He walked out. Harper took the paper. She knew the code: H255 was the forgotten settlement loop from the legacy merger—a splice in the matching engine where trades went to die if the counterparty’s BIC code was malformed. Most people thought it was patched in 2019. It wasn’t. It was just sleeping.
The sender: LegalEntra@Pierpoint.com – a domain decommissioned in 2017.
And as she pulled out her phone and texted DVD one word— “Payback” —she knew exactly whose risk was about to get buried in H255’s tomb.
Her jaw tightened. This wasn’t a glitch. This was a door left open.
A pause. Keyboard clatter. “That’s not possible. That loop requires a Level 4 override signed off by two MDs.”
Harper looked past him toward the trading floor, now slowly filling with confused juniors and coffee-carrying VPs. Somewhere among them was the person who had built this bomb.
The delta was wrong. Not by a few basis points. By a mile. A ghost order had bled through the Chicago feed—a position worth £48 million that no one had authorized. It was sitting in an omnibus account registered to a shell out of Luxembourg that, according to Pierpoint’s own KYC, did not exist .
