Part of the CustodyStress archive of observed Bitcoin custody incidents
Shared Service Dependency — Exchange custody
Cases where multiple access paths to exchange-held Bitcoin shared a common dependency on the exchange itself. When the exchange failed, all paths failed simultaneously.
61% of all Exchange custody cases in the archive involve this structural dependency. The blocked rate among them is 56% — 13 points below the archive-wide blocked rate of 69%. The most common recovery path is exchange support.
73
Blocked
53
Constrained
4
Survived
31
Indeterminate
97% of determinate cases resulted in blocked or constrained access.
161 observed cases
Blocked
73 (45%)
Constrained
53 (33%)
Survived
4 (2%)
Indeterminate
31 (19%)
Xitong Zou: QuadrigaCX Creditor During Exchange Collapse and Fraud
Exchange custody
Xitong Zou was a customer of QuadrigaCX, a Canadian cryptocurrency exchange that collapsed in late 2018. Like thousands of other users, Zou had cryptocurrency h
Cointed GmbH Exchange Collapse: Austria, 2018 — Customer Funds Disappeared
Exchange custody
Cointed GmbH, founded in 2016 in Kufstein, Austria, operated as a regional cryptocurrency powerhouse: a custodial exchange, mining operation, and operator of on
Coincheck Exchange Hack: 523 Million NEM Stolen, User Withdrawals Frozen
Exchange custody
On January 26, 2018, Coincheck, a Tokyo-based cryptocurrency exchange, discovered that attackers had stolen approximately 523 million NEM tokens valued at $530
Coinrail Exchange Hack — $40 Million Altcoin Loss, Partial Recovery
Exchange custody
On June 10, 2018, Coinrail, a South Korean cryptocurrency exchange, publicly confirmed a security breach affecting its hot wallet infrastructure. Attackers gain
MapleChange Exit Scam: 919 Bitcoin Lost, CEO Identified as Glad Poenaru
Exchange custody
MapleChange, a small Canadian cryptocurrency exchange, announced on October 28, 2018 that it had suffered a catastrophic hack. According to the exchange's Twitt
Bithumb $31 Million Hack — June 2018 Withdrawal Suspension
Exchange custody
Bithumb, one of South Korea's dominant cryptocurrency exchanges handling billions in daily trading volume, discovered a security breach on June 19, 2018. Intern
Elvis Cavalic and QuadrigaCX: C$15,000 Withdrawal Lost to Exchange Collapse
Exchange custody
Elvis Cavalic of Calgary, Alberta was an active QuadrigaCX customer who had accumulated cryptocurrency holdings through trading on the platform. In October 2018
Zaif Exchange Hack: 5,966 BTC Stolen, User Funds Frozen (September 2018)
Exchange custody
On September 14, 2018, the Zaif cryptocurrency exchange operated by Tech Bureau Corp suffered a significant hot wallet breach. Attackers gained unauthorized acc
Blockchain.info Wallet Access Failure: Platform Login System Change (2017)
Exchange custody
In March 2014, a user created a Blockchain.info-hosted wallet and received a 12-word recovery passphrase as the sole access credential. The user documented the
Yapizon Exchange Hack (April 2017): 3,831 BTC Stolen, Socialised Loss Model Applied to All Users
Exchange custody
On April 22, 2017, Yapizon, a South Korean cryptocurrency exchange, suffered a security breach resulting in the theft of 3,831 BTC—approximately 37% of the exch
Youbit Exchange Bankruptcy: Second Hack Triggers 75% Fund Recovery Limit
Exchange custody
Youbit, operated by South Korean firm Yapian, experienced two significant security breaches during 2017. The first attack in April 2017 compromised approximatel
Institutional lockout — exchange custody (2017)
Exchange custody
Between 2014 and 2015, the user created cryptocurrency accounts on blockchain.info and retained the mnemonic seed phrases. By December 2017, the user attempted
Kraken Account 2FA Lockout: Support Vanished After ID Verification
Exchange custody
In September 2017, a Kraken user (z1926) enabled two-factor authentication on their exchange account but encountered a system malfunction during the process. Th
Blockchain.info Legacy Wallet Lockout: 17-Word Phrase Incompatible With Recovery Tool
Exchange custody
Between November and December 2017, multiple Blockchain.info users discovered they could not access legacy wallets created years earlier, despite possessing com
Blockchain.info Wallet Access Blocked by Lost Wallet ID Despite Valid Recovery Phrase
