Every time you buy a stock through Robinhood, TD Ameritrade, or a dozen other retail brokers, there is a very good chance your order passes through a company called Citadel Securities before it ever reaches a public exchange. Citadel Securities processes roughly 25 to 30 percent of all U.S. equity volume. It handles orders for an estimated 40 percent of retail investors in America. It is, by almost any measure, the most powerful market-making operation in the history of American finance.

And for the better part of two decades, it has operated with near-total impunity.

This is not an accident. It is the result of a deliberate strategy — one that involves secret algorithms designed to give customers worse prices, four years of concealing tens of billions of transactions from federal regulators, a multibillion-dollar bailout of a failing hedge fund on the eve of the GameStop collapse, and $100 million in political spending that culminated in the death of the one market reform that could have broken Citadel's grip on retail order flow.

Running through all of it — the data infrastructure, the compliance systems, the reporting pipelines that connect every piece of this machine — is a man named Kevin Nutter. His title is Chief Operating Officer of Data at Citadel. His name appears in almost no news coverage. That is, until now.

The Algorithm That Stole From Its Own Customers

Start at the beginning. Not 2020, not GameStop, not the political donations — but 2007, when Citadel Securities was still building the infrastructure that would eventually make it the dominant force in American retail trading.

Between 2007 and 2010, Citadel Securities deployed two proprietary algorithms to execute trades on behalf of retail customers routed through its system. The algorithms had a specific, documented function: they gave investors worse prices for their trades, even in cases where Citadel knew that better prices were available elsewhere in the market.

This is not a matter of dispute. It is a documented finding of the Securities and Exchange Commission, which investigated the practice, brought charges, and in January 2017, announced a $22.6 million settlement with Citadel Securities for what the agency called misleading customers about how their trades were being priced.

The SEC found that Citadel did not merely fail to find better prices — it actively withheld them. The algorithms were designed to route orders in a way that maximized Citadel's own profit at the direct expense of the retail investors those orders were supposed to serve. And critically, Citadel concealed the existence and function of these algorithms from clients, who had no idea their trades were being quietly degraded before execution.

The fine was $22.6 million. Citadel's revenue that year was in the billions. The penalty was, mathematically, less than a rounding error.

The settlement required no admission of wrongdoing. No executives were named. No one was charged with fraud. The case was closed, the fine was paid, and Citadel Securities continued operating as the country's largest retail market maker.

The question that has never been adequately answered: if Citadel was willing to secretly deploy algorithms to extract money from its own customers between 2007 and 2010, what assurance does anyone have that the behavior stopped?

Kevin Nutter and the Data Infrastructure That Makes It All Possible

To understand how Citadel operates, you have to understand what Kevin Nutter does.

Nutter serves as Chief Operating Officer of Data at Citadel — not Citadel Securities, the market-making arm, but Citadel LLC, the hedge fund. On its face, that distinction might seem to limit his relevance to the market-making controversies documented here. In practice, it makes his role more important, not less.

Citadel's entire competitive advantage — the thing that makes it the most profitable market-making operation in the world — is data. Specifically, it is the ability to see, process, and act on enormous quantities of market data faster and more accurately than any competitor. The hedge fund and the market maker share a building, share technology infrastructure, and share an ecosystem in which data flows from one side of the operation to the other with legally mandated but practically unverifiable barriers between them.

Kevin Nutter, as COO of Data, oversees the systems that manage that flow. He came to Citadel from System2 LLC, a data-driven consulting firm, and before that from Marinus Capital Advisors and EY. His background is not in trading or finance in the traditional sense — it is in data management, data infrastructure, and business process engineering. He is the person responsible for how Citadel collects, stores, processes, and distributes the information that drives every decision the firm makes.

In our opinion, his role makes him a central figure worth scrutinizing in connection with what may be Citadel's most significant and least discussed regulatory failure: four consecutive years of failing to report tens of billions of transactions to federal regulators.

Four Years of Hiding Tens of Billions of Transactions

In October 2024, the Financial Industry Regulatory Authority announced that it had fined Citadel Securities for failing to timely and accurately report data for what FINRA described as "tens of billions" of equity and option order events to the Consolidated Audit Trail, the central regulatory database that allows the SEC and FINRA to monitor trading activity across American markets.

The failures ran from June 22, 2020, to August 28, 2024. More than four years. Tens of billions of order events. Gone — or at minimum, hidden — from the regulatory database that exists specifically to prevent the kind of manipulation and misconduct that Citadel has been accused of throughout its history.

The fine was $1 million.

Let that sink in. Four years. Tens of billions of transactions. The maximum penalty FINRA could bring itself to impose was one million dollars — less than what a single Citadel trader might earn in a year, and a tiny fraction of what Citadel Securities generated in revenue during the period of the violations.

