Every time you buy a stock through Robinhood, TD Ameritrade, or a dozen other retail brokers, there is a very good chance your order passes through a company called Citadel Securities before it ever reaches a public exchange. Citadel Securities processes roughly 25 to 30 percent of all U.S. equity volume. It handles orders for an estimated 40 percent of retail investors in America. It is, by almost any measure, the most powerful market-making operation in the history of American finance.

And for the better part of two decades, it has operated with near-total impunity.

In our view, this is not an accident. The documented record includes: two undisclosed algorithms that, according to the SEC's 2017 settled order, gave customers worse prices even when better prices were available elsewhere; a FINRA finding that for more than four years the firm failed to timely and accurately report tens of billions of order events to the federal Consolidated Audit Trail; a $2 billion emergency investment in a collapsing hedge fund three days before the GameStop trading halt; and roughly $100 million in political spending by its founder in the election cycle that preceded the SEC's withdrawal of the one market reform that could have broken Citadel's grip on retail order flow. Whether that pattern reflects strategy or serial coincidence is the question this series asks.

Running through all of it — the data infrastructure, the compliance systems, the reporting pipelines that connect every piece of this machine — is a man named Kevin Nutter. His title is Chief Operating Officer of Data at Citadel. His name appears in almost no news coverage. That is, until now.

The Algorithms the SEC Found Gave Customers Worse Prices

Start at the beginning. Not 2020, not GameStop, not the political donations — but 2007, when Citadel Securities was still building the infrastructure that would eventually make it the dominant force in American retail trading.

Between 2007 and 2010, Citadel Securities deployed two proprietary algorithms to execute trades on behalf of retail customers routed through its system. The algorithms had a specific, documented function: they gave investors worse prices for their trades, even in cases where better prices were available elsewhere in the market.

These are the SEC's settled findings, set out in the Commission's January 2017 order (Citadel Securities neither admitted nor denied them). Per that order, one algorithm, FastFill, "immediately internalized an order at a price that was not the best price," and a second, SmartProvide, "routed an order to the market that was not priced to obtain immediately the best price" — while Citadel's representations to its broker-dealer clients suggested it would provide, or try to get, the best available prices. The SEC charged this as a negligence-based disclosure violation, not intentional fraud; no executive was charged. The difference between the two algorithms' function and the firm's marketing is what cost Citadel $22.6 million.

The fine was $22.6 million. Citadel's revenue that year was in the billions. The penalty was, mathematically, less than a rounding error.

The settlement required no admission of wrongdoing. No executives were named. No one was charged with fraud. The case was closed, the fine was paid, and Citadel Securities continued operating as the country's largest retail market maker.

The question that has never been adequately answered: given the SEC's findings about how those two algorithms worked between 2007 and 2010, what independent, public verification exists that nothing comparable operates today? Citadel says its practices comply with the law. No regulator has publicly audited the current algorithms at the system level, so investors are left to take the firm's word for it.

Kevin Nutter and the Data Infrastructure That Makes It All Possible

To understand how Citadel operates, you have to understand what Kevin Nutter does.

Nutter serves as Chief Operating Officer of Data at Citadel — not Citadel Securities, the market-making arm, but Citadel LLC, the hedge fund. On its face, that distinction might seem to limit his relevance to the market-making controversies documented here. In practice, it makes his role more important, not less.

Citadel's entire competitive advantage — the thing that makes it the most profitable market-making operation in the world — is data. Specifically, it is the ability to see, process, and act on enormous quantities of market data faster and more accurately than any competitor. The hedge fund and the market maker share a building, share technology infrastructure, and share an ecosystem in which data flows from one side of the operation to the other with legally mandated but practically unverifiable barriers between them.

A chief operating officer of data would ordinarily oversee the systems that manage that flow; Citadel has never publicly described Mr. Nutter's actual mandate. He came to Citadel from System2 LLC, a data-driven consulting firm, and before that from Marinus Capital Advisors and EY. His background is not in trading or finance in the traditional sense — it is in data management, data infrastructure, and business process engineering. The role, as professional directories describe it, sits atop how Citadel collects, stores, processes, and distributes the information that drives the firm's decisions.

