Customer funds lost, stolen or frozen at exchanges, lenders and custodial wallets. Each incident has its sources.
Updated · Changes
Mt. Gox stopped withdrawals 3 weeks before it filed for bankruptcy. Celsius, Voyager and FTX also stopped withdrawals days or weeks before they filed. When the public learns about the problem, customers can no longer withdraw.
Reuters on Mt. GoxThe Block on CelsiusThe Block on VoyagerMt. Gox customers started to get bitcoin back in July 2024. That was 10 years after the exchange failed. QuadrigaCX made its first payment after 4 years. Customers got approximately 13 cents for each dollar.
Mt. Gox trusteeCoinDesk on QuadrigaCXFTX repaid its customers in US dollars, plus interest. It used the value of each claim on the day of the bankruptcy in November 2022. Customers did not get their bitcoin back.
CoinDesk on FTX repaymentsBybit lost $1.5 billion in 2025. Bitget lost $387.5 million in 2026. Each company paid for the loss with its own funds. Customers are repaid only if the company has sufficient funds.
FBI on BybitChainalysis on BitgetThe list starts with the most recent incident. Amounts are in US dollars at the time of each incident. Later repayments are not subtracted. For a collapse, the amount is the customer loss that most sources report. “Since then” shows if customers were repaid.
| Date | Custodian | What happened | Lost | Sources |
|---|---|---|---|---|
Exchange hacks and collapses in 20267 incidents, $511.6M lost, stolen or frozen | ||||
| 2026-09-24 | BitgetHack | Attackers used a zero-day flaw in a third-party security product to forge withdrawal requests and moved about $387.5 million out of Bitget's hot and warm wallets, and Bitget paused withdrawals.Since then: Bitget covered the loss from its User Protection Fund without reducing customer balances. It reopened withdrawals in phases from Sept 28, with the remaining assets scheduled for Oct 2, 2026, and refilled the fund to about $300M (3,705 BTC) by Sept 30. | $387.5M | bitget.combleepingcomputer.comchainalysis.com |
| 2026-09-03 | OrionxCollapse | Chilean exchange Orionx halted withdrawals and announced a permanent shutdown after a forensic audit found about $7 million of customer assets missing.Since then: Orionx announced a phased restitution plan but said it could not guarantee full recovery. | $7M | cryptobriefing.comthestreet.comfinancefeeds.com |
| 2026-07-16 | EXMOCollapse | EXMO announced it was winding down seven weeks after the UK sanctioned EXMO Exchange Limited, and deducted 29.4% from every user's balance to cover a shortfall it attributed to its 2020 hack and to sanctions-related freezes.Since then: Users could withdraw what remained of their balances for a limited period; the 29.4% shortfall was converted into non-tradable, non-withdrawable 'USDRecover' claim tokens. | Not reported | financemagnates.comcoingabbar.com |
| 2026-06 | KnakenCollapse | Dutch crypto platform Knaken went offline in early June 2026 after failing to obtain a MiCA licence, stopped paying out withdrawals, and was declared bankrupt at prosecutors' request while the FIOD opened a criminal investigation. | $8M | decrypt.coweb3isgoinggreat.com |
| 2026-04-16 | GrinexHack | Grinex, a Kyrgyzstan-registered exchange serving the Russian market, halted trading and withdrawals after attackers took more than 1 billion rubles (about $13 million) from its wallets. | $13.1M | theblock.codecrypt.co |
| 2026-04 | Zondacrypto (formerly BitBay)Collapse | Polish-founded exchange Zondacrypto stopped processing withdrawals and went offline in April 2026 amid a Polish fraud and money-laundering investigation, and its Estonian operator was declared bankrupt in August 2026. | $96M | money.plen.wikipedia.orgtvpworld.com |
| 2026-02 | BlockFillsCollapse | Chicago-based institutional crypto lending and trading firm BlockFills suspended client deposits and withdrawals in early February 2026, citing market conditions, and filed for Chapter 11 bankruptcy about a month later. | Not reported | decrypt.coweb3isgoinggreat.comweb3isgoinggreat.com |
Exchange hacks and collapses in 202515 incidents, $2B lost, stolen or frozen | ||||
| 2025-11-27 | UpbitHack | About 44.5 billion won of Solana-network assets were drained from an Upbit hot wallet over roughly 54 minutes, six years to the day after its 2019 hack.Since then: Dunamu covered the 38.6 billion won (~$26M) of affected customer assets from Upbit's reserves; about 2.6 billion won (~$1.7M) of stolen funds frozen | $30M | theblock.cokoreatimes.co.krtherecord.media |
| 2025-10-22 | Fortress TrustCollapse | Nevada's Financial Institutions Division ordered custodian Fortress Trust to cease operations, finding it held about $200,000 in cash against roughly $8 million owed to clients in fiat and $4 million in crypto. | $12M | cryptoslate.comprotos.com8newsnow.com |
