A History of Bitcoin Exchange Failures

Buying bitcoin and keeping it held at an exchange carries counterparty risk.

The company could go bankrupt, or choose to seize, freeze, or block your withdrawals of bitcoin. Although this may seem unlikely, the history of exchange failures demonstrates the point.

Why do Bitcoin exchanges fail?

Bitcoin exchanges can fail for several reasons, including security breaches, mismanagement, fraud, and insolvency. Regardless of the cause, the result is the same: customers lose access to bitcoin they believed they owned.

The custodial model of bitcoin carries with it a category of risks. When your bitcoin is on an exchange, the exchange controls the private keys. Your deposit is a claim against the institution, not direct ownership of bitcoin. From the exchange's perspective, your holdings are a liability on their balance sheet, meaning it is something they owe you, recorded in their system. What is Bitcoin self-custody? covers greater detail.

When exchanges fail, it is typically for one of four reasons.

Security breach. The exchange is hacked and attackers gain access to the private keys controlling customer funds. With those keys, they send bitcoin directly to their own external wallets.
Mismanagement. Through poor operational security or negligence, the exchange loses access to the private keys or seed phrases needed to move customer funds. Bitcoin sent to addresses whose keys are lost or destroyed becomes permanently unrecoverable, regardless of intent.
Fraud. The exchange uses customer funds to lend out, rehypothecate, or take on leveraged positions beyond what it can cover. The bitcoin customers deposited is no longer fully held in reserve. If those positions go wrong, or if enough customers try to withdraw at once and trigger a bank run, the exchange is unable to source enough bitcoin to fulfill withdrawal requests and is forced to shut down.
Insolvency. The exchange simply runs out of money to operate. When it cannot cover its debts or meet payroll it is forced into bankruptcy. Once in bankruptcy, legal proceedings determine how remaining assets are distributed. Secured creditors are paid first, while customers, as unsecured creditors, receive whatever is left, which is often a fraction of what they deposited, paid out over months or years.

For minor instances, the exchange may be able to cover the loss with their own reserves or by securing outside help, but if they cannot, then customers can end up bearing the loss.

In all of these cases, the outcome for customers is the same. One day your balance is visible and withdrawals are working normally. The next, withdrawals are suspended, and a notice informs you that access to your funds is not available. You are now an unsecured creditor in a legal process you have no control over, waiting to find out how much, if any, you will recover.

Which exchanges have failed, and how much bitcoin was lost?

Exchange failures have not been isolated incidents. The pattern repeats across different years, geographies, and business models.

Exchange	Year	Estimated Loss	Primary Cause
Mt. Gox	2014	~850,000 BTC	Security breach
Bitfinex	2016	119,756 BTC	Security breach
QuadrigaCX	2019	~76,000 BTC + other assets	Fraud / mismanagement
Celsius	2022	Several billion USD	Insolvency
FTX	2022	~$8 billion USD	Fraud

Mt. Gox (2014)

Mt. Gox was the largest Bitcoin exchange in the world at the time of its collapse, handling more than 70 percent of all Bitcoin transactions globally. A breach that began years before it was detected resulted in the loss of approximately 850,000 BTC. The exchange filed for bankruptcy in February 2014. Creditors waited a decade before partial repayments in bitcoin began in 2024, and the full resolution of claims continued beyond that point.

Bitfinex (2016)

In August 2016, hackers exploited a vulnerability in Bitfinex's multi-signature wallet implementation and stole 119,756 BTC. Bitfinex distributed the loss across all customer accounts, issuing debt tokens representing each holder's share of the shortfall. Those tokens were eventually repaid, but the process created years of uncertainty for depositors who had no part in the breach.

QuadrigaCX (2019)

QuadrigaCX was Canada's largest cryptocurrency exchange when its founder died in late 2018. The company claimed he had maintained sole control of the private keys and that his death made customer funds unreachable. Approximately 76,000 BTC and additional assets in other currencies were reported as inaccessible. A subsequent investigation by the Ontario Securities Commission found evidence that the founder had been running a fraud well before his death, using incoming deposits to cover withdrawal requests in a pattern consistent with a Ponzi scheme.

