Part of the CustodyStress archive of observed Bitcoin custody incidents
Shared Service Dependency
Cases where multiple independent access paths shared a common dependency on a single vendor or platform. When that root failed, all paths failed simultaneously.
Shared service dependency — where multiple access paths converge on a single platform or service — produces a 57% blocked rate among determinate cases and only a 3% survival rate. When the shared root fails, all paths fail simultaneously.
77
Blocked
54
Constrained
4
Survived
35
Indeterminate
97% of determinate cases resulted in blocked or constrained access.
170 observed cases
Blocked
77 (45%)
Constrained
54 (32%)
Survived
4 (2%)
Indeterminate
35 (21%)
MapleChange Exchange Collapse: $5M Missing, Hack Unverified, No Recovery
Exchange custody
MapleChange, a Canadian cryptocurrency exchange, announced on October 28, 2018, that it had suffered a security breach resulting in the loss of approximately $5
Blockchain.com Wallet Zero Balance: Seed Phrase and Backup File Present, Funds Inaccessible
Exchange custody
In late 2015, the user rory4ever created a Bitcoin wallet using Blockchain.info (the platform's name before rebranding to Blockchain.com) and deposited approxim
BitGrail Exchange Collapse: 17 Million NANO Stolen, 230,000 Users Frozen
Exchange custody
BitGrail, an Italian cryptocurrency exchange, announced on February 8, 2018 that approximately 17 million NANO tokens—valued at roughly $170 million at the time
Bitfinex Fiat Withdrawal Freeze: Crypto Capital Processing Delays October–November 2018
Exchange custody
Bitfinex paused fiat deposits in October 2018 and announced implementation of a new deposit system. The exchange had been routing USD withdrawals through Crypto
QuadrigaCX Exchange Collapse: C$100,000 Withdrawal Never Processed
Exchange custody
Eric Z., a QuadrigaCX customer, deposited C$5,000 into the Canadian cryptocurrency exchange around 2014 and grew his position to approximately C$125,000 through
Xitong Zou: QuadrigaCX Creditor During Exchange Collapse and Fraud
Exchange custody
Xitong Zou was a customer of QuadrigaCX, a Canadian cryptocurrency exchange that collapsed in late 2018. Like thousands of other users, Zou had cryptocurrency h
Cointed GmbH Exchange Collapse: Austria, 2018 — Customer Funds Disappeared
Exchange custody
Cointed GmbH, founded in 2016 in Kufstein, Austria, operated as a regional cryptocurrency powerhouse: a custodial exchange, mining operation, and operator of on
Coincheck Exchange Hack: 523 Million NEM Stolen, User Withdrawals Frozen
Exchange custody
On January 26, 2018, Coincheck, a Tokyo-based cryptocurrency exchange, discovered that attackers had stolen approximately 523 million NEM tokens valued at $530
Coinrail Exchange Hack — $40 Million Altcoin Loss, Partial Recovery
Exchange custody
On June 10, 2018, Coinrail, a South Korean cryptocurrency exchange, publicly confirmed a security breach affecting its hot wallet infrastructure. Attackers gain
MapleChange Exit Scam: 919 Bitcoin Lost, CEO Identified as Glad Poenaru
Exchange custody
MapleChange, a small Canadian cryptocurrency exchange, announced on October 28, 2018 that it had suffered a catastrophic hack. According to the exchange's Twitt
Bithumb $31 Million Hack — June 2018 Withdrawal Suspension
Exchange custody
Bithumb, one of South Korea's dominant cryptocurrency exchanges handling billions in daily trading volume, discovered a security breach on June 19, 2018. Intern
Elvis Cavalic and QuadrigaCX: C$15,000 Withdrawal Lost to Exchange Collapse
Exchange custody
Elvis Cavalic of Calgary, Alberta was an active QuadrigaCX customer who had accumulated cryptocurrency holdings through trading on the platform. In October 2018
Zaif Exchange Hack: 5,966 BTC Stolen, User Funds Frozen (September 2018)
Exchange custody
On September 14, 2018, the Zaif cryptocurrency exchange operated by Tech Bureau Corp suffered a significant hot wallet breach. Attackers gained unauthorized acc
Blockchain.info Wallet Access Failure: Platform Login System Change (2017)
Exchange custody
In March 2014, a user created a Blockchain.info-hosted wallet and received a 12-word recovery passphrase as the sole access credential. The user documented the
Yapizon Exchange Hack (April 2017): 3,831 BTC Stolen, Socialised Loss Model Applied to All Users
Exchange custody
On April 22, 2017, Yapizon, a South Korean cryptocurrency exchange, suffered a security breach resulting in the theft of 3,831 BTC—approximately 37% of the exch
Youbit Exchange Bankruptcy: Second Hack Triggers 75% Fund Recovery Limit
Exchange custody
Youbit, operated by South Korean firm Yapian, experienced two significant security breaches during 2017. The first attack in April 2017 compromised approximatel
Institutional lockout — exchange custody (2017)
Exchange custody
Between 2014 and 2015, the user created cryptocurrency accounts on blockchain.info and retained the mnemonic seed phrases. By December 2017, the user attempted
Kraken Account 2FA Lockout: Support Vanished After ID Verification
Exchange custody
In September 2017, a Kraken user (z1926) enabled two-factor authentication on their exchange account but encountered a system malfunction during the process. Th
Blockchain.info Legacy Wallet Lockout: 17-Word Phrase Incompatible With Recovery Tool
Exchange custody
Between November and December 2017, multiple Blockchain.info users discovered they could not access legacy wallets created years earlier, despite possessing com
Blockchain.info Wallet Access Blocked by Lost Wallet ID Despite Valid Recovery Phrase
Exchange custody
In December 2017, a Bitcoin holder discovered that custody of funds deposited in a Blockchain.info wallet created in early 2013 had become inaccessible despite
Blockchain.info Legacy Wallet Access Failure: 17-Word Recovery Phrase Incompatibility
Exchange custody
Beginning in late November 2017, multiple users including Ople, nwankwotech, and Boldos reported simultaneous access failures to Blockchain.info wallets created
Blockchain.info Legacy Wallet Upgrade Failure: Lost Access Without Seed Phrase
Exchange custody
In November 2017, a Blockchain.info user (jameslewis123) discovered that wallets created in 2014–2015 could no longer be accessed after an extended dormancy per
BTC-e Exchange Seized by U.S. DOJ: 1 Million Users Lose Access (July 2017)
Exchange custody
BTC-e, founded in 2011 and headquartered in Russia, operated as an unlicensed money transmitter for six years, processing over $9 billion in cryptocurrency tran
Blockchain.info 2FA Email Delivery Failure — December 2017 Access Lock
Exchange custody
In early December 2017, the user crando discovered they could not access their Blockchain.info hosted wallet after the platform failed to deliver two-factor aut
Blockchain.info Account Lockout: Forgotten Password and Missing Recovery Phrase (2013 Wallet)
Exchange custody
A BitcoinTalk forum user identified as MARK 888 reported in October 2017 that they had lost access to a Blockchain.info wallet created around 2013. The user ret
Structural dependencies
By stress condition