| 2025-09-08 | SwissBorgHack | Attackers exploited a compromised API at staking provider Kiln to drain 192,600 SOL from the wallet behind SwissBorg's SOL Earn program, affecting about 1% of its users.Since then: SwissBorg said it would make affected customers whole from its SOL treasury | $41M | therecord.mediatheblock.cocryptonews.com.au |
| 2025-08-14 | BtcTurkHack | Attackers drained about $48 million from BtcTurk's hot wallets, and the exchange paused crypto deposits and withdrawals; it had suffered a similar ~$55 million hot-wallet theft in June 2024.Since then: BtcTurk said most assets were in cold wallets and that user assets would not be affected | $48M | therecord.mediacryptoslate.com |
| 2025-07-24 | WOO XHack | Unauthorized withdrawals took about $14 million from nine customer accounts before WOO X paused withdrawals.Since then: WOO X said 'all unauthorized withdrawals will be covered' | $14M | theblock.cohacked.slowmist.io |
| 2025-07-19 | CoinDCXHack | Attackers breached a CoinDCX server and drained about $44 million from an internal account the exchange used to provide liquidity on a partner exchange.Since then: CoinDCX said customer wallets were untouched and it would cover the loss from treasury reserves | $44M | theblock.cocoindcx.com |
| 2025-07-16 | BigONEHack | A supply-chain attack on BigONE's production infrastructure let attackers drain about $27 million from the exchange's hot wallet.Since then: BigONE said it 'will fully cover all losses' and that user assets would not be affected in any material way | $27M | bleepingcomputer.comtomshardware.com |
| 2025-07-07 | ZigluCollapse | The UK crypto and e-money app froze its 'Boost' yield accounts, agreed in June to stop regulated activity under an FCA undertaking, and entered special administration on July 7, 2025, with RSM appointed as special administrators. | Not reported | crowdfundinsider.comthefintechtimes.comfintechweekly.com |
| 2025-06-18 | NobitexHack | The Israel-linked group Predatory Sparrow drained the hot wallets of Iran's largest exchange and sent the coins to unspendable vanity addresses, effectively destroying them.Since then: Nobitex said it 'will compensate all damages through its insurance fund and internal resources'; services went offline and reopened gradually from June 29 | $90M | bleepingcomputer.comiranintl.comcnbc.com |
| 2025-05-08 | BitoProHack | Attackers infected an employee's computer, hijacked BitoPro's cloud access and drained its hot wallets; the exchange admitted the theft on June 2, after on-chain sleuths flagged it.Since then: BitoPro said hot wallets were replenished from reserves and operations were unaffected | $11.5M | bleepingcomputer.comnknews.orgprotos.com |
| 2025-03-06 | GarantexSeizure | After Tether froze about $27 million of USDT in Garantex's wallets and US-led authorities seized its domains, the sanctioned exchange halted trading and withdrawals, leaving users' balances stuck. | $27M | cointelegraph.comcyberscoop.comjustice.gov |
| 2025-02-24 | InfiniHack | A former developer who still had admin rights over the stablecoin neobank's contracts drained about $49.5 million in USDC, nearly everything it held, and swapped it into ETH.Since then: Founder Christian Li pledged to cover the full loss from his personal funds | $49.5M | coindesk.comdecrypt.co |
| 2025-02-21 | BybitHack | Attackers who had compromised a developer machine at multisig provider Safe{Wallet} tricked Bybit's signers into handing over control of its Ethereum cold wallet, then took about 401,000 ETH plus staked-ETH tokens.Since then: Withdrawals stayed open. Within about 72 hours Bybit said it had fully closed the ETH gap with emergency loans, large deposits and purchases (nearly 447,000 ETH) and was back to 1:1 backing of client assets; about $43M of stolen funds had been frozen by Feb 24 | $1.5B | ic3.govcnbc.comcryptoslate.com |
| 2025-01-23 | PhemexHack | Attackers drained Phemex's hot wallets across many blockchains, and the exchange suspended withdrawals.Since then: Phemex said cold wallets were unaffected, restored withdrawals with manual review, and said it was preparing a compensation plan for impacted users | $70M | theblock.cotherecord.mediasecurityweek.com |
| 2025-01-01 | NoOnesHack | Attackers drained about $8 million from the peer-to-peer marketplace's wallets through what its CEO called an exploit of 'our Solana bridge'; the company confirmed it about three weeks later, after ZachXBT flagged it.Since then: CEO Ray Youssef said user funds were safe ('User funds SAFU'); no reimbursement details published | $7.9M | cryptoslate.comhacked.slowmist.io |
Exchange hacks and collapses in 202412 incidents, $802.9M lost, stolen or frozen | ||||
| 2024-11-28 | XT.comHack | XT.com suspended withdrawals, first citing wallet maintenance, after about $1.7M in 12 tokens was taken from a platform wallet.Since then: XT said users were unaffected, citing reserves of 1.5x user assets. | $1.7M | x.comhalborn.comxtsupport.zendesk.com |