Exchange custody
In December 2017, a Bitcoin holder discovered that custody of funds deposited in a Blockchain.info wallet created in early 2013 had become inaccessible despite
Blockchain.info Legacy Wallet Access Failure: 17-Word Recovery Phrase Incompatibility
Exchange custody
Beginning in late November 2017, multiple users including Ople, nwankwotech, and Boldos reported simultaneous access failures to Blockchain.info wallets created
Blockchain.info Legacy Wallet Upgrade Failure: Lost Access Without Seed Phrase
Exchange custody
In November 2017, a Blockchain.info user (jameslewis123) discovered that wallets created in 2014–2015 could no longer be accessed after an extended dormancy per
BTC-e Exchange Seized by U.S. DOJ: 1 Million Users Lose Access (July 2017)
Exchange custody
BTC-e, founded in 2011 and headquartered in Russia, operated as an unlicensed money transmitter for six years, processing over $9 billion in cryptocurrency tran
Blockchain.info 2FA Email Delivery Failure — December 2017 Access Lock
Exchange custody
In early December 2017, the user crando discovered they could not access their Blockchain.info hosted wallet after the platform failed to deliver two-factor aut
Blockchain.info Account Lockout: Forgotten Password and Missing Recovery Phrase (2013 Wallet)
Exchange custody
A BitcoinTalk forum user identified as MARK 888 reported in October 2017 that they had lost access to a Blockchain.info wallet created around 2013. The user ret
Custodial Wallet Provider Bankruptcy: 2012 Bitcoin Purchase Permanently Inaccessible
Exchange custody
In November 2017, a Bitcoin holder disclosed that they had purchased Bitcoin in 2012 but subsequently lost access to their holdings after the company maintainin
Uphold Freezes 165 BTC Business Account: Inconsistent Enforcement and Unresolved Access
Exchange custody
Oleg operated Nexchange.io, a cryptocurrency exchange that used Uphold as a liquidity provider. In 2017, he executed a single trade of 165 BTC (approximately $1
CHBTC Bitcoin Withdrawal Suspension Under PBOC Regulatory Order (February–mid-2016)
Exchange custody
In late January and early February 2016, China's People's Bank (PBOC) convened meetings with major Bitcoin exchanges to mandate upgraded Know Your Customer (KYC
Cryptsy Exchange: 13,000 BTC Theft Concealed, Ponzi Operations, Founder Flight (2014–2016)
Exchange custody
Cryptsy, a Florida-based cryptocurrency exchange operated by Paul Vernon (online alias 'Big Vern'), suffered a critical security breach in July 2014 when attack
Poloniex Suspends New Hampshire Operations, Forces User Withdrawals by October 6, 2016
Exchange custody
In September 2016, Poloniex, a major US-based cryptocurrency exchange known for altcoin trading, announced a service suspension affecting all New Hampshire resi
Browse by dependency and custody
Device-Dependent Access — Software wallet
Undocumented Recovery Procedure — Software wallet
Single-Person Knowledge — Software wallet
Passphrase Dependency — Software wallet
Institutional Cooperation Required — Exchange custody
Single-Person Knowledge — Exchange custody
Undocumented Recovery Procedure — Exchange custody
Passphrase Dependency — Exchange custody
Device-Dependent Access — Exchange custody
Single-Person Knowledge — Hardware wallet (single key)
Device-Dependent Access — Hardware wallet (single key)
Legal Authority Required — Exchange custody
Undocumented Recovery Procedure — Hardware wallet (single key)
Passphrase Dependency — Hardware wallet (single key)
Passphrase Dependency — Hardware wallet with passphrase
Device-Dependent Access — Hardware wallet with passphrase
Time-Sensitive Sequencing — Exchange custody
Time-Sensitive Sequencing — Software wallet
Recovery Materials Colocated — Software wallet
Single-Person Knowledge — Hardware wallet with passphrase
Undocumented Recovery Procedure — Hardware wallet with passphrase
All cases
Related pages
Institutional Cooperation Required — Exchange custody
Single-Person Knowledge — Exchange custody
Undocumented Recovery Procedure — Exchange custody
Passphrase Dependency — Exchange custody
Device-Dependent Access — Exchange custody
Legal Authority Required — Exchange custody
Time-Sensitive Sequencing — Exchange custody
Translate