CustodyStress
Archive › Vendor lockout
Part of the CustodyStress archive of observed Bitcoin custody incidents
CS-01015

Exchanges including Kraken, Binance, and OKX published Merkle-tree-based reserve proofs.

Constrained
Case description
Following the wave of exchange insolvencies in 2022, several surviving centralized exchanges introduced proof-of-reserves audits in Q4 2022 in response to customer demand. Exchanges including Kraken, Binance, and OKX published Merkle-tree-based reserve proofs. This episode illustrated how the absence of such documentation had been a hidden custody risk: customers on Celsius, Voyager, and FTX had no mechanism to verify pre-collapse that their assets were actually held. Documentation-absent custody arrangements had been normalized across the industry.
Custody context
Stress conditionVendor lockout
Custody systemExchange custody
OutcomeConstrained
DocumentationUnknown
Year observed2022
CountryInternational
Structural dependencies observed
Undocumented procedure
What this illustrates
Nobody had written down how to get back in. That knowledge existed only in the owner's head. Whether full access was ultimately possible is unclear, but significant delay or outside intervention was involved.
Outcome interpretation
Access remained possible, but only with delay, dependence, or significant difficulty.
Source
Publicly Reported
Evidence type
News article
Related cases involving vendor lockout
170 cases involve vendor lockout 512 cases involve exchange custody View archive statistics →
This archive documents observed custody survivability failures. It does not attempt to document all Bitcoin losses or security incidents. Submit a case
← All cases
Framework references
Terms guide
Survives
Access remained possible under the reported conditions.
Constrained
Access remained possible, but only with delay, dependence, or significant difficulty.
Blocked
Access was not possible under the reported conditions.
Indeterminate
There was not enough information to determine the outcome.
Single-person knowledge
Recovery depended on information or capability held by one individual who was unavailable.
Institutional dependence
Recovery depended on a third-party institution or service that was inaccessible or uncooperative.
Documentation gap
Recovery depended on instructions that were missing, incomplete, or unclear.
Authority mismatch
The person with legal authority to act did not have operational access, or vice versa.
Original text
Rate this translation
Your feedback will be used to help improve Google Translate