| 2024-11-16 | DEXXHack | More than 900 users of trading terminal DEXX had their wallets drained after a private-key leak at the platform. | $21M | x.comhacked.slowmist.iohalborn.com |
| 2024-10-31 | M2Hack | Attackers drained several hot wallets of Abu Dhabi-based exchange M2 of about $13.7M in bitcoin, ether and Solana tokens.Since then: M2 said the situation was 'fully resolved' and customer funds restored, apparently from its own assets; the stolen funds were not recovered. | $13.7M41 BTC | web3isgoinggreat.comrekt.newsodaily.news |
| 2024-09-20 | BingXHack | Attackers drained BingX hot wallets on several chains in two waves hours apart; the exchange first announced 'wallet maintenance' and called it a 'minor asset loss'.Since then: BingX said it would cover all losses from its own capital; about $10M was frozen and deposits and withdrawals were restored over the following one to two weeks. | $52M | coindesk.comdlnews.comweb3isgoinggreat.com |
| 2024-09-19 | Banana GunHack | Eleven users of the Banana Gun Telegram trading bot had their bot-managed wallets drained, and the bot was shut down. | $3M | web3isgoinggreat.comcointelegraph.comhalborn.com |
| 2024-09-11 | IndodaxHack | Attackers pulled about $22M in assorted tokens from Indodax's hot wallets, apparently through its withdrawal system, and the exchange paused activity, calling it maintenance.Since then: Indodax told customers their assets were '100% safe' while the platform was paused for maintenance. | $22M | coindesk.comx.comweb3isgoinggreat.com |
| 2024-07-18 | WazirXHack | Attackers took over WazirX's multisig wallet (run on Liminal's custody infrastructure) and drained about $235M, nearly half its reported reserves, leading to a shutdown of more than a year.Since then: Under a scheme of arrangement sanctioned by Singapore's High Court (Oct 13, 2025), WazirX reopened on Oct 24, 2025 and began returning about 85% of creditors' July 18, 2024 balances, plus Recovery Tokens for any later recoveries. | $234.9M | wazirx.comcoindesk.com2021-2025.state.gov |
| 2024-06-22 | BtcTurkHack | Attackers drained hot-wallet balances of 10 cryptocurrencies at BtcTurk, Turkey's largest exchange, which paused crypto deposits and withdrawals; most assets were in untouched cold storage.Since then: BtcTurk said its own resources covered the loss and customer assets were unaffected; Binance froze $5.3M of the stolen funds. | $55M | web3isgoinggreat.comturkiyetoday.comx.com |
| 2024-06-04 | LykkeHack | Attackers stole about 158 BTC and 2,161 ETH from Lykke, which halted withdrawals citing maintenance, admitted the hack six days later, then shut down and was ordered into liquidation after customers took legal action. | $22M158 BTC | crypto.newsassets.publishing.service.gov.uktelegraph.co.uk |
| 2024-05-31 | DMM BitcoinHack | 4,502.9 BTC (about ¥48.2bn) was stolen from a DMM Bitcoin wallet, the largest crypto theft of 2024.Since then: DMM said it would buy back the BTC with group support and guarantee customers' holdings in full; in Dec 2024 it agreed to move all customer accounts and assets to SBI VC Trade (target spring 2025) and wind down. | $305M4,503 BTC | coindesk.comfbi.govsbigroup.co.jp |
| 2024-04-29 | RainHack | Hackers drained Rain's BTC, ETH, SOL and XRP wallets; Rain acknowledged it only after ZachXBT flagged the outflows two weeks later.Since then: Rain said customer funds were safe and that the Rain Group had covered any potential losses. | $16.1M | 2021-2025.state.govcoindesk.comweb3isgoinggreat.com |
| 2024-02-23 | BitForexFrozen withdrawals | BitForex stopped processing withdrawals and went dark after about $56.5M left its hot wallets; months later it said Chinese police had detained its team that day. | $56.5M | halborn.comtwitter.comx.com |
Exchange hacks and collapses in 202319 incidents, $1.8B lost, stolen or frozen | ||||
| 2023-11-22 | HTX (formerly Huobi)Hack | Attackers drained HTX hot wallets on the same day the related Heco Chain bridge was exploited for about $86.6 million.Since then: Justin Sun said HTX would cover the loss and that all user assets were safe. | $30M | crypto.newstheblock.corekt.news |
| 2023-11-10 | PoloniexHack | Attackers who obtained private keys drained Poloniex hot wallets on Ethereum, Tron and Bitcoin.Since then: Justin Sun pledged that Poloniex would fully reimburse affected funds out of its operating revenue. | $126M | theblock.cotheblock.corekt.news |
| 2023-11-08 | CoinSpotHack | Attackers drained about 1,283 ETH, roughly $2.5 million, from two hot wallets of Australian exchange CoinSpot. | $2.5M | halborn.comafr.comhacked.slowmist.io |
| 2023-10-17 | Coins.phHack | About 12.2 million XRP (roughly $6 million, or ₱340 million) was taken from Coins.ph hot wallets. Philippine prosecutors later charged two Russian former consultants who had kept system access.Since then: WhiteBIT blocked about 445,000 XRP at Coins.ph's request. | $6M | theblock.cobitpinas.com |
