The CFTC-regulated exchange Kalshi just received a capital injection of a different kind. Not a venture round, but a liquidity injection from two of the most sophisticated financial players in the world. Cantor Fitzgerald and Susquehanna are not building on-chain; they are building a bridge from traditional finance to event contracts. The code does not lie, but it often omits. What is omitted here is the shift from trustless to trust-required geometry.
Context: Kalshi is a designated contract market (DCM) under the Commodity Futures Trading Commission. It lists event contracts—binary derivatives tied to outcomes like elections, GDP reports, or Fed rate decisions. Until now, its order book was thin. Retail traders provided the bulk of liquidity, and institutional participation was negligible. The problem was structural: a hedge fund wanting to hedge a $10 million political risk could not execute a single order without moving the market by several percentage points. The solution is not a new protocol; it is a old financial instrument—the block trade.
Cantor Fitzgerald, a full-service investment bank, will act as an introducing broker, connecting institutional clients to Kalshi's platform. Susquehanna International Group, one of the world's largest quantitative trading firms, will provide pricing and liquidity for these block trades. This is not a smart contract upgrade. It is a handshake between regulated entities. The geometry of trust here is hub-and-spoke: the institution trusts Cantor, Cantor trusts Kalshi, and Kalshi trusts the CFTC. Zero trust is not a policy; it is a geometry.
Core: Let me dissect the risk architecture. In a traditional block trade, the buyer and seller agree on a price off-exchange, then report the trade to the exchange. The exchange does not guarantee the trade; the counterparties do. Here, Susquehanna acts as the counterparty for every block. That means every institutional order is a bilateral contract between the client and Susquehanna, settled through Kalshi's clearing house. The risk is not reentrancy or oracle manipulation. It is counterparty default. If Susquehanna misprices a contract and faces a $500 million loss, who bears the risk? The client? The clearing house? The CFTC? The code does not lie, but it often omits—the omission here is the lack of on-chain proof of collateral. Susquehanna's position is not posted on a public ledger. It is a promise, backed by a balance sheet. And balance sheets can be opaque.
From my experience auditing DeFi lending protocols, I've learned that liquidity is not just a number; it is a vector of trust. In Compound, liquidity is a function of collateral ratios and liquidation bots. Here, liquidity is a function of Susquehanna's risk appetite. The block trade mechanism removes slippage, but it introduces concentration risk. Every large trade flows through a single market maker. That is a single point of failure. Compiling the truth from fragmented logs, I see that the industry has seen this movie before. In 2022, FTX's market maker was Alameda. The code did not lie then either; the omission was in the off-chain balance sheet.
Let me compare this to Polymarket, the decentralized prediction market. Polymarket uses an automated market maker (AMM) and a liquidity pool. Any user can provide liquidity and earn fees. The system is trustless: you do not need to know who the counterparty is. The trade is atomic. The price is determined by a constant product formula. The downside is that large trades cause high slippage. Polymarket cannot handle a $10 million order without significant price impact. Kalshi's block trade solves that problem, but at the cost of trust. The user must trust that Susquehanna's pricing is fair, that Cantor's execution is honest, and that the CFTC will enforce the rules. Security is the absence of assumptions. Here, there are many assumptions.
Now, let's examine the incentive structure. Susquehanna is not a charity. It will price the block trades with a spread. The spread covers its risk and generates profit. The client pays a premium for immediacy and size. In a liquid market, the spread is small. In a thin market, the spread is large. Prediction markets are thin. The spread will be significant. The question is: will the clients accept that spread, or will they demand tighter pricing? Susquehanna's edge is its ability to price risk using proprietary models. It can hedge its positions across correlated markets. For example, if it sells a block of "Trump wins 2024" contracts, it can buy a "Biden wins" contract or short a correlated asset. This is classic arbitrage. But the risk is model error. If Susquehanna's model is wrong, the loss is concentrated. The CFTC will not bail out a market maker. The history of financial markets is full of failed market makers. Long-Term Capital Management. Amaranth. The pattern is the same: leverage + model error = blow up.
Contrarian: Now, let me play the contrarian. The bulls are right about one thing: institutional demand for prediction markets is real. The 2024 US election cycle is a massive catalyst. Hedge funds, family offices, and even corporations want to hedge political risk. Insurance companies cannot cover election outcomes. Prediction markets can. The block trade model is the only way to facilitate that size. Cantor and Susquehanna are the best possible partners. Their reputation is unmatched. The timing is perfect. The market is undervaluing the network effect: once a few institutions start using the service, others will follow. The liquidity will improve, spreads will tighten, and the market will become self-sustaining. The code does not lie, but it often omits—what the bulls omit is the fragility of the trust model. The system works as long as everyone behaves. But what happens when a dispute arises?
For example, suppose a client buys a block of "Fed rate cut 25bp" contracts. The outcome is ambiguous. The Fed cuts rates, but the language is hawkish. The contract is binary, but the trigger is subjective. Who decides the outcome? Kalshi's oracle. But the oracle is a committee of CFTC-approved experts. The client may disagree with the oracle's decision. In a DeFi prediction market, the dispute is resolved by a decentralized court or a token vote. Here, the dispute goes to the CFTC. That is a slow, expensive process. The institution may be stuck with a losing position for months. The risk is not just financial; it is operational. The code does not lie, but it often omits the legal fees.
Another blind spot: regulatory capture. The CFTC has approved Kalshi's event contracts, but it has not approved all prediction markets. Polymarket is not regulated. If the CFTC decides to crack down on unregulated prediction markets, Kalshi becomes the sole legal gateway. That is a monopoly. But monopolies breed complacency. Cantor and Susquehanna may become too comfortable with the regulatory protection, and fail to innovate. The history of regulated exchanges is full of examples: the NYSE was a monopoly for decades, but its technology stagnated. The same could happen here. The geometry of trust is a double-edged sword: it provides stability, but it also creates rigidity.
Takeaway: The future of prediction markets is not on-chain; it is off-chain with a regulatory wrapper. Investors should monitor the CFTC's stance on event contracts. The geometry of trust is shifting from code to institution. As a security auditor, I see this as a trade-off: scalability for resilience. The real test will be the first major dispute. If a $100 million block trade is contested, and the CFTC takes a year to resolve it, the institutional appetite will evaporate. If the resolution is swift and fair, the market will grow. The code does not lie, but it often omits. The omitted part is the fragility of trust. The next time you see a headline about 'institutional adoption,' ask yourself: 'What is the trust model?' If the answer is 'a regulated entity,' then you are betting on the integrity of that entity, not the code. Compiling the truth from fragmented logs, that is the only truth that matters.


