New York AG Secures $35M and Lifetime Industry Ban from Ex-Celsius CEO Mashinsky
The New York Attorney General has reached a settlement with Alex Mashinsky, the former chief executive of the collapsed crypto lending platform Celsius Network, securing up to $35 million in restitution and a permanent ban preventing him from participating in the digital asset industry in New York. For accounting firms, auditors, and finance professionals serving crypto clients, the action is a pointed reminder that state-level regulators are willing to pursue individual executives, not just entities, and that client-fund misrepresentation carries personal, not just corporate, consequences.
What the Settlement Covers
The New York AG's office announced the agreement against Mashinsky following its investigation into Celsius Network's collapse, which wiped out billions of dollars in customer deposits when the platform froze withdrawals and subsequently filed for bankruptcy. The settlement holds Mashinsky liable for up to $35 million, with the funds directed toward harmed users rather than state coffers. Critically, the terms include a permanent ban on Mashinsky operating within or conducting business tied to the cryptocurrency industry in New York State.
The Scope of the Alleged Misconduct
The AG's investigation centred on claims that Mashinsky misled retail depositors about the safety and profitability of funds held on the Celsius platform. Customers were told their assets were being deployed in low-risk strategies when, according to the AG, the reality was considerably more precarious. The office also alleged that Mashinsky profited personally by selling his own Celsius token holdings while promoting the platform's strength to the public.
The settlement does not require Mashinsky to admit or deny all findings, a common feature of civil AG resolutions, but the agreed financial and professional penalties signal how seriously New York treated the underlying conduct. It is worth emphasising that this is a civil settlement; separate federal criminal charges filed by the US Department of Justice remain a distinct matter with their own timeline and resolution process.
Relationship to the Broader Celsius Proceedings
Celsius itself filed for Chapter 11 bankruptcy protection in July 2022. The company's estate has been working through a restructuring process, with creditors receiving partial recoveries. The AG's action against Mashinsky runs in parallel, targeting his individual conduct rather than the corporate estate. That distinction is significant for accounting professionals: it demonstrates that personal liability for executives can survive, and indeed be pursued independently of, a corporate insolvency.
Why This Enforcement Action Matters for Accounting and Compliance Professionals
Actions like this one reshape the risk landscape that firms advising crypto businesses need to assess. Three implications stand out.
Executive-Level Personal Liability Is a Real Audit Risk
When a regulator pursues an individual CEO rather than settling only at the entity level, it signals that governance failures at the top are treated as personal misconduct. For auditors and accounting firms engaged by digital asset businesses, this raises the bar on what management representation letters should address. Representations about how client funds are deployed, whether promotional materials align with actual risk parameters, and whether insiders are transacting in the platform's own tokens while making public claims about stability all become areas requiring specific scrutiny rather than general assurances.
Firms using digital asset accounting software to reconcile client positions should ensure those reconciliations capture not only on-chain balances but also the terms under which customer funds are held, since a mismatch between disclosed terms and actual deployment is precisely what regulators are examining.
State Regulators Are Acting Independently of Federal Bodies
The New York AG's authority to pursue this settlement derives from state consumer protection and securities statutes, principally the Martin Act, which gives New York exceptionally broad powers in securities fraud cases without requiring proof of intent. Federal parallel proceedings through the DOJ and, historically, the SEC and CFTC, sit alongside rather than superseding state action. Firms with multi-jurisdictional crypto clients need to map which state regulators have overlapping jurisdiction over a client's activities, particularly if that client solicited retail customers in New York.
For firms tracking the US crypto regulatory landscape and what firms must track, the Mashinsky settlement is a concrete illustration that state enforcement has not paused while federal frameworks remain in flux.
Client-Fund Transparency Is No Longer Optional
One of the core factual patterns in the Celsius collapse, and in the AG's pursuit of Mashinsky, was a disconnect between what customers were told and how their funds were actually managed. That gap is an accounting and disclosure failure as much as it is a legal one. Whether a firm is auditing a centralised lending protocol, a yield product, or a treasury function that holds crypto on behalf of clients, the documentation trail needs to demonstrate that promotional claims are consistent with audited or at least properly reviewed operational reality.
Crypto bookkeeping software can help maintain ledger-level accuracy, but accuracy at the ledger is not sufficient if the narrative presented to customers or investors diverges from what the ledger actually shows. Firms should treat disclosure review as an integral part of any engagement with retail-facing crypto businesses, not as an afterthought.
Accounting and Audit Implications
Going-Concern Assessments for Crypto Lending Platforms
The Celsius collapse is now one of the most-studied going-concern failures in the digital asset space. Auditors signing off on crypto lending or yield platforms need to apply heightened scrutiny to liquidity risk, the mismatch between liquid liabilities (customer withdrawals on demand) and illiquid or volatile assets (deployed collateral, native tokens), and the extent to which management's representations are supported by independent, verifiable data rather than internal dashboards alone.
