two Precise Entries

The one on the morning of Monday, March 22, 2026, was less famous than the April 7 incident because it did not trigger a significant drop in oil prices. But from a trading structure perspective, it was the prototype of this "script." According to trading data cited by CBS News and the Financial Times, between 6:49 and 6:50 AM Eastern Time that day, which was 10:49 GMT, a total of 6,200 Brent and WTI futures contracts were traded, worth approximately $580 million.

Fifteen minutes later, Trump posted on Truth Social, saying he was engaged in "constructive dialogue" with Iran and announced a five-day delay in the plan to strike Iranian energy facilities. Crude oil prices plummeted that day, the S&P 500 jumped, and the Dow Jones Industrial Average rose over 1,000 points in a single day.

Aligning the timelines of these two events reveals a detail: the "Brent leg" of the 8,600 contracts on April 7 was also exactly 6,200 contracts. The same number appearing in two completely different time periods could be a coincidence or indicate the same position size. In trading circles, this repetition is called a "signature," referring to a fixed formula used by a particular group of traders. CBS's report cited two anonymous former CFTC investigators, stating that such precise repetition is "itself an investigative signal."

9 Times the Norm, Occurring in the Unwatched Hour

Many readers who first saw this news thought 19:45 GMT was an "after-hours period." Actually, it was not. Brent crude oil futures are traded almost 24 hours electronically, closing only briefly on weekends. 19:45 GMT is a more subtle point in time. Just moments before (19:28 to 19:30 London time), the day's "settlement window" had ended—the two minutes used by the exchange to determine the official daily settlement price.

Once the settlement window ends, most European professional traders leave work. Asian trading desks in Tokyo and Singapore come online only a few hours later. This hour is typically one of the thinnest liquidity windows of the day. According to ICE's official product specification documents, Brent's true trading peaks are concentrated during European daytime hours.

Zooming in on the anomaly of that minute on March 22 provides a clearer comparison. According to LSEG transaction details cited by CBS, the normal trading volume for the same time period over the surrounding five days was about 700 contracts per minute. That minute saw 6,200 contracts traded, nearly nine times the usual volume. The long blue bar in the chart represents that minute. The other gray bars, densely packed at the bottom, represent the other minutes of the same hour.

The significance of this comparison is that the ninefold surge did not occur during the most liquid daytime hours but was concentrated in the thinnest minute of the trading book. Paul Krugman, writing about this on his Substack, used an analogy: it was like "driving a truck down an empty street in the middle of the night and honking the horn"—either not caring about being heard or having a compelling reason to act at that moment.

Three Trades in the Same Direction

This chart shows the other half of the anomaly on March 22 that many reports overlooked. Follow-up articles by the Financial Times and Peak Oil in late March mentioned that, during the same period, besides the $580 million crude oil short, two other positions were established in the same direction: a purchase of approximately $1.5 billion in S&P 500 E-mini futures and a separate $192 million short position in WTI (CL contract).

"S&P 500 E-mini futures" are the most active U.S. stock index futures contract on the exchange, with one contract corresponding to about $250,000 of the S&P 500 index value, making it a standard tool for institutions to hedge the overall direction of U.S. stocks. "Buying E-mini" is equivalent to betting on a rise in U.S. stocks. The "WTI细分空单" (WTI细分空单) was an additional separate short position added on another futures product line (U.S.-traded WTI) for crude oil. Together, these three positions had a notional value of about $2.28 billion.

Looking at these three orders in isolation, they resemble a perfectly aligned pair trade (paired trade), betting on the same macro scenario: a de-escalation of U.S.-Iran tensions. How would de-escalation affect the market? Oil supply panic subsides, oil prices fall. Geopolitical risk premium disappears, stocks rebound. These three positions combined form the cleanest profit-making combination for this scenario. As Paul Krugman roughly put it, "If you knew you would see the words 'constructive dialogue' in two hours, these are the three trades you would place."

The Same Script, Also Appearing in Prediction Markets

Shifting perspective from the futures market to the crypto-world prediction market Polymarket reveals an almost identical mirror image.

Polymarket is a binary prediction contract platform built on Ethereum, where users bet on whether a specific event will occur. Odds are determined by market participants themselves, and winners split the pool after the event outcome is confirmed. All its transactions are on-chain, and anyone can view each wallet's history.

According to on-chain data cited by StockTwits, in the final week of the Polymarket contract "Will the U.S. and Iran ceasefire within 30 days?", 8 accounts fit a "normal profile." These were all public, established accounts, placing a total of about $70,000 in bets, with wins and losses, and the settlement process showed no suspicious activity. However, simultaneously, 4 other accounts had a completely different profile. These 4 wallets were newly created just before the event, with no prior on-chain transaction history. Their first action was to heavily bet on "ceasefire will happen" at extremely low odds. They all won, collectively profiting over $600,000.

