By Reed R. Kathrein

The 98.8% Buffer

When a community bank decides to juice its earnings by renting out its regulatory plumbing to fintech startups, the clock starts ticking on a very specific kind of time bomb. The fundamental law of corporate behavior is that you are legally permitted to architect a terrible business model—you can underwrite disastrous consumer loans, you can misjudge your capital ratios, and you can obliterate tens of millions of dollars in a single quarter. But you are not allowed to look your shareholders in the eye, point to a piece of paper, and tell them that your risk is magically zeroed out when you know the counterparty on that paper cannot actually cover the bill. That brings us to Coastal Financial Corporation (NASDAQ: CCB), a bank that decided to become a "Banking as a Service" (BaaS) provider.

The Mechanics of the Mirage

Coastal Financial operates a segment called CCBX, which essentially allows digital financial service providers and brands to offer banking products using Coastal’s charter. The magic trick of CCBX was growth without consequence. Coastal originated the loans, but the fintech partners supposedly signed indemnification agreements protecting the bank from credit losses. To reassure the market as this portfolio swelled past $2.2 billion, Coastal bulked up its risk management team—at one point boasting that one-third of its entire workforce consisted of risk personnel—while raking in program fees.

According to the complaint filed in Allegheny County Employees' Retirement System v. Coastal Financial Corporation, (Case No. 2:26-cv-03746, W.D. Wash.), the operational reality of this risk management was fundamentally hollow. While executives touted their disciplined expansion, they failed to disclose that a single CCBX partner—accounting for approximately $500 million in underlying loans, or nearly 23% of the entire CCBX portfolio—had materially deteriorated. When the music stopped on July 30, 2026, the supposedly ironclad indemnification evaporated into a $68.8 million credit expense, consisting of a massive $46 million write-down of the credit enhancement asset and a $22.8 million provision for credit losses. This disclosure vaporized roughly $470 million of the company's market cap, sending the stock down 43.5% in a single day.

The Texts

The most amusing aspect of the modern corporate disclosure regime is the precision with which executives will quantify an illusion right before it shatters. In April 2026, just weeks before realizing they had a $68.8 million crater in their balance sheet, Coastal's management offered a remarkably specific reassurance to the market.

We "have contracts with our partners that fully indemnify us against fraud and 98.8% against credit risk on CCBX loan partner balances as of March 31, 2026."

It is an enduring puzzle why executives feel compelled to invent highly specific decimals to describe their safety. A 98.8% indemnification sounds like a mathematical certainty calculated by an army of risk officers (who, Coastal claimed, comprised 33% of their payroll). But an indemnification agreement is only as good as the counterparty's balance sheet. You can have a piece of paper that says you are 100% indemnified against a meteor strike, but if you bought it from a guy selling apples on the corner, you are still going to pay for the roof. Coastal was 98.8% indemnified against credit risk right up until the exact moment they actually had credit risk, at which point they had to take a $46 million valuation adjustment to the very asset that was supposed to protect them.

The Enforcement Deficit

This is why these cases land in federal court. As the SEC openly acknowledges the need to "responsibly steward Commission resources" amidst declining enforcement budgets—even going so far as dismissing high-profile crypto cases in early 2025 simply to clear the backlog—the regulatory agencies are perennially overwhelmed. They might get around to issuing a civil penalty in five years if they have the budget and bandwidth. Corporate boards know this perfectly well. They know that without private enforcement and the very real Fear Of Lawsuit (FOLS), the expected value of hyping up a 98.8% risk shield is always positive. Private class actions are not an annoyance in the BaaS space; they are the market’s primary mechanism for enforcing reality and forcing management to price in their actual risk.

If You Bought the Float

If you happened to purchase $CCB securities during the period when management claimed they were insulated from credit risk by bulletproof partner indemnifications, and you are interested in seeing the bill for that discrepancy, our litigation team at Hagens Berman is reviewing the paper trail.

• Case Hub: hbsslaw.com/CCB
• Email: [email protected]