The CAT system was built precisely to address what regulators had long identified as a critical surveillance gap: the inability to reconstruct, audit, and investigate market activity at the order level. Without complete CAT data, regulators cannot know whether market makers are front-running customer orders, trading against their own clients, or exploiting the informational advantages that come with seeing order flow before it reaches a public exchange.

When Citadel Securities fails to submit tens of billions of order events to the CAT system, it is not a clerical error. It is a fundamental failure of the surveillance infrastructure that is supposed to make American markets transparent and fair.

In our opinion, as COO of Data at Citadel, Kevin Nutter oversees the systems at the center of these compliance questions — though it is our editorial view, not an established legal finding, that questions about oversight responsibility during this period deserve public scrutiny.

Citadel completed remediation of the reporting failures in June 2024 and submitted corrections by August 2024. The company said nothing about the failure in any public statement during the four years it was occurring.

The Short-Selling Coding Error They Could See But Claimed They Couldn't Fix

The CAT reporting failures were not the first time Citadel's data infrastructure failed in a way that benefited the firm at the expense of regulatory visibility.

In September 2023, the SEC announced settled charges against Citadel Securities for violating Regulation SHO, the federal short-selling framework that requires broker-dealers to accurately mark orders as long, short, or short-exempt. The violations ran from 2015 to 2020 — five consecutive years. The cause was described as a coding error in Citadel's automated trading systems. The penalty was $7 million.

But what the SEC's underlying administrative order reveals is more troubling than a simple coding error. The SEC found that Citadel had internal tools — tools the firm had built itself — that were capable of detecting mismatches between real-time order marks and the firm's official marking positions. Citadel had the ability to see the problem. Its own systems were flagging it. And for five years, the company claims it did not recognize what those flags meant.

A coding error in a trading system operated by a firm that processes 25 to 30 percent of all U.S. equity volume is not a minor compliance matter. Regulation SHO exists because inaccurate short-sale marking is one of the primary mechanisms through which market participants manipulate stock prices — creating artificial selling pressure, suppressing prices in targeted securities, and generating profits at the expense of ordinary investors.

When Citadel mismarks millions of short-sale orders over five years, it means that the regulatory infrastructure designed to detect and prevent short-sale manipulation was, for half a decade, operating on corrupted data.

The data infrastructure at Citadel is managed, in his COO of Data role, by Kevin Nutter.

GameStop: The Bailout, the Trading Halt, and the Conflict That Should Have Ended Citadel's Role in Retail Markets

By January 2021, the story of Citadel and retail investors had been building for years. The algorithm fraud. The short-sale mismarking. The information barrier questions. But it was GameStop that brought everything into visible collision.

On January 25, 2021 — four days before the most dramatic trading halt in the history of retail investing — Citadel LLC and Point72 announced a $2.75 billion emergency bailout of Melvin Capital Management. Melvin was in catastrophic trouble. The hedge fund had built enormous short positions in GameStop, and the explosive retail-driven short squeeze that began in mid-January had put Melvin in danger of complete collapse. The bailout — $2 billion from Citadel, $750 million from Point72 — was the lifeline that kept Melvin alive.

Citadel now had a direct, massive financial stake in Melvin Capital surviving. And Melvin Capital's survival depended, at least in part, on GameStop's price falling back to earth.

On January 28, 2021, Robinhood halted the purchase of GameStop shares. Citadel Securities — which processed the overwhelming majority of Robinhood's retail order flow — was aware of the trading environment in real time. The halt was formally attributed to clearinghouse deposit requirements, but the structural reality is impossible to ignore: Citadel's market-making arm was processing the retail trades that were driving up the price of a stock that Citadel's hedge fund arm had a $2 billion reason to see fall.

Congress investigated. The SEC issued a staff report. Multiple class-action lawsuits were filed, alleging that Citadel and Robinhood had coordinated to harm retail investors for the benefit of institutional short-sellers. Citadel denied coordination. The lawsuits were largely dismissed.

But the core structural conflict that GameStop exposed was never meaningfully addressed: a firm that simultaneously manages one of the world's largest hedge funds and processes 40 percent of retail investor order flow is, by design, in a permanent, unresolvable conflict of interest. Every retail order that passes through Citadel Securities is processed by a firm that also has its own substantial proprietary trading positions in those same securities.

The information barrier is supposed to prevent the hedge fund from benefiting from what the market maker sees. Kevin Nutter manages the data systems through which all of that information flows. The question of whether those barriers actually work — whether they are technically adequate, whether they are genuinely enforced, whether any regulator has ever audited them at the system level — remains unanswered.

The $100 Million That Bought a Regulatory System

In the 2024 election cycle, Kenneth Griffin, the founder and CEO of Citadel, became one of the largest individual political donors in American history. According to reporting by Democracy 21 and data from OpenSecrets, Griffin contributed approximately $75 million to $100 million to political campaigns and outside spending groups — placing him among the top five individual donors to the 2024 federal election.