| 2023-09-24 | HTX (formerly Huobi)Hack | A hacker took 5,000 ETH, about $8 million, from an HTX hot wallet.Since then: In October 2023 the hacker returned almost all of the 5,000 ETH and HTX paid a 250 ETH white-hat bonus. HTX said it had fully covered the losses. | $8M | theblock.cocrypto.news |
| 2023-09-23 | Mixin NetworkHack | Hackers breached the database of Mixin's cloud service provider and took about $200 million held on its network, including 59,854 ETH, 891 BTC and about $23.6M in USDT.Since then: Mixin said it would guarantee 50% of each user's affected assets and issue bond tokens for the rest, to be bought back later. | $200M891 BTC | theblock.cotheblock.cotheblock.co |
| 2023-09-17 | JPEXFraud | After Hong Kong's securities regulator named it as an unlicensed platform making misleading claims, JPEX blocked withdrawals in practice with a 999 USDT fee and collapsed in what became Hong Kong's record crypto fraud case.Since then: Police had frozen about HK$228M in assets by April 2024. JPEX converted locked user balances into DAO 'dividends' with a two-year lock-up. | $205M | theblock.cotheblock.coscmp.com |
| 2023-09-14 | RemitanoHack | Over $2.7 million in crypto was drained from a Remitano wallet through suspicious withdrawals.Since then: Tether froze about $1.4M of the stolen USDT. | $2.7M | crypto.news |
| 2023-09-12 | CoinExHack | Attackers drained CoinEx hot wallets across more than a dozen blockchains.Since then: CoinEx said user assets were intact and pledged 100% compensation. Deposits and withdrawals began resuming on Sept 21, 2023. | $54M | theblock.corekt.newscrypto.news |
| 2023-09 | Fortress TrustHack | Nevada custodian Fortress Trust disclosed that crypto was stolen from four client accounts after a third-party vendor's cloud tools were compromised.Since then: Ripple, already an investor, stepped in to make the affected clients whole. | $15M | coingeek.comtheblock.co |
| 2023-06-21 | Prime TrustCollapse | Nevada regulators ordered custodian Prime Trust to stop operating because it could not meet client withdrawals. It went into receivership and filed for Chapter 11 on August 14, 2023. | $82M | theblock.cofortune.comtheblock.co |
| 2023-06-14 | DelioFraud | South Korean crypto lender Delio halted withdrawals, with funds stuck at Haru Invest, and its CEO was later jailed for 15 years for fraud. | $168.8M | theblock.cotheblock.cocrypto.news |
| 2023-06-13 | Haru InvestCollapse | Yield platform Haru Invest suspended all deposits and withdrawals, blaming false information from a partner firm. A Seoul court declared it bankrupt in November 2024. | $826M | theblock.cocrypto.newstheblock.co |
| 2023-06-11 | Floating Point Group (FPG)Hack | Crypto prime broker Floating Point Group halted trading, deposits and withdrawals after a cyberattack in which it lost between $15 million and $20 million in crypto. | $15M | theblock.cohacked.slowmist.io |
| 2023-05 | PatriciaHack | Nigerian exchange Patricia admitted that about $2 million in customer funds was lost in an alleged security breach. | $2M | crypto.news |
| 2023-04-24 | CoinLoanFrozen withdrawals | Estonian crypto lender CoinLoan halted all withdrawals and services after a court-ordered restraint put an interim administrator in charge of its assets. | Not reported | crypto.newstheblock.co |
| 2023-04-14 | BitrueHack | An attacker drained about $23 million in ether and tokens from one of Bitrue's hot wallets.Since then: Bitrue said all identified affected users would be compensated in full. | $23M | coindesk.comtheblock.codecrypt.co |
| 2023-04-09 | GDACHack | Hackers drained about $13 million in BTC, ETH, WEMIX and USDT from GDAC's hot wallet, roughly 23% of the assets it held for customers. | $13M61 BTC | coindesk.comdecrypt.cotheblock.co |
| 2023-01-18 | BitzlatoSeizure | US and European authorities shut down the Hong Kong-registered, Russia-linked exchange, arrested founder Anatoly Legkodymov in Miami and seized its hot wallet, freezing customer balances.Since then: From March 20, 2023 users could withdraw 50% of their BTC through a Telegram bot. The limit rose to 60% from Sept 14, 2023, and withdrawals were suspended again on Dec 27, 2023 ahead of French court hearings. | Not reported | coindesk.comcrypto.newsreuters.com |
Exchange hacks and collapses in 202222 incidents, $19.3B lost, stolen or frozen | ||||
| 2022-11-16 | Genesis (incl. Gemini Earn)Collapse | Genesis suspended withdrawals after Three Arrows and FTX failed, freezing about $900M owed to 340,000 Gemini Earn users among others, and filed for Chapter 11 on Jan 19, 2023.Since then: Gemini Earn users got 100% of their assets back in kind ($2.18B) from May 29, 2024, worth 232% of their value at the freeze. Genesis's liquidation plan returned about $3B, roughly 77% of the value of customer claims (May 2024). | $3.5B | sec.govcoindesk.comcoindesk.com |
