CustodyStress
Archive › Physical coercion
Part of the CustodyStress archive of observed Bitcoin custody incidents
CS-00991

Physical coercion — exchange custody (2022)

Blocked
Case description
A crypto entrepreneur in Hong Kong was kidnapped and held for 38 hours in April 2022 by a gang demanding a ransom in Bitcoin. Attackers had prior knowledge of the victim's approximate holdings through their public profile. The victim was forced to log into exchange accounts and transfer funds while in captivity. Exchange-custodied Bitcoin—which required only a phone and password to transfer—proved more immediately accessible to attackers under coercion than self-custodied hardware wallets.
Custody context
Stress conditionPhysical coercion
Custody systemExchange custody
OutcomeBlocked
DocumentationUnknown
Year observed2022
CountryHong Kong
Structural dependencies observed
Biometric or physical presence
What this illustrates
Access required in-person verification that couldn't be arranged under the circumstances. Access was not recoverable.
Outcome interpretation
Access was not possible under the reported conditions.
Source
Publicly Reported
Evidence type
News article
Related cases involving physical coercion
105 cases involve physical coercion 512 cases involve exchange custody View archive statistics →
This archive documents observed custody survivability failures. It does not attempt to document all Bitcoin losses or security incidents. Submit a case
← All cases
Framework references
Terms guide
Survives
Access remained possible under the reported conditions.
Constrained
Access remained possible, but only with delay, dependence, or significant difficulty.
Blocked
Access was not possible under the reported conditions.
Indeterminate
There was not enough information to determine the outcome.
Single-person knowledge
Recovery depended on information or capability held by one individual who was unavailable.
Institutional dependence
Recovery depended on a third-party institution or service that was inaccessible or uncooperative.
Documentation gap
Recovery depended on instructions that were missing, incomplete, or unclear.
Authority mismatch
The person with legal authority to act did not have operational access, or vice versa.
Original text
Rate this translation
Your feedback will be used to help improve Google Translate