BLOOD MONEY ← All Dispatches Dashboard Iran War Intel Kalshi Markets Influence Orbit Suspects
BLOOD MONEY · THE CASINO · PART FOUR · DAY 119 · JUNE 26, 2026

The Standing Order: The Casino, Part Four

Caroline Pham did not merely look away. She issued a command: no new subpoenas. Before the investigation closed.
Somebody always knows. Follow the money.
OldGoat InTheHood  |  Insider Trader Dashboard  |  theyknewfirst.com  |  June 26, 2026
BLOOD MONEY POLYMARKET CFTC DAY 119

Part Two of this series documented what happened at the Commodity Futures Trading Commission. The acting chair dismantled enforcement staff. Officials who raised concerns about Polymarket were removed. The agency went from 760 employees to 550 — fewer than since the depths of 2009 — while simultaneously acquiring broader authority over the industries at the center of the president's financial empire. Part Two →

This dispatch adds one fact that changes what Part Two was describing.

Caroline Pham did not merely fail to investigate Polymarket. She explicitly forbade the enforcement division from issuing new subpoenas — and then shut the investigation. The distinction is not semantic. Negligence and a standing order are different things. One is an absence of action. The other is an affirmative institutional command. What Part Two described as regulatory capture was, it turns out, a more specific mechanism: a superior officer ordering subordinates not to use the legal tools that would expose what the investigation was finding.

The casino stayed open because someone with the authority to close it issued a standing order to keep it open.

$3.2B
Pre-announcement oil shorts
documented, 4 instances
0
CFTC subpoenas issued
in Polymarket investigation
2
Federal criminal cases
tied to Polymarket
3
Total CFTC investigations
of Polymarket
1
Active CFTC commissioner
by design
550
CFTC staff — lowest
since 2009

I. The Standing Order

The CFTC's enforcement division opened an investigation into Polymarket. Enforcement attorneys — career lawyers inside the agency whose job is to build cases — identified sufficient basis to issue subpoenas. Subpoenas are not charges. They are the legal mechanism by which investigators compel the production of records: internal communications, transaction logs, account structures, the documents that show what happened inside a company you cannot simply walk into.

Caroline Pham, acting chair, explicitly forbade the enforcement division from issuing those subpoenas. Then the investigation was closed.

The Standing Order — What the Record Shows
MECHANISM CFTC enforcement attorneys found basis to issue subpoenas. The tool was available. The predicate existed. Pham issued an explicit prohibition — no new subpoenas — before the investigation concluded.
EFFECT The investigation closed without the evidentiary tools that would have compelled Polymarket to produce records. Whatever those records contain remains inside the company.
CONTEXT Less than two weeks before this prohibition, Polymarket announced an infusion from 1789 Capital — a firm with Donald Trump Jr. involvement — and named Trump Jr. an unpaid adviser. The CFTC enforcement division was receiving top-down pressure in the same period.
AFTER Pham departed the CFTC and joined MoonPay. MoonPay subsequently announced an exclusive prediction market partnership with Polymarket — the same company whose investigation she had closed without subpoenas.

This is not a story about regulatory philosophy — about how aggressive an agency should be, or whether prediction markets deserve lighter oversight. The specific documented fact is that enforcement attorneys identified sufficient basis for subpoenas, their superior issued an explicit command not to use them, and the investigation was then closed. Kalshi →

"I was ordered — twice — to shutter investigations of crypto operators before my job was eliminated last summer. The CFTC has said to bad actors in the crypto space that it is not coming after them." — Joe Konizeski, former CFTC attorney, Chicago office, on record

Konizeski was speaking about crypto investigations broadly. His quote appeared in Part Two. It belongs here too: what Polymarket's enforcement attorneys experienced was a specific instance of an agency-wide pattern that multiple former staff have now put on record.

II. The Retaliation Record

Part Two documented what happened to two officials who raised concerns at the November 2024 meeting with Polymarket.

Rachel Berdansky
Deputy Director for Compliance
Raised specific concerns that the intermediary latitude Polymarket was requesting could enable someone with inside information to mask their identity and source of funds. Placed on administrative leave.
Rahul Varma
Acting Director of Market Oversight
Raised the same concerns at the same meeting. Removed from his position.

New reporting adds a detail that changes the characterization. The reasons given for these actions were described, by those familiar with them, as stated in "vague terms." That is not incidental. Agencies that remove officials for documented professional cause state the cause. Agencies that remove officials to discourage a line of inquiry often cannot state the actual reason. "Vague terms" is the on-record descriptor for what was communicated to the two officials whose specific objection was that Polymarket's requested structure would make insider trading harder to detect.