| 2022-11-15 | SALT LendingFrozen withdrawals | SALT paused deposits and withdrawals, citing the impact of FTX's collapse.Since then: SALT recapitalized with a $64.4M Series A in Feb 2023, converting and cancelling debt, and said it aimed to return to full operations in Q1 2023. | Not reported | theblock.cocoindesk.com |
| 2022-11-13 | AAXCollapse | AAX suspended withdrawals, blaming a failed third-party partner, liquidated all customers' futures positions and never reopened. | Not reported | coindesk.comcoindesk.comtheblock.co |
| 2022-11-10 | BlockFiCollapse | BlockFi paused withdrawals after FTX collapsed, with $355M stuck on FTX and $671M lent to Alameda, and filed for Chapter 11 on Nov 28, 2022.Since then: Wallet-account customers were cleared to get about $300M back in May 2023. After selling its $874.5M FTX/Alameda claims at a premium in July 2024, the plan administrator said eligible customer claims would be paid 100% in fiat terms; interim crypto distributions via Coinbase began July 2024. | Not reported | coindesk.comcoindesk.comtheblock.co |
| 2022-11-08 | FTXFraud | FTX stopped processing withdrawals and filed for Chapter 11 on Nov 11, 2022, after customer deposits turned out to have been diverted to Alameda Research. Founder Sam Bankman-Fried was later convicted of fraud.Since then: Repaid in US dollars based on claim values at the Nov 2022 bankruptcy date, plus 9% a year interest. About $1.2B went to claims under $50K starting Feb 18, 2025 (~119–120%). After the Sept 30, 2025 round, US customers had 95% cumulative and international customers 78%. A fourth payout of about $2.2B followed on March 31, 2026. Because claims were fixed at Nov 2022 prices, BTC holders got far less than their coins' later value. | $8B | nytimes.comcoindesk.comcoindesk.com |
| 2022-11-01 | DeribitHack | Attackers drained about $28M from Deribit's hot wallet just before midnight UTC, and the exchange paused withdrawals.Since then: Deribit covered the loss from company reserves; client funds were not affected. | $28M691 BTC | coindesk.comtheblock.cohacked.slowmist.io |
| 2022-11 | Digital SurgeCollapse | Brisbane-based crypto broker Digital Surge froze customer accounts after FTX's collapse left about US$23 million of its funds stuck at FTX, and entered voluntary administration in December 2022.Since then: Under a rescue plan creditors approved in January 2023, balances up to A$250 were to be repaid in full and larger balances 55% within months, with the remainder paid from quarterly profits over five years. | $23M | abc.net.aucryptoslate.comtheguardian.com |
| 2022-10-23 | FreewayFrozen withdrawals | Yield platform Freeway halted all services, saying a trading failure had 'dramatically impacted' its portfolio. | Not reported | theblock.cotheblock.co |
| 2022-09-05 | PoolinCollapse | Mining pool Poolin froze withdrawals from its Poolin Wallet citing 'liquidity problems' and converted balances into IOU tokens; in July 2026 it filed for Chapter 11 owing about $163.7 million to roughly 11,700 wallet users.Since then: Balances were swapped 1:1 for IOU tokens from Sept 15, 2022; the IOUs were not redeemed in full. In the Chapter 11 case Hut 8 won the bidding for Poolin's Texas data centers with $140M (Sept 2026). No distribution to wallet users appears in the sources reviewed. | $163.7M | theblock.cotheblock.codecrypt.co |
| 2022-08-10 | HotbitFrozen withdrawals | Hotbit suspended trading, deposits and withdrawals after law enforcement froze some of its funds in a criminal investigation involving a former manager. | Not reported | theblock.coforklog.com |
| 2022-08-08 | HodlnautCollapse | Hodlnaut froze withdrawals after losing $189.7M in the Terra/UST collapse and reported a ~$193M shortfall; it was ordered into liquidation in Nov 2023. | $193M | theblock.cotheblock.cocoindesk.com |
| 2022-08-01 | ZB.comHack | Attackers drained more than 20 tokens from ZB.com's hot wallet, and the exchange suspended deposits and withdrawals citing a 'sudden failure of some core applications'. | $4.8M | theblock.cohacked.slowmist.io |
| 2022-07-20 | ZipmexCollapse | Zipmex froze withdrawals after lending $53M to Babel Finance and Celsius, neither repaid, and entered a court-supervised restructuring in Singapore.Since then: A Nov 2023 restructuring plan offered creditors 3.35 cents on the dollar, rising to as much as 29.35 cents depending on recoveries. Thailand's SEC suspended its trading and brokerage services in Feb 2024. | $97.1M | theblock.cocoindesk.comcoindesk.com |
| 2022-07-04 | VauldCollapse | Vauld suspended withdrawals, trading and deposits and sought creditor protection in Singapore, owing $402M, about 90% of it to retail depositors. | $402M | coindesk.comtheblock.cocoindesk.com |
| 2022-07-01 | Voyager DigitalCollapse | Voyager froze withdrawals after Three Arrows Capital defaulted on a ~$650M loan and filed for Chapter 11 on July 5–6, 2022.Since then: About $270M of customer cash in the FBO bank account was approved for return in Aug 2022. The May 2023 liquidation plan projected about 36% initial recovery for crypto claims, paid from June 2023. Any later top-ups, for example from the FTX/Alameda dispute, were not checked. | $1.3B15,250 BTC | theblock.cocoindesk.comtheblock.co |