The donations went predominantly to Republican candidates and conservative political organizations, including contributions to groups supporting Donald Trump's presidential campaign. Griffin had previously donated to other Republican candidates and causes, and his political spending has accelerated dramatically over the past several election cycles.

In January 2025, Paul Atkins was confirmed as Chairman of the Securities and Exchange Commission.

In 2025, the SEC under Atkins withdrew the Order Competition Rule — a landmark market structure reform proposed under the prior SEC leadership of Gary Gensler that would have fundamentally altered how retail order flow is executed in American markets. The rule would have required that retail orders be exposed to competitive auctions before being routed to market makers like Citadel Securities, breaking the payment-for-order-flow arrangement that has made Citadel the dominant processor of retail trades.

Citadel Securities had vocally and aggressively opposed the Order Competition Rule. In a comment letter submitted to the SEC in March 2023, Citadel argued that the proposed auction mechanism would "demonstrably harm retail execution quality" — an argument that critics noted was made by the firm that stood to lose the most revenue if competitive auctions replaced the current payment-for-order-flow system.

Under Atkins, the rule was withdrawn without replacement. Payment for order flow continues unchanged. Citadel Securities' dominant position in retail order execution is, if anything, more entrenched than before.

The connection between Griffin's $100 million in political spending and the death of the one regulatory reform that could have restructured his company's business model is not a matter of proven corruption. There is no smoking-gun document, no recorded conversation, no proven agreement. What there is, instead, is a timeline so straightforward that it requires no interpretation: a billionaire who built his fortune on a regulatory system that benefits him spends $100 million to influence who runs that regulatory system, and the regulators who take office proceed to kill the reform that would have cost him billions.

Kevin Nutter's data infrastructure is what makes that $100 million investment pay dividends. Payment for order flow is, at its core, a data business. Citadel's ability to process retail orders profitably depends on the speed, accuracy, and analytical sophistication of its data systems. The Order Competition Rule would have required that those advantages be exposed to competition. With the rule dead, Nutter's infrastructure continues to operate in the same regulatory vacuum it has occupied for fifteen years.

The Monopoly That Regulators Won't Name

The result of all of this — the decades of fines too small to change behavior, the regulatory capture, the political spending, the conflicts of interest that were documented but never structurally resolved — is a market structure that looks, in almost every functional sense, like a monopoly.

Citadel Securities, Virtu Financial, and a small number of other wholesale market makers now handle the overwhelming majority of retail order flow in the United States. After the withdrawal of the Order Competition Rule, competitive pressure on these firms has, if anything, decreased. The retail investor who uses a commission-free brokerage app has no meaningful choice about who processes their trades. That choice is made for them, by the broker, in exchange for payment.

The payment comes from Citadel. The profit comes from the spread between the price the retail investor receives and the price at which the order is executed. The data advantage that makes that spread profitable runs through Kevin Nutter's systems.

This is the machine that has been built, piece by piece, over twenty years: a market-making operation that controls the execution of retail trades, a hedge fund that trades in the same securities those retail orders touch, an information infrastructure that connects the two, a political spending apparatus that neutralizes the regulators who might otherwise intervene, and a compliance record that demonstrates, fine after fine, that the consequences of misconduct will never be severe enough to change the underlying behavior.

What Accountability Would Actually Look Like

The five-part investigation that The Ethics Reporter published this week outlined specific structural reforms that could meaningfully address Citadel's conflicts of interest: mandatory separation between market-making and hedge fund operations, independent audits of data infrastructure and information barriers, real-time reporting requirements that make CAT concealment impossible, genuine penalty structures that reflect actual revenue rather than fixed fines, and competitive markets for retail order execution that do not depend on payment-for-order-flow arrangements.

None of those reforms are currently on the regulatory agenda. The SEC under Paul Atkins has signaled a broader deregulatory posture. FINRA, which levied a $1 million fine for four years of hiding tens of billions of transactions, has not indicated any plans to revisit its penalty framework. Congress, which held hearings on GameStop in 2021 and produced no legislation, has moved on to other concerns.

Kevin Nutter holds the title of Chief Operating Officer of Data at Citadel. Kenneth Griffin continues to donate to political campaigns. Citadel Securities continues to process your retirement account trades, your index fund rebalancing, your children's college savings investments.

The machine keeps running.

And the only thing it has never had, in twenty years of documented misconduct, is a consequence proportionate to its scale.

A Note on Sourcing

This investigation draws on SEC enforcement actions, FINRA disciplinary proceedings, public regulatory filings, Federal Election Commission data reported by OpenSecrets and Democracy 21, congressional testimony transcripts, academic research on market microstructure, and prior reporting by Reuters, CNBC, and Financial Magnates. Kevin Nutter's professional background was confirmed through professional directory listings including ZoomInfo and RocketReach. Citadel Securities did not respond to a request for comment prior to publication.