The AG's settlement reinforces that if an auditor, even one that signed a clean opinion close to a collapse, cannot demonstrate that it challenged management's assertions about fund safety, the reputational and potential regulatory exposure is substantial.
Token Holdings and Related-Party Disclosure
Allegations that Mashinsky sold his own token holdings while publicly promoting the platform's health point to a related-party and insider transaction issue that should appear on every crypto engagement checklist. ASC 850 (US GAAP) and IAS 24 (IFRS) both require disclosure of transactions between an entity and its key management personnel. Where a platform issues its own token and executives hold significant quantities, those positions, and any sales during the period, must be disclosed and evaluated for their potential to create conflicts of interest that affect financial reporting.
Digital asset accounting software that tracks wallet-level movements can be a valuable tool here, but only if the engagement team specifically scopes in executive wallet monitoring as part of the related-party procedures, rather than limiting analysis to corporate treasury wallets.
AML and Suspicious Activity Considerations
The pattern of insider selling concurrent with bullish public statements is a red flag that AML and compliance teams at firms serving crypto businesses should incorporate into their suspicious activity frameworks. Where a client's executives are transacting in the platform's own token in ways that are inconsistent with their stated positions, those transactions warrant escalation and documentation, regardless of whether they have yet attracted regulatory attention. For the broader context on how anti-corruption frameworks are evolving globally, see how EU lawmakers are weaving crypto into anti-corruption frameworks, which illustrates that the Mashinsky-style fact pattern is attracting legislative attention beyond US borders.
What Firms Should Do Now
Review Engagement Scope for Retail-Facing Crypto Clients
If your firm has clients that accept deposits, offer yield products, or custody assets on behalf of retail users in New York, this settlement warrants a fresh look at engagement scope. Specifically, consider whether your current procedures adequately address the alignment between public-facing marketing materials and audited financial reality, executive token holdings and sales, and the liquidity profile of assets relative to withdrawal obligations.
Update Risk Assessment Matrices
Enforcement actions provide concrete data points for risk assessment. The Celsius/Mashinsky pattern, centralised custody of retail deposits, internally managed yield strategies, promotional claims about safety, and insider token sales, should be explicitly coded into your firm's crypto client risk matrix. Clients exhibiting two or more of these characteristics warrant enhanced procedures and potentially additional management representations.
Document the Disclosure Review Trail
Given the AG's focus on misrepresentation to customers, accounting firms that do not formally document their review of client disclosures face an awkward position if regulatory attention later lands on a client. Engagement letters and working papers should clearly define the scope of any disclosure review, even if that scope is explicitly limited, so that there is no ambiguity about what the firm did and did not opine on.
Frequently Asked Questions
Does the New York AG settlement affect Celsius creditors directly?
The up to $35 million secured from Mashinsky personally is intended for restitution to harmed users, so it represents an additional recovery channel alongside whatever distributions come from the Celsius bankruptcy estate. The two processes are legally distinct, and creditors participating in the bankruptcy do not automatically waive any benefit from the AG's recovery.
Is Mashinsky's industry ban limited to New York?
The ban issued by the New York AG applies specifically within New York State and is rooted in New York law. It does not, on its own, impose a nationwide or global prohibition, although the parallel federal criminal case could result in additional restrictions if that proceeding concludes with a conviction or plea agreement.
How should auditors treat a crypto platform's native token holdings on the balance sheet?
Under current US GAAP, crypto assets held by an entity are generally treated as indefinite-lived intangible assets subject to impairment testing, though the FASB's ASU 2023-08 now requires certain crypto assets to be measured at fair value with changes recognised in net income for eligible entities. Executive or insider holdings are a separate disclosure matter governed by related-party rules. Firms should confirm which standard applies to each engagement and document the basis for any valuation or disclosure position taken.
What is the Martin Act and why does it matter for crypto firms operating in New York?
The Martin Act is a New York State statute that grants the Attorney General broad authority to investigate and prosecute securities fraud without needing to prove fraudulent intent. It covers a wide range of investment products, and New York courts have generally held that crypto assets sold to the public can fall within its scope. Any firm with a client actively selling crypto investment products to New York residents should factor Martin Act exposure into its risk assessment.
Does this settlement change how crypto lending platforms should be audited?
It reinforces rather than changes established audit principles, but it makes clear which areas attract regulatory attention. Specifically: the accuracy of management's public representations relative to audited financial data, the liquidity mismatch between customer liabilities and deployed assets, and related-party transactions involving key management personnel. Firms that have not yet built these considerations into their crypto lending audit programmes should treat this settlement as a prompt to do so.
Source: Decrypt