| 2022-06-23 | CoinFLEXCollapse | CoinFLEX halted withdrawals after one large customer's account went into negative equity, leaving a deficit of about $84M.Since then: 10% of balances were opened for withdrawal in July 2022. Under a Seychelles court-approved restructuring (March 2023), creditors received recovery tokens (rvUSD) and more than 65% of the company's equity. | $84M | theblock.cotheblock.cocoindesk.com |
| 2022-06-17 | Babel FinanceCollapse | Babel froze withdrawals citing 'unusual liquidity pressures'; restructuring documents later showed it had lost about 8,000 BTC and 56,000 ETH of customer funds in proprietary trading. | $766M8,000 BTC | theblock.cotheblock.cocoindesk.com |
| 2022-06-12 | Celsius NetworkCollapse | Celsius froze all withdrawals, swaps and transfers, then filed for Chapter 11 on July 13, 2022 owing users $4.7B.Since then: Distributions began Jan 31, 2024 in BTC/ETH and cash (at Jan 16, 2024 prices), plus shares in Ionic Digital, which listed on Nasdaq in July 2026. After the second distribution in Dec 2024, cumulative recovery was about 60.4% of claim value at the July 2022 petition date. By Aug 2024, $2.53B had gone to about 251,000 creditors. | $4.7B | theblock.cowsj.comtheblock.co |
| 2022-02-01 | BitbnsHack | Attackers took about $7.5M in tokens from Bitbns, which told users it was doing maintenance and admitted the hack only about 13 months later. | $7.5M | cryptoslate.comhacked.slowmist.io |
| 2022-02 | IRA Financial Trust (customer accounts held at Gemini)Hack | Attackers stole $36M in crypto from retirement accounts that IRA Financial Trust's customers held at Gemini. | $36M | theblock.cohacked.slowmist.io |
| 2022-01-17 | Crypto.comHack | Attackers got past two-factor authentication and withdrew 4,836.26 ETH and 443.93 BTC from 483 customer accounts.Since then: Crypto.com said all 483 affected users were fully reimbursed. | $34M444 BTC | coindesk.combleepingcomputer.com |
| 2022-01-08 | LCXHack | Attackers drained about $7.94M in nine tokens from one LCX hot wallet.Since then: LCX said it would cover the loss from its own funds with no impact on user balances. About $611K of EURe was frozen with Monerium's help. | $7.9M | lcx.comhacken.io |
Exchange hacks and collapses in 20219 incidents, $486.4M lost, stolen or frozen | ||||
| 2021-12-13 | Vulcan ForgedHack | Attackers stole about 4.5M PYR (~$140M) from users' wallets on the blockchain-gaming platform Vulcan Forged, whose keys were held by the platform through the custodial wallet provider Venly.Since then: Vulcan Forged said most affected wallets were refunded from its treasury and that other losses would be reimbursed in PYR. | $140M | rekt.newsdn.institute |
| 2021-12-11 | AscendEX (formerly BitMax)Hack | A compromised AscendEX hot wallet was drained of about $77.7M across Ethereum, BNB Smart Chain and Polygon.Since then: AscendEX said it had reimbursed affected users 100% (Dec 16, 2021). | $77.7M | rekt.newsdn.institute |
| 2021-12-04 | BitMartHack | Attackers drained BitMart's Ethereum and BNB Smart Chain hot wallets.Since then: CNBC reported in January 2022 that BitMart still owed victims (headline; article not opened). | $150M | rekt.newscnbc.comdn.institute |
| 2021-08-28 | BilaxyHack | An attacker drained Bilaxy's ERC-20 hot wallet of about 295 tokens worth roughly $21.7M; the exchange said BTC, ETH and USDT were not affected. | $21.7M | t.medn.institute |
| 2021-08-19 | LiquidHack | Attackers compromised Liquid's warm wallets and moved out about $97M in bitcoin, ether, tokens, XRP and TRX.Since then: FTX lent Liquid $120M a week after the hack and later acquired it (deal closed April 2022). | $97M107 BTC | elliptic.cocoindesk.comcryptobriefing.com |
| 2021-05 | CoinbaseHack | Attackers who had phished customers' login details used a flaw in Coinbase's SMS account-recovery process to bypass two-factor authentication and drain at least 6,000 customer accounts.Since then: Coinbase said it would deposit funds equal to the value of the currency improperly removed into affected customers' accounts. | Not reported | bleepingcomputer.com |
| 2021-04-29 | HotbitFrozen withdrawals | After a cyberattack that compromised its user database, Hotbit suspended all services, including withdrawals, for at least 7-14 days while it rebuilt its servers.Since then: Hotbit said customer assets were safe because its risk controls blocked the attempted wallet theft. | Not reported | news.bitcoin.com |
| 2021-04-29 | StakeHoundFrozen withdrawals | Liquid-staking provider StakeHound lost access to 38,178 ETH it had staked for customers when the key shares for its staking keys could not be decrypted from backup. | $75M | fireblocks.comcalcalistech.comcoindesk.com |