In our opinion, his role makes him a central figure worth scrutinizing in connection with what may be Citadel's most significant and least discussed regulatory failure: four consecutive years of failing to report tens of billions of transactions to federal regulators.

Four Years of Failing to Accurately Report Tens of Billions of Order Events

In October 2024, the Financial Industry Regulatory Authority announced that it had fined Citadel Securities for failing to timely and accurately report data for what FINRA described as "tens of billions" of equity and option order events to the Consolidated Audit Trail, the central regulatory database that allows the SEC and FINRA to monitor trading activity across American markets.

The failures ran from June 22, 2020, to August 28, 2024. More than four years. Tens of billions of order events reported inaccurately or late — missing in their correct form from the regulatory database that exists specifically to detect market manipulation and misconduct. (Most of the affected events were reported with defective data fields — wrong cancellation quantities, misapplied linkage indicators, missing time-in-force codes — rather than never reported at all; the effect either way, in our view, is a surveillance record regulators could not rely on.)

The fine was $1 million.

Let that sink in. More than four years. Tens of billions of order events. The maximum penalty FINRA could bring itself to impose was one million dollars — less than what a single Citadel trader might earn in a year, and a tiny fraction of what Citadel Securities generated in revenue during the period of the violations.

The CAT system was built precisely to address what regulators had long identified as a critical surveillance gap: the inability to reconstruct, audit, and investigate market activity at the order level. Without complete CAT data, regulators cannot know whether market makers are front-running customer orders, trading against their own clients, or exploiting the informational advantages that come with seeing order flow before it reaches a public exchange.

When Citadel Securities misreports tens of billions of order events to the CAT system — whatever the cause — the label "clerical error" does not, in our view, capture what happened. Functionally, it is a failure of the surveillance infrastructure that is supposed to make American markets transparent and fair.

Kevin Nutter's title, according to professional directories, is Chief Operating Officer of Data at Citadel — the hedge fund, not the market-making arm that FINRA fined. Citadel does not publicly disclose how responsibility for data infrastructure is divided between the two affiliated firms, whether Mr. Nutter's organization touches Citadel Securities' regulatory reporting systems, or who inside either firm answers for the CAT failures. In our opinion, that opacity is itself a story: when reporting failures span four years and tens of billions of events, the public is entitled to know who owns the systems that failed. Citadel could answer that question at any time. It has not.

Citadel completed remediation of the reporting failures in June 2024 and submitted corrections by August 2024. The company said nothing about the failure in any public statement during the four years it was occurring.

The Five-Year Coding Error the Firm's Own Surveillance Never Caught

The CAT reporting failures were not the first time Citadel's data infrastructure failed in a way that degraded regulatory visibility.

In September 2023, the SEC announced settled charges against Citadel Securities for violating Regulation SHO, the federal short-selling framework that requires broker-dealers to accurately mark orders as long, short, or short-exempt. The violations ran from 2015 to 2020 — five consecutive years. The cause was described as a coding error in Citadel's automated trading systems. The penalty was $7 million.

What the SEC's administrative order reveals is more troubling than the phrase "coding error" suggests. Citadel had built two automated surveillance tools — an end-of-day order marking report and an intraday order marking monitor — that, in the SEC's words, "allowed Citadel Securities to identify mismatches between the real time order marks" and an independently created marking position. Yet, per the order, the firm's application of its policies and procedures "did not detect either the coding error or the firm's mismarking" — for five years. When Citadel's own internal compliance review finally found the error in September 2020, the firm fixed it in three business days. In our opinion, that is the scandal: not that the problem was hard to fix — it demonstrably was not — but that a firm processing a quarter of U.S. equity volume ran surveillance for half a decade that never caught it.

A coding error in a trading system operated by a firm that processes 25 to 30 percent of all U.S. equity volume is not a minor compliance matter. Regulation SHO exists because inaccurate short-sale marking is one of the primary mechanisms through which market participants manipulate stock prices — creating artificial selling pressure, suppressing prices in targeted securities, and generating profits at the expense of ordinary investors.

When Citadel mismarks millions of short-sale orders over five years, it means that the regulatory infrastructure designed to detect and prevent short-sale manipulation was, for half a decade, operating on corrupted data.