$70,000 versus $600,000—a multiple of about 8.6 times. The latter's profit was almost nine times the total bet amount of the former. According to Polymarket's own settlement rules, the winner's amount = bet amount × (1/odds). To make $600,000 within a week, these 4 wallets must have either placed heavy bets at a time when the odds were extremely low (meaning the market thought "no ceasefire" was very likely) or placed multiple分散下注 (dispersed bets). On-chain data indicates it was the former.

Ritchie Torres's office mentioned this detail in their letter to the SEC and CFTC, listing it alongside the crude oil futures anomaly as evidence of "cross-market synchronous signals." This is also why Torres had already pushed for legislation草案 (draft legislation) targeting insider trading in prediction markets regarding Polymarket back in late March. For him, the crude oil futures side was not an isolated incident.

Will There Really Be an Investigation?

First, consider the reality at the federal level. According to the SEC's enforcement report for fiscal year 2025 released in early April, the SEC initiated 313 new cases in the past year, the lowest number in the past decade, down 27% from 583 cases in fiscal 2024. The CFTC did not release a report of the same level simultaneously, but law firms Sullivan & Cromwell and Skadden, which track CFTC enforcement trends, noted in comments released in early April that the CFTC's Division of Enforcement had noticeably slowed down in early 2025.

But just about a week before Torres wrote his letter, the CFTC had announced its top 5 enforcement priorities for 2026. According to Sullivan & Cromwell's梳理 (analysis), ranked first was "Insider Trading, including prediction markets," and second was "Market Manipulation, particularly in energy markets."

The微妙之处 (subtlety) here is that the CFTC itself has verbally placed this matter at the top of its list, but historically, the CFTC has极少 (very rarely) initiated cases based on "single anomalous trade" types in the futures market. Past successful energy commodity cases, such as the penalties against Trafigura, Freepoint, and TotalEnergies in 2024, were all long-term over-the-counter manipulation cases, lasting 2 to 4 years, not targeting a single anomalous short order on the screen.

What could truly bring this matter to a result is another avenue. According to reports from OilPrice.com and Peak Oil, New York State Attorney General Letitia James has been using New York State's Martin Act since April 2025 to track a series of "well-timed, high-return trades related to Trump's public statements."

The Martin Act is New York State's securities anti-fraud law. It has a key feature that federal law lacks: prosecutors do not need to prove the defendant had a subjective intent to defraud. They only need to prove that the trading activity itself has objectively fraudulent characteristics to file a lawsuit. For events like "precise lurking," subjective intent is precisely the hardest element to prove in federal insider trading cases.

Related Questions

QWhat was the total notional value of the suspicious oil futures trades placed on April 7, 2026, and what time did they occur?

AThe total notional value was approximately $950 million. The trades occurred at 19:45 GMT, nearly three hours before Trump's ceasefire announcement.

QWhat is the significance of the '6,200 lot' signature found in both the March 22 and April 7 trading events?

AThe repeated '6,200 lot' size is considered a 'signature' in trading circles, suggesting it could be the work of the same entity or group using a fixed strategy, which is itself a signal for investigation.

QBesides the large oil short, what two other coordinated trades were identified on March 22, and what was their combined strategy?

AA $1.5 billion buy order for S&P 500 E-mini futures and a separate $192 million short on WTI (CL contract). Together, they formed a paired trade betting on the same macro scenario: de-escalation in U.S.-Iran tensions, which would cause oil prices to fall and stocks to rally.

QHow did the suspicious trading activity on the prediction market Polymarket mirror the activity in the oil futures market?

AOn Polymarket, four newly created wallets placed large bets at very low odds that a ceasefire would occur, winning over $600,000. This mirrored the oil futures activity in its precise timing and high returns, representing a cross-market synchronous signal of potential insider trading.

QWhat is a key legal challenge in prosecuting such cases at the federal level, and which state law offers a more viable path for investigation?

AA key challenge at the federal level is proving the defendant's subjective intent to defraud. New York State's Martin Act, however, allows the state Attorney General to prosecute based on the objective fraudulent characteristics of the trading activity, without needing to prove subjective intent.