| 2021-04-23 | VebitcoinCollapse | Days after Thodex collapsed, Turkish exchange Vebitcoin stopped all activity citing financial strain; authorities blocked its bank accounts and opened an investigation. | Not reported | coindesk.com |
Exchange hacks and collapses in 20209 incidents, $431.3M lost, stolen or frozen | ||||
| 2020-12-24 | LivecoinHack | Livecoin lost control of its servers, backend and nodes in what it called a planned attack, and announced in January 2021 that it was closing.Since then: Livecoin said it would return remaining funds to verified users who filed claims by March 17, 2021; the outcome is not documented in the sources found. | Not reported | coindesk.comcoindesk.com |
| 2020-12-21 | EXMOHack | An attacker drained EXMO's hot wallets of roughly 5-6% of the exchange's total crypto assets, about $10.5M.Since then: EXMO pledged that any affected user funds would be 'covered completely by EXMO'. | $10.5M307 BTC | theblock.cocoindesk.comexmo.com |
| 2020-11 | CredCollapse | Crypto lender Cred suspended its CredEarn yield program and filed for Chapter 11 in Delaware after losing funds, blaming fraud by an outside party. | Not reported | coindesk.comcoindesk.com |
| 2020-10-16 | OKEx (now OKX)Frozen withdrawals | OKEx suspended all crypto withdrawals while its founder Xu Mingxing was unreachable, cooperating with a Chinese police investigation.Since then: OKEx announced on Nov 19, 2020 that withdrawals would resume by Nov 27, about six weeks after the freeze; no funds were reported lost. | Not reported | caixinglobal.combloomberg.comen.wikipedia.org |
| 2020-09-26 | KuCoinHack | Attackers obtained the private keys to KuCoin's hot wallets and withdrew about $281M in bitcoin, ether and tokens.Since then: KuCoin said 84% (~$236M) was recovered through on-chain tracking, token contract upgrades and judicial action, and its insurance fund covered the remaining 16% (Nov 2020). | $281M | decrypt.coen.wikipedia.orgdn.institute |
| 2020-09-07 | EterbaseHack | Hackers drained six of Eterbase's hot wallets of about $5.4M in crypto. | $5.4M11 BTC | zdnet.commerklescience.comdn.institute |
| 2020-07-31 | 2getherHack | Hackers who got in through malware on an employee's computer took about EUR 1.18M of customers' crypto from the Spanish crypto app 2gether.Since then: 2gether announced on Aug 5, 2020 that affected customers would be reimbursed with a mix of cash and its 2GT token. | $1.4M | dn.institutesecuritylab.ru |
| 2020-07-10 | CashaaHack | Attackers who had planted malware on a computer used for exchange transfers stole more than 336 BTC from a Cashaa wallet. | $3M336 BTC | infosecurity-magazine.comhacked.slowmist.io |
| 2020-02-17 | FCoinCollapse | FCoin's founder Zhang Jian said the exchange could not meet withdrawals because it owed users 7,000-13,000 BTC more than it held, blaming erroneous 'mining' reward payouts since 2018. | $130M13,000 BTC | coindesk.comcointelegraph.com |
Exchange hacks and collapses in 201913 incidents, $1.3B lost, stolen or frozen | ||||
| 2019-11-27 | UpbitHack | 342,000 ETH was taken from an Upbit wallet; in Nov 2024 South Korean police attributed the theft to North Korea's Lazarus and Andariel groups.Since then: Upbit covered the loss from its own assets. Police later recovered 4.8 BTC (~₩600M) through a Swiss exchange. | $49M | coindesk.comytn.co.kr |
| 2019-11-01 | Einstein ExchangeCollapse | After customers complained they could not reach their assets, the BC Securities Commission had a receiver take over Vancouver's Einstein Exchange. | $12.4M | coindesk.comcoindesk.com |
| 2019-07-12 | BITPointHack | Hackers took 1,225 BTC, 1,985 BCH, 11,169 ETH and 5,108 LTC from BITPoint's hot wallets, about ¥2.06bn of it customers' funds.Since then: BITPoint said the ~50,000 affected users would be reimbursed 1:1 in crypto. | $28M1,225 BTC | coindesk.comcoindesk.com |
| 2019-07-08 | BitMarketCollapse | Poland's second-largest exchange BitMarket shut down overnight citing a 'loss of liquidity'; later reporting said it had been short more than 2,300 BTC since at least 2017. | Not reported2,300 BTC | coindesk.combitcoin.pl |
| 2019-06-27 | BitrueHack | A hacker exploited a flaw in Bitrue's risk-control review to reach about 90 users' accounts and took 9.3M XRP and 2.5M ADA.Since then: Bitrue said 100% of lost funds would be returned to users. | $4.2M | coindesk.comgo.chainalysis.com |
| 2019-06-01 | GateHubHack | An attacker used GateHub's API, with valid access tokens, to reach about 100 customer XRP Ledger wallets whose encrypted keys GateHub stored, and took about $10M in XRP. | $10M | gatehub.netgo.chainalysis.com |
| 2019-05-07 | BinanceHack | Hackers who had obtained many users' API keys and 2FA codes withdrew 7,000 BTC from Binance's hot wallet in a single transaction.Since then: Covered in full by Binance's SAFU fund ('No user funds will be affected'). Deposits and withdrawals were suspended for about a week. | $40M7,000 BTC | binance.comgo.chainalysis.com |