Citadel's data organization is led, according to professional directories, by Kevin Nutter as COO of Data; how far his remit extends into Citadel Securities' trading and reporting systems is not publicly known.

GameStop: The Bailout, the Trading Halt, and the Conflict That Should Have Ended Citadel's Role in Retail Markets

By January 2021, the story of Citadel and retail investors had been building for years. The algorithm fraud. The short-sale mismarking. The information barrier questions. But it was GameStop that brought everything into visible collision.

On January 25, 2021 — three days before the most dramatic trading halt in the history of retail investing — Citadel LLC and Point72 announced a $2.75 billion emergency bailout of Melvin Capital Management. Melvin was in catastrophic trouble. The hedge fund had built enormous short positions in GameStop, and the explosive retail-driven short squeeze that began in mid-January had put Melvin in danger of complete collapse. The bailout — $2 billion from Citadel, $750 million from Point72 — was the lifeline that kept Melvin alive.

Citadel now had a direct, massive financial stake in Melvin Capital surviving. And Melvin Capital's survival depended, at least in part, on GameStop's price falling back to earth.

On January 28, 2021, Robinhood halted the purchase of GameStop shares. Citadel Securities — which processed the overwhelming majority of Robinhood's retail order flow — was aware of the trading environment in real time. The halt was formally attributed to clearinghouse deposit requirements, but the structural reality is impossible to ignore: Citadel's market-making arm was processing the retail trades that were driving up the price of a stock that Citadel's hedge fund arm had a $2 billion reason to see fall.

Congress investigated. The SEC issued a staff report. Multiple class-action lawsuits were filed, alleging that Citadel and Robinhood had coordinated to harm retail investors for the benefit of institutional short-sellers. Citadel denied coordination; the House Financial Services Committee's report attributed the halt to clearinghouse deposit demands on Robinhood and did not find that Citadel directed it; the SEC's staff report likewise found no evidence that hedge funds pressured brokers into the restrictions; and the coordination lawsuits were dismissed. What no report resolved — and what, in our view, no report could resolve — is the structural problem: a firm with a fresh $2 billion stake in a GameStop short-seller was simultaneously the dominant processor of the retail orders driving GameStop up.

But the core structural conflict that GameStop exposed was never meaningfully addressed: a firm that simultaneously manages one of the world's largest hedge funds and processes 40 percent of retail investor order flow is, by design, in a permanent, unresolvable conflict of interest. Every retail order that passes through Citadel Securities is processed by a firm that also has its own substantial proprietary trading positions in those same securities.

The information barrier is supposed to prevent the hedge fund from benefiting from what the market maker sees. The data systems through which that information flows sit in Citadel's data organization — led, per professional directories, by Kevin Nutter. The question of whether those barriers actually work — whether they are technically adequate, whether they are genuinely enforced, whether any regulator has ever audited them at the system level — remains unanswered.

$100 Million in Political Money — and the Reform That Died

In the 2024 election cycle, Kenneth Griffin, the founder and CEO of Citadel, became one of the largest individual political donors in American history. According to reporting by Democracy 21 and data from OpenSecrets, Griffin contributed approximately $75 million to $100 million to political campaigns and outside spending groups — placing him among the top five individual donors to the 2024 federal election.

The donations went predominantly to Republican candidates and conservative political organizations, including contributions to groups supporting Donald Trump's presidential campaign. Griffin had previously donated to other Republican candidates and causes, and his political spending has accelerated dramatically over the past several election cycles.

In April 2025, Paul Atkins was confirmed as Chairman of the Securities and Exchange Commission. In June 2025, the SEC formally withdrew fourteen pending rule proposals, among them the Order Competition Rule.

The Order Competition Rule was a landmark market structure reform proposed under the prior SEC leadership of Gary Gensler that would have fundamentally altered how retail order flow is executed in American markets. The rule would have required that retail orders be exposed to competitive auctions before being routed to market makers like Citadel Securities, breaking the payment-for-order-flow arrangement that has made Citadel the dominant processor of retail trades.

Citadel Securities had vocally and aggressively opposed the Order Competition Rule. In a comment letter submitted to the SEC in March 2023, Citadel argued that the proposed auction mechanism would "demonstrably harm retail execution quality" — an argument that critics noted was made by the firm that stood to lose the most revenue if competitive auctions replaced the current payment-for-order-flow system.

