In early 2012, a portfolio inside JPMorgan Chase’s Chief Investment Office was breaching its risk limits. Then a new value-at-risk model arrived, and the problem seemed to vanish. The new model cut the portfolio’s reported risk roughly in half.

Months later, the trades that became known as the “London Whale” had produced losses exceeding $6 billion. An internal review by the bank later found that the new model relied on spreadsheets populated through manual copy-and-paste steps and contained calculation errors.

The trades were risky. More unsettling was the number that declared them safe.

Here lies the paradox at the center of algorithmic trading risk management. Every risk system is also a model: designed by people, written in software, and capable of error. Institutions that survive have learned to ask a question most traders never consider: who measures the measurer?

The Trouble With One Number

Value at risk won its popularity by reducing a portfolio’s danger to a single figure. The same simplicity is its greatest weakness. VaR captures losses in ordinary conditions but reveals little about how severe the worst days can become.

Regulators absorbed the lesson. The Basel Committee’s revised market risk framework moved bank capital models from VaR to expected shortfall, a measure that asks what the average loss looks like once you are already in the tail.

This principle extends well past the banking sector. Serious quantitative trading research treats risk metrics with the same skepticism it applies to alpha signals. Metrics are tested against historical crises, their assumptions are documented, and any methodological change is independently reviewed. A risk model that cannot be challenged is just an opinion with decimals.

Limit the Execution, Not Just the Exposure

U.S. markets experienced the Flash Crash on May 6, 2010. A joint SEC and CFTC report pointed to a key trigger, a sell program of 75,000 E-mini S&P 500 futures contracts executed by an algorithm that targeted a share of trading volume without regard to price or time.

The position was ordinary. Its execution was not constrained.

Execution limits are now a core part of institutional AI trading system development. Typical controls include price collars that block orders far from the prevailing market, participation caps, order-rate throttles, and checks that pause an algorithm when conditions shift faster than it was built to handle. Exposure limits set how much you can lose. Execution limits set how fast.

Stack the Controls

Mature risk architectures seldom depend on a single control. They stack several.

Before an order leaves the firm, pre-trade checks reject it if it violates size, price, or credit limits. During the day, real-time monitoring tracks positions and losses against hard limits that halt trading and soft limits that trigger escalation. Post-trade review then compares what happened with what was supposed to happen.

Every layer assumes the previous one may fail. That is not pessimism. It is engineering.

Engineer the Risk Software

The London Whale model failed partly through ordinary software problems: manual processes, insufficient testing, and weak change control. Institutional algorithmic trading software development now gives risk logic the rigor normally reserved for trading engines. Changes require version control and peer review, and new models run in parallel with old ones before any switch.

Firms also replay historical crises through their systems to confirm that controls actually trigger. This is often where AI trading infrastructure consulting proves algorithmic trading risk management most useful. Outside specialists, unattached to the current design, can test whether the safeguards survive conditions their builders never pictured.

When a Limit Breaks

A limit is only as strong as what happens when it is crossed. Disciplined institutions escalate breaches to people independent of the trading desk, and their default is to reduce risk, never to rewrite the limit.

In risk management, nothing is more dangerous than a breach that gets explained away.

A Four-Question Risk Check

Before trusting any risk framework, ask:

Who validated the risk model, and were they independent of its owners?
How does the system behave in the tail, not merely on an average day?
Can an algorithm lose money faster than a human can intervene?
When a limit breaks, does the portfolio change, or does the limit?
The Comfort of a Number

Risk numbers carry a strange emotional power. They let people sleep. They let committees approve. They turn uncertainty into something that looks like knowledge.

That comfort is precisely why institutions surround such numbers with doubt.

Nothing about the London Whale trades was concealed. They were in plain view and measured daily. The danger was never out of sight. It lived inside a number everyone wanted to trust.