The prime broker's noon check approaches. Every trading day at midday, Blackridge's lender runs an automated review of the firm's account. The system compares the current market value of Blackridge's portfolio against the collateral thresholds written into their lending agreement. If the portfolio has lost enough value (and today, with pharma stocks rising against Blackridge's short positions, it has), the lender issues a margin call: a formal demand to deposit additional cash or securities, usually within two to four hours. The lender's schedule does not care whether Blackridge's internal story is elegant, only whether collateral and thresholds still agree on paper. Blackridge can still move collateral, but every internal minute spent waiting now belongs partly to the lender. Time becomes a second currency, spent without asking. You feel the gap as a tightening across your shoulders. This is the exact gap the cell wanted. [[Cybercrime/The_Phisherman/Delay Window Opens|Verify if the delay window open]] [[Cybercrime/The_Phisherman/The Bank Does Not Wait|Verify the Bank position]] <details> <summary>🔎 Behind the curtain: what a prime broker is</summary> <p>A <b>prime broker</b> is the big bank that lends a fund the cash and shares it needs to trade at scale, holds its assets, and settles its deals. In return the fund must keep a cushion of <b>collateral</b> on deposit, and the bank keeps checking, often automatically and on a fixed daily schedule, that the collateral still covers the risk. The prime broker is an outsider with its own dashboards and its own thresholds, which is exactly what an attacker exploits: Blackridge can soothe its own committee, but it cannot talk the lender's automated clock out of running.</p> <p><b>Defender's lesson:</b> a crisis is rarely contained inside one company. Counterparties react on their own timers, so an incident plan has to assume outside pressure lands before you are ready.</p> </details>