Part of the CustodyStress archive of observed Bitcoin custody incidents
Shared Service Dependency — Vendor Lockout
Cases where multiple access or recovery paths converged on the same platform or service, creating a single point of failure. This page shows archive cases where both conditions were present.
72% of all Vendor Lockout cases in the archive involve this structural dependency. Among them, 57% of determinate cases resulted in a blocked outcome. The most common recovery path is exchange support.
64
Blocked
46
Constrained
2
Survived
27
Indeterminate
98% of determinate cases resulted in blocked or constrained access.
139 observed cases
Blocked
64 (46%)
Constrained
46 (33%)
Survived
2 (1%)
Indeterminate
27 (19%)
Coincheck Exchange Hack: 523 Million NEM Stolen, User Withdrawals Frozen
Exchange custody
On January 26, 2018, Coincheck, a Tokyo-based cryptocurrency exchange, discovered that attackers had stolen approximately 523 million NEM tokens valued at $530
Coinrail Exchange Hack — $40 Million Altcoin Loss, Partial Recovery
Exchange custody
On June 10, 2018, Coinrail, a South Korean cryptocurrency exchange, publicly confirmed a security breach affecting its hot wallet infrastructure. Attackers gain
MapleChange Exit Scam: 919 Bitcoin Lost, CEO Identified as Glad Poenaru
Exchange custody
MapleChange, a small Canadian cryptocurrency exchange, announced on October 28, 2018 that it had suffered a catastrophic hack. According to the exchange's Twitt
Bithumb $31 Million Hack — June 2018 Withdrawal Suspension
Exchange custody
Bithumb, one of South Korea's dominant cryptocurrency exchanges handling billions in daily trading volume, discovered a security breach on June 19, 2018. Intern
Elvis Cavalic and QuadrigaCX: C$15,000 Withdrawal Lost to Exchange Collapse
Exchange custody
Elvis Cavalic of Calgary, Alberta was an active QuadrigaCX customer who had accumulated cryptocurrency holdings through trading on the platform. In October 2018
Zaif Exchange Hack: 5,966 BTC Stolen, User Funds Frozen (September 2018)
Exchange custody
On September 14, 2018, the Zaif cryptocurrency exchange operated by Tech Bureau Corp suffered a significant hot wallet breach. Attackers gained unauthorized acc
Blockchain.info Wallet Access Failure: Platform Login System Change (2017)
Exchange custody
In March 2014, a user created a Blockchain.info-hosted wallet and received a 12-word recovery passphrase as the sole access credential. The user documented the
Yapizon Exchange Hack (April 2017): 3,831 BTC Stolen, Socialised Loss Model Applied to All Users
Exchange custody
On April 22, 2017, Yapizon, a South Korean cryptocurrency exchange, suffered a security breach resulting in the theft of 3,831 BTC—approximately 37% of the exch
Youbit Exchange Bankruptcy: Second Hack Triggers 75% Fund Recovery Limit
Exchange custody
Youbit, operated by South Korean firm Yapian, experienced two significant security breaches during 2017. The first attack in April 2017 compromised approximatel
Institutional lockout — exchange custody (2017)
Exchange custody
Between 2014 and 2015, the user created cryptocurrency accounts on blockchain.info and retained the mnemonic seed phrases. By December 2017, the user attempted
Kraken Account 2FA Lockout: Support Vanished After ID Verification
Exchange custody
In September 2017, a Kraken user (z1926) enabled two-factor authentication on their exchange account but encountered a system malfunction during the process. Th
Blockchain.info Legacy Wallet Lockout: 17-Word Phrase Incompatible With Recovery Tool
Exchange custody
Between November and December 2017, multiple Blockchain.info users discovered they could not access legacy wallets created years earlier, despite possessing com
Blockchain.info Wallet Access Blocked by Lost Wallet ID Despite Valid Recovery Phrase
Exchange custody
In December 2017, a Bitcoin holder discovered that custody of funds deposited in a Blockchain.info wallet created in early 2013 had become inaccessible despite
Blockchain.info Legacy Wallet Access Failure: 17-Word Recovery Phrase Incompatibility
Exchange custody
Beginning in late November 2017, multiple users including Ople, nwankwotech, and Boldos reported simultaneous access failures to Blockchain.info wallets created
Blockchain.info 2FA Email Delivery Failure — December 2017 Access Lock
Exchange custody
In early December 2017, the user crando discovered they could not access their Blockchain.info hosted wallet after the platform failed to deliver two-factor aut
Custodial Wallet Provider Bankruptcy: 2012 Bitcoin Purchase Permanently Inaccessible
Exchange custody
In November 2017, a Bitcoin holder disclosed that they had purchased Bitcoin in 2012 but subsequently lost access to their holdings after the company maintainin
Cryptsy Exchange: 13,000 BTC Theft Concealed, Ponzi Operations, Founder Flight (2014–2016)
Exchange custody
Cryptsy, a Florida-based cryptocurrency exchange operated by Paul Vernon (online alias 'Big Vern'), suffered a critical security breach in July 2014 when attack
7.8 BTC Lost in Blockchain.info Interface Failure After Platform Upgrade
Exchange custody
In February 2016, a user created two cryptocurrency addresses within Blockchain.info's hosted web wallet service and sent test transactions from Bitcoin-Qt to b
Cointrader Exchange Discovers Bitcoin Shortfall, Suspends Operations Indefinitely (March 2016)
Exchange custody
Cointrader operated as a Canadian cryptocurrency exchange with modest activity through early 2016, processing approximately 81 BTC in daily trading volume durin
Bitcurex Exchange Collapse: 2,300 BTC Lost, No Customer Database Backups
Exchange custody
Bitcurex launched in 2012 as Poland's first and largest Bitcoin exchange, processing over $50 million in BTC transactions during its final six months. The platf
Gatecoin Exchange: 250 BTC and 185,000 ETH Drained via Cold Storage Routing Compromise
Exchange custody
Gatecoin Limited operated as a Hong Kong-based cryptocurrency exchange from 2013, gaining credibility through backing by the Hong Kong Science and Technology Pa
Cryptsy Exchange Insolvency: 2014 Hack Concealed Until 2015 Withdrawal Freeze
Exchange custody
Cryptsy, a Florida-registered multi-currency exchange founded in 2013, suffered a significant security breach in 2014 that compromised user Bitcoin and altcoin
796 Exchange — 1,000 BTC Stolen via Withdrawal Address Redirect (January 2015)
Exchange custody
796 was a Chinese cryptocurrency exchange offering spot and futures trading. In late January 2015, the platform discovered a security breach in which an attacke
Blockchain.info Legacy Wallet: Mnemonic Present, Backup File Present—Funds Inaccessible
Exchange custody
In 2015, the user created a Blockchain.info wallet and purchased Bitcoin, then implemented two backup strategies: a 17-word legacy mnemonic phrase and an encryp
Vircurex Withdrawal Freeze: Timothy Shaw's 12.85 BTC Locked Since 2014
Exchange custody
Timothy Shaw, a Colorado resident, executed a trade on Vircurex on March 24, 2014, converting his entire dogecoin balance into 12.85 BTC. That same morning, Vir
Translate