CustodyStress
Archive › Documentation absent
Part of the CustodyStress archive of observed Bitcoin custody incidents
CS-00670

Hidden wallet discovered — exchange custody (2019)

Indeterminate
Case description
Grant Thornton, appointed liquidator for Cryptopia in May 2019, found that the exchange had pooled all customer funds in a single shared wallet rather than maintaining segregated accounts per user. This made it impossible to determine which assets belonged to which customer. The lack of per-customer segregation meant individual claims could only be estimated from exchange ledger records, which were incomplete.
Custody context
Stress conditionDocumentation absent
Custody systemExchange custody
OutcomeIndeterminate
DocumentationUnknown
Year observed2019
CountryNew Zealand
Structural dependencies observed
Undocumented procedure
What this illustrates
There was no documentation of how access worked. Without it, there was no path back in. It's not clear whether anyone ever regained access.
Outcome interpretation
Not enough information is available to determine the outcome.
Source
Publicly Reported
Evidence type
News article
Related cases involving documentation absent
167 cases involve documentation absent 471 cases involve exchange custody View archive statistics →
This archive documents observed custody survivability failures. It does not attempt to document all Bitcoin losses or security incidents. Submit a case
← All cases
Framework references
Terms guide
Survives
Access remained possible under the reported conditions.
Constrained
Access remained possible, but only with delay, dependence, or significant difficulty.
Blocked
Access was not possible under the reported conditions.
Indeterminate
There was not enough information to determine the outcome.
Single-person knowledge
Recovery depended on information or capability held by one individual who was unavailable.
Institutional dependence
Recovery depended on a third-party institution or service that was inaccessible or uncooperative.
Documentation gap
Recovery depended on instructions that were missing, incomplete, or unclear.
Authority mismatch
The person with legal authority to act did not have operational access, or vice versa.
Original text
Rate this translation
Your feedback will be used to help improve Google Translate