For the avoidance of doubt: Van Dyke used exactly the structure Berdansky warned about. He ran his bets through an intermediary to mask his identity. He was caught anyway — but by the DOJ, not the CFTC. Van Dyke Record →

Whatever the CFTC investigation would have found through subpoenas — identity-masking patterns, account structures, transaction logs — the standing order ensured that record remains inside the company.

III. The Second Confirmed Case

Part Three documented the first federal criminal case tied to Polymarket's structure. Michele Spagnuolo — screen name AlphaRaccoon, Staff Information Security Engineer at Google — used internal search-trend data to front-run Polymarket contracts from October through December 2025. Criminal complaint: 26 MAG 2020 (SDNY). CFTC civil: 1:26-cv-04419. Profit: $1.2 million. Part Three →

New reporting adds the operational mechanism Spagnuolo used that this series had not previously documented: he operated through a VPN. The VPN was not incidental. It placed him in the same category as the identity-masking structure Berdansky had warned Polymarket's intermediary latitude could enable. Spagnuolo used it to obscure his geographic location and route activity through accounts that would not have been detectable without active investigation of Polymarket's own records.

He was caught. Not by the CFTC. By the DOJ, through a separate investigative channel.

The CFTC never subpoenaed Polymarket's records. Whatever transaction patterns, account structures, or masked-identity flags exist in those records — the agency with jurisdiction over prediction market insider trading chose not to look. Was ordered not to look.

Spagnuolo is the second federal Polymarket criminal case. Van Dyke is the first. Both were caught through mechanisms outside the CFTC's closed investigation. The question this dispatch cannot answer — because no subpoena has compelled the answer — is how many others the same records would reveal.

IV. The Architecture That Explains the Order

Part Two documented this. Part Four resets the context, because the standing order changes what it means.

The Standing Order's Context — Documented Timeline
Nov 2024 CFTC officials meet Polymarket. Berdansky and Varma raise specific fraud-enablement concerns. Both are removed in the same period Polymarket receives the intermediary latitude they warned against.
1789 / Don Jr. Less than two weeks after Polymarket's approved request, Polymarket announces investment from 1789 Capital — Trump Jr.'s firm. Trump Jr. named unpaid adviser. He is simultaneously an adviser to Kalshi, Polymarket's primary US competitor. Trump Media building its own prediction market. Orbit →
Standing Order Enforcement attorneys ready to subpoena Polymarket's records. Pham issues explicit prohibition. Investigation closes. Records remain inside the company.
Pham → MoonPay Pham departs CFTC. Joins MoonPay. MoonPay announces exclusive prediction market partnership with Polymarket. The company she helped, now paying her employer. On record.
Gibson Dunn Gibson Dunn represents SpaceX as IPO counsel and is simultaneously Polymarket's outside counsel — two clients with sensitive regulatory and pre-IPO exposure sharing the same law firm. Documented in Part Three. Orbit →

This Old Goat does not call the standing order a quid pro quo. The documented timeline is sufficient editorial. What it shows is a pattern: the institutional protection of Polymarket's interior records coincided with the financial integration of Polymarket into the president's family orbit — and concluded with the departure of the official who issued that protection into an industry that benefits from it.

Public record ends. Subpoena begins.

V. The Test Case

Michael Selig is the new CFTC chair. He is 36. He was appointed as sole commissioner — Trump left all other seats vacant, dismantling the multi-commissioner checks that once governed major CFTC decisions. Before his appointment, Selig was a corporate lawyer for crypto firms and prediction markets. He is now their regulator.

A third investigation into Polymarket has been opened under his watch. He is under bipartisan pressure — both parties, on record — to conduct it genuinely.

"If you're committing fraud, manipulation, abuse, insider trading in our markets, whether it's in crypto or anything else, our enforcement division is watching and will be a cop on the beat." — Michael Selig, sole CFTC commissioner, New York Times

Gretchen Lowe, thirty-year CFTC enforcement veteran, forced out under Pham: "I've been through an almost equal number of Republican and Democratic administrations, and there was always a belief you had to be straight with the court. Those values seem to have eroded."

The test is whether Selig issues subpoenas. That is the specific observable question. Not whether he opens an investigation — Pham opened investigations. Not whether he makes public statements about enforcement — Pham made public statements about enforcement. The test is whether the enforcement division, under the new chair, uses the legal tool the prior chair explicitly forbade.

The DOJ knows the playbook. They charged Van Dyke. They charged AlphaRaccoon. Both cases used the identity-masking structure Berdansky warned about. Both were prosecuted without CFTC subpoenas into Polymarket's internal records. The FBI raid on Polymarket founder Shayne Coplan in October 2024 produced no charges. Selig, upon taking his seat, declared that matter closed. Kalshi →

The third investigation is now open. Selig said enforcement is watching. The standing order is what "watching" looked like under his predecessor.