Celsius (2022)

Celsius was not a traditional exchange, but a lending platform that accepted bitcoin deposits in exchange for yield. Customer deposits were liabilities on the platform's balance sheet, which were lent out and deployed in ways customers could not see or control. When market conditions deteriorated in mid-2022, Celsius froze withdrawals and filed for bankruptcy in July with a shortfall of several billion dollars. Customers who believed they were earning a return on deposited bitcoin found their funds locked in proceedings that would take years to resolve.

FTX (2022)

FTX was among the largest Bitcoin exchanges in the world by volume in 2022. In November of that year, it collapsed after it emerged that customer funds had been transferred to Alameda Research, a trading firm under common ownership, and used to cover losses and fund other activities. Approximately $8 billion in customer funds were misappropriated. Founder Sam Bankman-Fried was convicted of fraud and sentenced to 25 years in prison.

What do these failures have in common?

Despite the differences in these events, the common factor is that a third party is controlling the private keys. When one institution holds keys for thousands or millions of customers, a failure at that institution affects all of them simultaneously. The individual customer has no visibility into the exchange's actual financial position and no direct access to the bitcoin their balance represents.

It is important to note that exchange deposits are not protected the way bank deposits are in many jurisdictions. Customers of US banks benefit from FDIC insurance up to $250,000. Exchange depositors have no equivalent protection for their bitcoin. In bankruptcy, they are often treated as unsecured creditors, meaning they are behind secured creditors in the recovery queue, with no guarantee of return.

"Proof of reserves" has been proposed as a partial solution to this problem. This occurs when an exchange publishes cryptographic attestations that its bitcoin holdings match or exceed customer balances. Exchanges that do this are taking a proactive and disciplined approach to transparency, and that deserves recognition. But proof of reserves alone is not sufficient. Without a corresponding proof of liabilities, an attestation of assets tells only half the story.

Even when both are published together, there are still significant limitations. A proof of reserves is a snapshot taken at a single point in time, however liabilities can grow significantly between attestations. A major liquidity event or a deteriorating balance sheet may not be visible until the next attestation, if there is one. Proof of reserves also does not prevent security breaches or mismanagement of keys, which have been the cause of some of the biggest exchange failures.

All things held equal, an exchange that publishes regular proof of reserves is less likely to be involved in certain types of failures, but that does not mean they are immune to failure. The ultimate proof of reserves is of course to withdraw your bitcoin to your own custody and verify for yourself that it exists and is spendable.

What does this mean for Bitcoin holders?

The lesson is not that exchanges are categorically fraudulent or that every custodian will fail, but that the custodial model always creates a counterparty, and counterparties can fail.

If a bank fails, insured deposits can be made whole by government-backed insurance. If multiple banks or one large bank fails and the depositors' claims exceed the insurer's ability to cover them, there is always a government that can cover the shortfall through debt or money printing. With Bitcoin, there is no way for anyone to "print" more bitcoin.

If you buy bitcoin and hold it on an exchange, it is worth taking the time to read the fine print of the arrangement to learn exactly what recourse you do have in the event of a failure.

Bitcoin controlled in your self-custody wallet is owned directly by you, and is immune from institutional failure. Bitcoin on an exchange is owed to the holder by the exchange, and that distinction becomes relevant during times of urgency and stress. At that point it becomes the entire difference between recovering your bitcoin and joining a creditor queue.

For holders thinking about their own situation, Bitcoin security threat models covers the full range of risks, not just exchange failure, and what mitigations are proportionate to each. The spectrum of Bitcoin custody options maps the range of custody arrangements available and the tradeoffs at each level. For those beginning the move to self-custody, What is Bitcoin self-custody? covers how it works and how to start.