The numbers are stark: $22 million raised from 380 investors, with only 13%—roughly $2.86 million—ever touching a mining rig. The rest went to marketing, personal expenses, and paying earlier investors. This is the anatomy of the SEC’s latest enforcement action against Zan Shaikh and his company, Mining Automatic. It’s a classic Ponzi scheme wrapped in the narrative of crypto mining, but it reveals something deeper about the fragility of trust in decentralized markets.
— Root: The 2022 Bear Market
Let me set the context. When DeFi Summer hit in 2020, I watched thousands of retail investors pour liquidity into protocols with barely a whitepaper scrutiny. The promise of “guaranteed monthly returns from mining” became a siren song for those frustrated with traditional finance’s low yields. Shaikh tapped into that exact hunger. From 2023 to 2025, his operation collected deposits from over 380 individuals, each averaging around $58,000—a sum that suggests many were dipping into savings or retirement accounts. The SEC’s complaint, filed last week, alleges that Shaikh and his firm violated anti-fraud and securities registration provisions of the Securities Act of 1933 and the Exchange Act of 1934.
Code is law, but people are the protocol.
The core of this case isn’t about technology—it’s about the social contract that underpins every decentralized network. When investors send hard-earned capital to a “mining entity,” they implicitly trust that the operators have real hardware, operational expertise, and a commitment to transparency. What we found in the SEC’s filing is a complete inversion: only 13% of funds were allocated to actual mining operations. The remaining $19 million was funneled into a classic Ponzi structure—new investor money paying older investors their “guaranteed” returns, while Shaikh and his team skimmed millions for personal use, including luxury travel and unrelated business ventures.
This is where my own experience in the 2022 bear market comes into play. During that crash, I led the Resilience Hub—a mentorship program connecting junior developers with veterans. We saw dozens of “mining-as-a-service” projects vanish overnight. The common thread? Zero verifiable code, no public hash rates, and promises that defied basic economics. Mining Automatic had no GitHub repository, no audit reports, no real-time proof of work. It was a phantom operation, sustained entirely by human greed and regulatory blind spots.
— Root: DeFi Summer
But here’s the contrarian angle that many miss: the absence of a token actually made this fraud harder to detect. In DeFi, we can track on-chain flows, audit smart contracts, and measure total value locked. When a protocol issues a governance token, we can analyze its distribution and vesting schedule. Mining Automatic didn’t have a token—it had a simple bank account. That meant no public ledger, no transparency, no way for investors to independently verify the claims. The fraud was hiding in plain sight, disguised as a traditional business.
This case underscores a painful truth: decentralization without transparency is just centralized fraud in a digital costume. The SEC’s Howey Test application here is textbook—money invested in a common enterprise with expectation of profits from the efforts of others. But what’s more disturbing is how easily the narrative of “crypto mining” was weaponized to bypass critical thinking. “Guaranteed returns” remains the single most dangerous phrase in our industry. It’s the red flag that every investor should be trained to spot, yet it keeps working because hope is a powerful drug.
The settlement—both parties consenting to a permanent injunction pending court approval—is a procedural step, but it won’t recover the lost $22 million. Most of those funds are gone, spent or transferred beyond reach. The real value of this case lies in the lesson it offers to the community: code is not a substitute for due diligence. We need to elevate our standards beyond just reading a website. We need to demand on-chain proof, third-party audits, and verifiable revenue streams.
— Root: The 2022 Bear Market
Where do we go from here? The SEC’s action is a signal that the window for unregistered, promise-heavy mining schemes is closing. For legitimate mining firms, this is an opportunity to differentiate through radical transparency—live dashboards showing energy consumption, hash rates, and wallet balances. For investors, it’s a moment to recalibrate. If a project offers fixed monthly returns from mining without showing you the actual machines running, ask yourself: why would a profitable mining operation need to raise money from strangers?
Governance isn’t just about token votes; it’s about the collective responsibility to protect each other from bad actors. The $22 million illusion is a scar on our industry’s reputation, but it can also be a catalyst for maturity if we choose to learn from it. The next time you see a mining pool promising 12% monthly returns, remember that code is law, but people are the protocol—and protocols need communities that hold each other accountable.
We didn’t lose $22 million; we lost the trust of 380 families. That’s a debt we can only repay by building a more transparent, more resilient ecosystem.