MintPal/Moolah Exchange Collapse: 3,700 BTC Inaccessible After Ryan Kennedy's Exit Scam
BlockedCustodial platform became inaccessible — the holder had no independent key control.
MintPal was a prominent altcoin exchange serving tens of thousands of users in 2014. Following a July 2014 hack that cost approximately $2 million in VeriCoin, the platform was acquired by Moolah, a company operated by a man claiming the name Alex Green but later identified as Ryan Kennedy. Kennedy presented himself as a security expert and assumed full operational control. In October 2014, within days of relaunching the platform, MintPal's systems became unreliable and plagued with critical problems.
Kennedy then declared Moolah bankrupt and disappeared, taking with him approximately 3,700 to 3,900 BTC belonging to more than 70,000 account holders. The stolen funds rendered all user balances permanently inaccessible. Kennedy evaded authorities for months while converting stolen bitcoin through LocalBitcoins under concealed identities. UK authorities arrested Kennedy and associate Chelsea Hopkins in early 2015.
During their investigation, the Syscoin team confirmed Kennedy had stolen approximately 750 BTC from their escrow fund during the MintPal acquisition process. A UK court, presided over by His Honor Judge Seymour, ordered Kennedy to repay the 750 BTC, but he failed to comply. Kennedy was subsequently convicted of fraud and money laundering, then received an eleven-year prison sentence for an unrelated rape conviction. The cryptocurrency theft charges were never separately adjudicated in a manner that restored victim funds.
Users including a Canadian trader with approximately 10 BTC and another with a confirmed 0.33 BTC balance received no compensation. The access blockage that began in October 2014 persisted indefinitely.
| Stress condition | Vendor lockout |
| Custody system | Exchange custody |
| Outcome | Blocked |
| Documentation | Present and interpretable |
| Year observed | 2015 |
| Country | United Kingdom |
Why custodial Bitcoin fails differently than self-custody
Exchange custody transfers the custody problem from the holder to the institution. The holder no longer needs to manage seed phrases, maintain hardware, or understand cryptographic concepts. They need only to maintain their account. This simplicity has a cost: the holder no longer controls the private keys. Access depends entirely on the continued operational, financial, and regulatory health of the exchange.
Cases in this archive show that exchange failures cluster around specific event types: bankruptcy and insolvency, regulatory seizure, geographic sanctions, and account-level access failures (lost 2FA, forgotten email credentials). Each event type has a different recovery path and a different timeline. Bankruptcy proceedings typically take 6-24 months and produce partial recovery. Regulatory seizure timelines depend on legal process. Account access failures may be resolvable through platform support or may not.
The distinguishing feature of vendor lockout cases is that recovery — when it occurs — happens through processes the holder did not design and cannot control. They become claimants in a process rather than holders of an asset.
The primary protection against vendor lockout is not using a vendor for custody beyond what is needed operationally. Holdings intended to be stored long-term are most exposed to institutional risk. Exchange custody is well-suited for active trading and conversion; it is poorly suited for long-term storage of significant value. Moving Bitcoin off exchange into self-custody eliminates platform dependency at the cost of taking on personal custody responsibility.