Tech●●●●●Difficulty 5 of 5

How did a botched deployment lose $440 million in 45 minutes?

One of eight servers missed an update, and a function left dormant for years woke up and started buying and selling stocks.

▶ Start the story

A botched deployment lost Knight Capital about $440 million in 45 minutes because one old, forgotten piece of code woke up on a single server and kept sending orders until the damage was done. Knight was the largest trader in U.S. , using algorithms for a 17.3% share of trading on the NYSE. On August 1, 2012, it was updating its automated order router, which ran on eight , and a technician forgot to copy the new code to one of them.

$440 million

pre-tax loss in about 45 minutes

That mattered because of a . The new code reused a flag that used to switch on an old function called Power Peg. On seven the flag meant the new feature. On the eighth, which still had the old code, it triggered Power Peg instead. Power Peg was supposed to stop when enough orders had been filled. But the code that reported fills had been altered after Power Peg was retired, so the orders were never recorded as complete, and the server sent out orders indefinitely.

The result was a flood. For 212 incoming orders, Knight sent millions of child orders: 4 million executions in 154 stocks, more than 397 million shares, in about 45 minutes. Prices moved for 148 companies on the New York Stock Exchange; shares of Wizzard Software went from $3.50 to $14.76.

Knight took a of $440 million, and its own share price fell by over 70%. Days later, on August 5, it raised around $400 million from investors led by Jefferies to stay in business. The company was merged into KCG Holdings in 2013.

Quiz me

0/3

  1. 1.Why did the old Power Peg code run on only one of Knight's servers?
  2. 2.Why did the faulty server keep sending orders instead of stopping?
  3. 3.How did Knight stay in business after losing $440 million?

Recap

A release must reach every machine alike, and a flag must never be given a new meaning while old code still listens for it.

💡 A trick to remember it · Seven servers got the memo, the eighth got the old alarm clock and rang it for 45 minutes.

Surprising fact · The company lost $440 million in roughly 45 minutes.

Sources (2)

No source, no claim. Every fact in this lesson (13 claims) cites at least one of these.

  1. [1]Knight Capital Group · Wikipedia
  2. [2]Feature Toggles (aka Feature Flags) · martinfowler.com
More lessons in 💻 Tech (3) See all tech lessons →

One more light on your map.

Get one lesson like this every day, about the things you love. Free, in two or five minutes.

Get the share card for this lesson ↗