CustodyStress
Archive › Vendor lockout
Part of the CustodyStress archive of observed Bitcoin custody incidents
CS-01170

Institutional lockout — exchange custody (2023)

Blocked
Case description
JPEX, a Hong Kong-based crypto exchange, began showing signs of stress in mid-2023, ultimately blocking customer withdrawals in September 2023. The exchange, heavily promoted by local influencers, had attracted retail customers with promises of high returns. When regulators from the Hong Kong Securities and Futures Commission warned that JPEX had not been licensed, a bank run ensued that the exchange could not meet. Estimated customer losses exceeded HK$1 billion. The JPEX case was notable for its targeting of Hong Kong retail investors specifically through social media influencer marketing.
Custody context
Stress conditionVendor lockout
Custody systemExchange custody
OutcomeBlocked
DocumentationUnknown
Year observed2023
CountryHong Kong
Structural dependencies observed
Institutional cooperation required
What this illustrates
Getting access back required help from an institution — and that help wasn't available. Access was not recoverable.
Outcome interpretation
Access was not possible under the reported conditions.
Source
Publicly Reported
Evidence type
News article
Related cases involving vendor lockout
170 cases involve vendor lockout 512 cases involve exchange custody View archive statistics →
This archive documents observed custody survivability failures. It does not attempt to document all Bitcoin losses or security incidents. Submit a case
← All cases
Framework references
Terms guide
Survives
Access remained possible under the reported conditions.
Constrained
Access remained possible, but only with delay, dependence, or significant difficulty.
Blocked
Access was not possible under the reported conditions.
Indeterminate
There was not enough information to determine the outcome.
Single-person knowledge
Recovery depended on information or capability held by one individual who was unavailable.
Institutional dependence
Recovery depended on a third-party institution or service that was inaccessible or uncooperative.
Documentation gap
Recovery depended on instructions that were missing, incomplete, or unclear.
Authority mismatch
The person with legal authority to act did not have operational access, or vice versa.
Original text
Rate this translation
Your feedback will be used to help improve Google Translate