BTER Cold Wallet Compromise: 7,170 BTC Stolen, Exchange Suspended (February 2015)
BlockedCustodial platform became inaccessible — the holder had no independent key control.
BTER, a Chinese cryptocurrency exchange, suffered a critical custody failure in February 2015 when its cold wallet—the repository for user Bitcoin deposits and theoretically the most secure form of storage—was compromised and 7,170 BTC stolen. At the time, this represented approximately $1.75 million. The exchange had experienced a prior security incident in 2014 involving theft of NXT tokens from its hot wallet, but cold storage was assumed to provide defense-in-depth protection against such losses.
Upon discovery of the breach, BTER's operators publicly acknowledged the theft and admitted operational security failures in how the cold storage was managed or accessed, suggesting insider threat or inadequate physical security controls rather than external network compromise. The theft directly impaired the exchange's ability to honor user withdrawal requests, as cold storage was the primary backing for deposited Bitcoin. BTER immediately suspended all operations, rendering user accounts inaccessible with no published timeline for service restoration. The exchange's operators subsequently sought to raise capital or negotiate arrangements to cover the loss.
Some services eventually resumed, but many users experienced protracted periods of fund inaccessibility before partial or delayed resolution. The incident was significant because it demonstrated that even offline storage methods remain vulnerable to operational failures and insider threats—risks that centralized custodians cannot fully eliminate. The case highlighted the era's limited regulatory oversight of cryptocurrency exchanges and absence of deposit insurance or bankruptcy protections for users.
| Stress condition | Vendor lockout |
| Custody system | Exchange custody |
| Outcome | Blocked |
| Documentation | Present and interpretable |
| Year observed | 2015 |
| Country | China |
Why custodial Bitcoin fails differently than self-custody
Exchange custody transfers the custody problem from the holder to the institution. The holder no longer needs to manage seed phrases, maintain hardware, or understand cryptographic concepts. They need only to maintain their account. This simplicity has a cost: the holder no longer controls the private keys. Access depends entirely on the continued operational, financial, and regulatory health of the exchange.
Cases in this archive show that exchange failures cluster around specific event types: bankruptcy and insolvency, regulatory seizure, geographic sanctions, and account-level access failures (lost 2FA, forgotten email credentials). Each event type has a different recovery path and a different timeline. Bankruptcy proceedings typically take 6-24 months and produce partial recovery. Regulatory seizure timelines depend on legal process. Account access failures may be resolvable through platform support or may not.
The distinguishing feature of vendor lockout cases is that recovery — when it occurs — happens through processes the holder did not design and cannot control. They become claimants in a process rather than holders of an asset.
The primary protection against vendor lockout is not using a vendor for custody beyond what is needed operationally. Holdings intended to be stored long-term are most exposed to institutional risk. Exchange custody is well-suited for active trading and conversion; it is poorly suited for long-term storage of significant value. Moving Bitcoin off exchange into self-custody eliminates platform dependency at the cost of taking on personal custody responsibility.
Translate