Under Atkins, the rule was withdrawn without replacement. Payment for order flow continues unchanged. Citadel Securities' dominant position in retail order execution is, if anything, more entrenched than before.

The connection between Griffin's $100 million in political spending and the death of the one regulatory reform that could have restructured his company's business model is not a matter of proven corruption. There is no smoking-gun document, no recorded conversation, no proven agreement. What there is, instead, is a timeline so straightforward that it requires no interpretation: a billionaire who built his fortune on a regulatory system that benefits him spends $100 million to influence who runs that regulatory system, and the regulators who take office proceed to kill the reform that would have cost him billions.

Payment for order flow is, at its core, a data business: the profitability of processing retail orders depends on the speed, accuracy, and analytical sophistication of the firm's data systems. The Order Competition Rule would have exposed those advantages to competition. With the rule dead, Citadel's data machinery — the domain that professional directories place under Kevin Nutter as COO of Data — continues to operate without the competitive test regulators once proposed for it.

The Monopoly That Regulators Won't Name

The result of all of this — the decades of fines too small to change behavior, the regulatory capture, the political spending, the conflicts of interest that were documented but never structurally resolved — is a market structure that looks, in almost every functional sense, like a monopoly.

Citadel Securities, Virtu Financial, and a small number of other wholesale market makers now handle the overwhelming majority of retail order flow in the United States. After the withdrawal of the Order Competition Rule, competitive pressure on these firms has, if anything, decreased. The retail investor who uses a commission-free brokerage app has no meaningful choice about who processes their trades. That choice is made for them, by the broker, in exchange for payment.

The payment comes from Citadel. The profit comes from the spread between the price the retail investor receives and the price at which the order is executed. The data advantage that makes that spread profitable runs through the firm's data systems — the domain professional directories place under Kevin Nutter.

This is the machine that has been built, piece by piece, over twenty years: a market-making operation that controls the execution of retail trades, a hedge fund that trades in the same securities those retail orders touch, an information infrastructure that connects the two, a political spending apparatus that neutralizes the regulators who might otherwise intervene, and a compliance record that, in our view, demonstrates, fine after fine, that the consequences will never be severe enough to change the underlying behavior.

What Accountability Would Actually Look Like

The five-part investigation that The Ethics Reporter published this week outlined specific structural reforms that could meaningfully address Citadel's conflicts of interest: mandatory separation between market-making and hedge fund operations, independent audits of data infrastructure and information barriers, real-time reporting requirements that make CAT reporting failures immediately visible, genuine penalty structures that reflect actual revenue rather than fixed fines, and competitive markets for retail order execution that do not depend on payment-for-order-flow arrangements.

None of those reforms are currently on the regulatory agenda. The SEC under Paul Atkins has signaled a broader deregulatory posture. FINRA, which levied a $1 million fine for more than four years of failing to accurately report tens of billions of order events, has not indicated any plans to revisit its penalty framework. Congress, which held hearings on GameStop in 2021 and produced no legislation, has moved on to other concerns.

Kevin Nutter holds the title of Chief Operating Officer of Data at Citadel. Kenneth Griffin continues to donate to political campaigns. Citadel Securities continues to process your retirement account trades, your index fund rebalancing, your children's college savings investments.

The machine keeps running.

And the only thing it has never had, across two decades punctuated by documented violations — three significant federal enforcement actions since 2017 alone — is a consequence proportionate to its scale.

A Note on Sourcing

This investigation draws on SEC enforcement actions, FINRA disciplinary proceedings, public regulatory filings, Federal Election Commission data reported by OpenSecrets and Democracy 21, congressional testimony transcripts, academic research on market microstructure, and prior reporting by Reuters, CNBC, and Financial Magnates. Kevin Nutter's professional background was confirmed through professional directory listings including ZoomInfo and RocketReach. Citadel Securities, Citadel LLC, and the executives named in this series are invited to respond to this reporting. We will publish, in full and unedited, any responsive statement, and we will promptly correct any demonstrated error of fact — as reflected in the corrections note appended to this article.