Related Reads

The Value Distribution of Stablecoins

**Summary: The Value Distribution of Stablecoins** The article argues that stablecoins are evolving from mere trading tools into broader channels for dollar access. It divides the stablecoin ecosystem into four layers to analyze how value is distributed: 1. **Issuance Layer:** Mints stablecoins, holds reserve assets, and captures the spread between reserve yield and user costs (e.g., Tether, Circle). This layer currently earns the largest profit margin. 2. **Infrastructure Layer:** Connects stablecoins to the traditional financial system, handling fiat on/off-ramps, banking integration, compliance (KYC/AML), and asset management (e.g., Bridge, BVNK). This is the "unglamorous" but critical work, building the essential bridges between crypto and real-world finance. 3. **Acquiring/Distribution Layer:** Integrates stablecoins into merchant systems, manages payment flows, and provides enterprise financial software (e.g., Stripe, Coinbase). They act as the access point for businesses. 4. **Application Layer:** The end-users and businesses that ultimately use stablecoins for payments, settlements, or as a store of value. They benefit from convenience but have little pricing power. The core thesis is that while the issuance layer currently dominates profits, the often-overlooked **infrastructure layer holds significant long-term potential**. The real challenge and barrier to mass adoption is not the on-chain transfer of stablecoins (which is simple), but the complex "last mile" integration into existing business workflows, banking systems, and regulatory frameworks across different countries. Companies in this layer are currently in a "land grab" phase, investing heavily to build networks, secure bank partnerships, and establish compliance pathways. While their position is currently pressured by the profitable issuers above and distribution platforms below, the article suggests that if stablecoins become a default financial rail for businesses, the infrastructure providers who have done the hard work of integration will ultimately gain strong pricing power and become entrenched, essential players.

marsbit1h ago

The Value Distribution of Stablecoins

marsbit1h ago

The Value Distribution of Stablecoins

The Value Distribution of Stablecoins The article argues that stablecoins are evolving from a mere trading tool into a broad "dollar channel." It analyzes the industry's value chain through four layers: 1. **Issuance Layer (e.g., Tether, Circle):** The top layer that mints stablecoins, holds reserve assets, and captures the thickest interest rate spread. 2. **Infrastructure Layer (e.g., Bridge, BVNK):** Connects stablecoins to the traditional financial system, handling critical but complex "dirty work" like fiat on/off-ramps, banking integration, compliance (KYC/AML), and cross-border settlement. 3. **Acquiring/Distribution Layer (e.g., Stripe, Coinbase):** Embeds stablecoins into merchant systems, manages payment flows, and integrates with enterprise software. 4. **Application Layer:** End-users and businesses that ultimately use stablecoins for payments, settlement, or storing value. The author posits that while the issuance layer currently captures the most profit, the most overlooked and potentially critical layer is infrastructure. The core challenge for stablecoin adoption isn't the on-chain transfer (which is simple), but bridging the gap between blockchain and the real-world financial system. This involves solving practical problems for businesses: fiat conversion, reconciliation, tax handling, and user onboarding. Infrastructure companies are currently in a difficult "land-grab" phase—building networks, securing banking relationships, and achieving compliance country-by-country. They face pressure from both the profitable issuance layer above and distribution platforms below. However, the author suggests this layer is building a crucial moat. Once stablecoins become a default business rail, the infrastructure players who have done the hard work of integration may gain significant, durable value and pricing power.

链捕手1h ago

The Value Distribution of Stablecoins

链捕手1h ago

How to Do Research Well: Deliberately Practice the Real Skills That Matter

No one truly teaches you how to do research. You're often given a desk, a pre-selected problem, and vague instructions to "create something new." Consequently, many people reverse-engineer the job based on visible outputs—papers, posts, announcements—learning only how to *appear* like a researcher rather than how to *become* one. True research capability is built from stacking small, trainable skills, nearly all of which can be developed through deliberate practice. **Pick Your Own Problem:** Most researchers absorb problems from advisors or trends, lacking the underlying reasoning. Choosing a problem you genuinely care about, as John Schulman advises, leads to original work. Develop "taste" like a muscle: predict experiment outcomes, guess paper results from methods, and track which findings remain important over time. **Upgrade Your Inputs:** Relying on shared reading lists (arXiv hot lists, filtered group chats) leads to unoriginal conclusions. Undervalued old literature often holds crucial insights (e.g., MoE, LSTM, backpropagation). Richard Sutton's "The Bitter Lesson" or Claude Shannon's 1952 talk on creative thinking are more predictive than lengthy modern surveys. Breadth matters as much as depth: draw from neuroscience, mechanism design, hardware knowledge, and honest statistics. Read papers directly, especially appendices and limitations sections. **Write Everything Down:** As Paul Graham noted, writing exposes flaws in seemingly mature ideas. Writing is the cheapest defense against self-deception. Following Feynman's principle, Darwin programmatically wrote down facts contradicting his theory to combat memory bias. Maintain a detailed log of hypotheses, setups, predictions, results, and updated understandings. Reviewing past logs fosters essential humility.

marsbit3h ago

How to Do Research Well: Deliberately Practice the Real Skills That Matter

marsbit3h ago

Trading

Spot
Futures

Hot Articles

Discussions

Welcome to the HTX Community. Here, you can stay informed about the latest platform developments and gain access to professional market insights. Users' opinions on the price of S (S) are presented below.

活动图片