VI. What the Record Shows

Documented Fact
Caroline Pham explicitly forbade the CFTC enforcement division from issuing new subpoenas before the Polymarket investigation was closed. Confirmed — new reporting, June 2026.
Rachel Berdansky (Deputy Director for Compliance) and Rahul Varma (Acting Director of Market Oversight) raised specific concerns about Polymarket's requested structure enabling insider trading identity masking. Both removed. Reasons given in "vague terms." Confirmed — NYT and new reporting.
Michele Spagnuolo (AlphaRaccoon) — 26 MAG 2020 SDNY. Google engineer. $1.2M profit from inside data. Operated via VPN — same category of identity-masking structure Berdansky warned about. Caught by DOJ, not CFTC. Confirmed — criminal complaint, Part Three.
MSgt. Gannon Ken Van Dyke — $32K → $400K Polymarket. Classified knowledge of Operation Absolute Resolve. Intermediary structure. DOJ charged. Trump defended. Confirmed — Part One, Part Two.
CFTC staff: 760 (2015) → 550 (March 2026). Two crypto enforcement cases in Trump second term versus 80+ under Biden. One active commissioner, by design. Confirmed — NYT.
Pham → MoonPay / Polymarket partnership. Weyls → Gemini Titan (company she approved via top-down memo). Revolving door confirmed — NYT, Part Two.
Third Polymarket investigation opened under Selig. Bipartisan pressure on record. Test: whether enforcement issues subpoenas. The standing order is the baseline for comparison.
Dashboard — What theyknewfirst.com Documents
$3.2 billion in pre-announcement crude oil futures shorts across four documented instances, each within minutes-to-hours of non-public Iran policy decisions. Timestamps: Kobeissi Letter and Financial Times. Trader identities unconfirmed. DOJ and SEC investigating. Iran Intel →
Mystery Polymarket Iran trader: ~$1M, 93% win rate on five-figure Iran policy wagers. Six instances tracked. Confirmed — CNN, Part One.
The trades the CFTC was positioned to investigate — pre-announcement oil futures, prediction market positions — occurred at scale during the period Pham was issuing standing orders not to use the legal tools that would expose them. The simultaneity is documented. The architecture is the series. Suspects →
High-Probability Inference
~The standing order's timing — issued as Polymarket was integrating into the Trump family's financial orbit — is a documented sequence with a visible pattern. This Old Goat does not call it a coordinated act. The public record documents the coincidence. What it was is inference. What it produced is confirmed.
~Whether Polymarket's internal records — never produced under subpoena — would show additional instances of pre-announcement trading is unknown. The standing order ensured it remains unknown. Two prosecuted cases suggest the records would show more than two.
The casino was always going to stay open. What Part Four confirms is that someone issued the order to make sure of it.
Two cases. Zero subpoenas. One standing order.

Behind the curtain, the scaffolding is the story.

Confirmed — Primary Sources

Sources

BLOOD MONEY | The Casino, Part Four | Day 119 | June 26, 2026
OldGoat InTheHood
← All Dispatches  |  Part One →  |  Part Two →  |  Part Three →  |  Iran War Intel  |  Kalshi Markets  |  Influence Orbit

www.theyknewfirst.com
#BloodMoney #TheCasino #CFTC #Polymarket #TheStandingOrder #InsiderTrading #FollowTheMoney #velocityistheweapon #theyknewfirst
Data Notes — Pipeline Findings
¹
Suspects — High-suspicion insider trades
Litinsky MP $29.6M score 29/20 (highest in dataset). Famatown INSW $11.78M score 23/20 (2026-03-10 same-day Iran Conflict). Bezos AMZN $13.2M score 19/20. Zuckerberg META $15.9M score 18/20.
Source: outputs/TOP_SUSPICIOUS_TRADES.csv · data/trades.csv
²
Orbit — Trump family financial network
Trump Jr. adviser: Kalshi AND Polymarket. 1789 Capital partial owner. Kushner $2B Saudi PIF. Gibson Dunn: SpaceX IPO + Polymarket outside counsel.
Source: outputs/orbit_law_firm_donations.csv · Part Two/Three
³
Iran War Intel — $3.2B pre-announcement oil shorts
$580M Mar 23 · $950M Apr 7 · $750M Apr 17 · $920M May 7. Estimated profit May 7 alone: $125M. Timestamps: Kobeissi Letter + FT.
Source: iran.html · data/policy_events.json
Kalshi/Polymarket — Casino series summary
Van Dyke $32K→$400K confirmed. AlphaRaccoon $2.75M risked / $1.2M profit confirmed. Mystery Iran trader ~$1M / 93% win rate. CFTC: zero Polymarket subpoenas issued across three investigations.
Source: kalshi.html · DOJ filings · Parts One–Three