“Change the locks”
Jon Stettin
Who Can Fix The Tote System?
Twenty-four years ago, a computer programmer named Chris Harn did something that should have ended horse racing’s ability to tell horseplayers “trust us.” Working inside Autotote, the company processing roughly two-thirds of the country’s electronic racing wagers, Harn found a gap in the plumbing: multi-race bet data sat unprotected for a window of time before it was transmitted to the host track. He used that gap, with two fraternity friends as his cashiers, to alter a Pick Six ticket after four legs of the 2002 Breeders’ Cup were already official. Only a 43-1 shot named Volponi, winning the Classic no one had, blew the scheme up.
I’ve been thinking about the Fix Six a lot lately, and not out of nostalgia. This publication spent some time this year on the leaked veterinary past performances scandal, a story about information that wasn’t supposed to move, moving anyway, to the benefit of whoever had access to it. That story is still unfolding, and there’s probably more coming. But sitting with it long enough, I kept landing on the same older question. A generation ago it was tote data leaking through a gap nobody sealed in time. This year it was veterinary data leaking through a gap nobody sealed in time. Different pipe. Same design flaw: racing keeps discovering, after the fact, that information some people shouldn’t have had moved freely anyway.
That’s what sent me back to 2002. Not because the two scandals are the same story, they aren’t, but because the industry’s answer to the first one is supposed to be the reason the second one couldn’t happen. So did it work?
The industry’s own polling after the Fix Six found seven in ten horseplayers had lost confidence in the tote system. That number should have been the mandate for a rebuild. So the question worth asking in 2026 isn’t whether racing responded. It did. The question is what kind of response it actually was.
Did racing modernize the tote system, or did it strengthen the locks on the same house?
Ledger One: What Racing Said It Did
In the immediate aftermath, the National Thoroughbred Racing Association moved fast, publicly, at least. It pushed tote companies to close the “late scan” gap Harn exploited, stood up a Wagering Integrity Alliance, and formed a Wagering Technology Working Group to study the plumbing industry-wide. The public message, repeated for two decades since, has been consistent: the vulnerability was found, the vulnerability was closed, the system is safe.
Ledger Two: What the Record Actually Shows
Set beside that message, the paper trail tells a narrower story. The independent oversight function that was supposed to give horseplayers a referee, the Thoroughbred Racing Protective Bureau was already being hollowed out before the Fix Six even happened, as tracks cut costs on agents and coverage through the 1990s and 2000s. It never really recovered. TRPB is still a subsidiary of the racetracks it’s supposed to police, funded by them, answerable to them, and its main modern tool, a platform called WASP, is described by the organization itself as something track officials monitor themselves. There is no independent cop. There’s a tool the guarded hand to the guards.
More telling: researchers who spoke to tote-industry veterans found that the core protocol still moving bets between tracks, ADWs, and simulcast hubs today, an aging standard known in the business as ITSP, is the same basic framework racing has run on for decades, and multiple people inside the pari-mutuel technology business have said, on the record, that it’s approaching the end of its useful life. That’s not a horseplayer’s suspicion. That’s the plumbers talking.
Two ledgers. One says the vulnerability was closed. The other says the house was never rewired, someone just changed the locks on the door Harn walked through, and left the rest of the structure standing. Let the document self-indict: racing calls this a modernization. The record calls it a patch.
(For how fragmented that “house” actually is — who owns which tote company, which CAW platform, and why that ownership map is the real obstacle to a rebuild — see the sidebar below.)
Yesterday’s problem, today’s infrastructure
Here’s where it stops being a history lesson.
While the architecture question sat unresolved for two decades, wagering itself was transformed. Computer-assisted wagering and mobile handle turned racing’s pools into something closer to a real-time financial market — enormous sums moving through algorithmic accounts in the final seconds before post. The infrastructure carrying that volume is largely the same infrastructure built to survive the Fix Six, not the CAW era.
The strain shows. Tote outages have hit major cards repeatedly in just the last two years — a communications failure between AmTote’s hub and Tampa Bay Downs forced the 2024 Tampa Bay Derby card to run its final races with no wagering at all. United Tote suffered its own outage in late September 2025 that froze wagering across multiple tracks and ADWs for roughly an hour, followed by a second failure at an Oregon hub the very next day. A 2023 coding error let bets process at reduced base rates rather than full ticket cost at harness tracks. None of these were insider fraud. They were an aging system being asked to carry a load it wasn’t built for.
Then, in October 2025, the question of whether racing solved yesterday’s problem while leaving today’s infrastructure alone stopped being theoretical. A nationwide class-action suit, filed in the Eastern District of New York against 1/ST, Churchill Downs, NYRA, and their CAW subsidiaries, alleges the very platforms riding on this infrastructure — Elite Turf Club, Velocity, Racing & Gaming Services — give a small group of algorithmic bettors informational and fee advantages worth close to $4 billion a year in pool activity, effectively no-risk wagering built on top of a system the ordinary bettor is told is a level playing field. The suit brings RICO claims. Whatever a court eventually decides about intent, the plumbing itself isn’t in dispute: the same rails carrying a $2 retail bettor’s ticket carry algorithmic pool-scanning volume the public bettor has no way to see or match.
That’s the modern version of Chris Harn’s late-scan window. Nobody has to hack anything when the architecture itself creates an information gap between who’s inside the pool and who isn’t.
So: yes or no?
If the question is whether racing responded to the Fix Six, the answer is yes. If the question is whether it modernized the architecture, the honest answer is no — it patched the exploit, trimmed its own police force further, and never resolved who owns the authority to rebuild. Twenty-four years later, the same fragmented, self-regulated structure is being asked to carry a wagering economy built on algorithms and real-time hedging it was never designed for, and the bill for that gap is now showing up in a federal courtroom instead of a Racing Form headline.
Every time odds move after the gates open, whether the explanation is a late-arriving hub update, CAW, or something worse, some horseplayer remembers Volponi. That’s not paranoia. It’s institutional memory, and racing built it.
The industry doesn’t need another task force. It needs someone with the authority, the capital, and the incentive to actually answer the questions this piece just asked — and until that person exists, racing hasn’t modernized anything. It’s just gotten better at keeping the locks quiet.
Sidebar: Who Actually Owns “The Tote System”
Ask someone to replace “the tote system” and the first honest answer has to be: which one? There’s no single tote system to replace — there’s a fragmented ownership map, and that fragmentation is itself the biggest obstacle to any rebuild.
- AmTote International — majority tied to 1/ST (formerly the Stronach Group).
- United Tote — split between Churchill Downs (51%) and NYRA (49%), after CDI sold NYRA its stake in a 2022 deal aimed at aligning racing and sports-wagering infrastructure.
- Elite Turf Club — the offshore computer-assisted wagering platform, majority-owned by 1/ST with NYRA holding a minority stake.
- Velocity — a CAW platform wholly owned by Churchill Downs.
- Racing & Gaming Services — a third CAW platform, based in Saint Kitts, named alongside the others in current litigation.
- The Thoroughbred Racing Protective Bureau — the industry’s lone wagering-security body, wholly owned by the racetracks themselves through the Thoroughbred Racing Associations of North America.
“Even HISA, created specifically to bring uniform federal oversight to racing, has no jurisdiction here, its 2020 mandate covers safety and medication, not the pari-mutuel plumbing.”