| 2019-04-25 | Bitfinex (funds at Crypto Capital)Seizure | New York's attorney general said Bitfinex lost about $850M of commingled client and corporate funds held by Panamanian payment processor Crypto Capital and hid the loss.Since then: Bitfinex covered the gap with at least $700M taken from affiliate Tether's reserves (NYAG). Bitfinex and Tether settled with the NYAG for $18.5M in Feb 2021. | $850M | ag.ny.govag.ny.gov |
| 2019-03-29 | BithumbHack | About 3.1M EOS and 20.2M XRP were taken from Bithumb's hot wallet in what the exchange suspected was an insider job.Since then: Customers unaffected per Bithumb: the stolen coins were company-owned and member assets were in cold storage. | $19M | coindesk.comgo.chainalysis.com |
| 2019-03-24 | DragonExHack | Attackers stole users' and the exchange's crypto across about 20 coins; Chainalysis tied the attack to North Korea's Lazarus Group. | $7.1M | coindesk.comgo.chainalysis.com |
| 2019-02-20 | CoinbinCollapse | Coinbin, the successor to the hacked exchange Youbit, filed for bankruptcy after losing access to 520 BTC, which management blamed on an executive it suspected of embezzlement. | $26M520 BTC | zdnet.co.krhacked.slowmist.io |
| 2019-01-31 | QuadrigaCXFraud | After founder Gerald Cotten died, Quadriga could not return customers' money and crypto; Ontario's securities regulator later found he had run the exchange as a fraud.Since then: Trustee EY's first interim distribution (2023) paid about 13 cents per dollar of proven claims (~C$40M). Claims total C$303.1M (US$222.3M) across 17,648 claims. | $190M | osc.cacoindesk.comcoindesk.com |
| 2019-01-14 | CryptopiaHack | Hackers drained ETH and ERC-20 tokens from New Zealand exchange Cryptopia, which went into liquidation four months later.Since then: In liquidation since 14 May 2019 (Grant Thornton). In-kind returns of remaining holdings began Dec 2024; by Dec 2025, 16,850 account holders had received 'over $487m' across six coins (liquidators' figure, later prices). For the hacked trusts, only ~18 BTC traced via US authorities has come back (~$3.9m). | $16M | coindesk.comgrantthornton.co.nzrnz.co.nz |
Exchange hacks and collapses in 20187 incidents, $1.3B lost, stolen or frozen | ||||
| 2018-09-14 | ZaifHack | Attackers took 5,966 BTC plus BCH and MONA from Zaif's hot wallets between about 17:00 and 19:00 JST on September 14, 2018.Since then: Fisco took over Zaif (completed Nov 22, 2018) and compensated users: BTC and BCH in kind, and lost MONA in yen at ¥144.548 per coin | $60M5,966 BTC | prtimes.jpitmedia.co.jpcoindesk.com |
| 2018-07 | WEX (successor to BTC-e)Fraud | WEX stopped withdrawals of major cryptocurrencies in July 2018 and never resumed them, and Russian police opened a fraud case after users filed complaints. | $450M | coindesk.comcoindesk.combbc.com |
| 2018-06-20 | BithumbHack | Hackers took about 35 billion won (~$31M) in 11 crypto assets from Bithumb's hot wallet.Since then: Bithumb said it retrieved part of the funds, cutting the loss to 19bn won (~$17M), and that it would cover customers' lost coins from its own holdings | $31M2,016 BTC | koreatimes.co.krcoindesk.com |
| 2018-06-10 | CoinrailHack | Hackers took about 30% of Coinrail's reserves in tokens.Since then: Coinrail said about two-thirds of the stolen tokens were frozen or withdrawn with help from other exchanges and token issuers | $40M | coindesk.combitcoinmagazine.com |
| 2018-04 | CoinsecureHack | Coinsecure lost 438.318 BTC after private keys were exposed during a Bitcoin Gold distribution, and it named its own chief security officer in a police complaint. | $3.3M438 BTC | coindesk.comcoindesk.com |
| 2018-02 | BitGrailHack | BitGrail said 17 million Nano had been stolen from its wallets, and an Italian court later declared it insolvent and ordered the founder to repay users. | $170M | techcrunch.comfortune.comthenextweb.com |
| 2018-01-26 | CoincheckHack | Hackers took about 523 million XEM from Coincheck's hot wallet, which had no multisig protection.Since then: Coincheck refunded ~260,000 holders in yen from its own funds at ¥88.549 per XEM (about ¥46.3bn), starting March 12, 2018 | $530M | coindesk.comcoindesk.comfortune.com |
Exchange hacks and collapses in 20176 incidents, $91M lost, stolen or frozen | ||||
| 2017-12-19 | YoubitHack | A second hack cost Youbit about 17% of its assets, and its operator halted all withdrawals and announced bankruptcy proceedings, the first for a South Korean exchange.Since then: Customers could withdraw 75% of balances right away, with the rest promised after settlement; a ₩3bn cyber-insurance claim was denied, and accounts moved to successor exchange Coinbin in Mar 2018. | $15.2M | cnbc.comseoul.co.krnews.bitcoin.com |
| 2017-12-06 | NiceHashHack | In what NiceHash called a sophisticated social-engineering attack, hackers emptied the company's bitcoin wallet, which held users' balances.Since then: Repaid in full from company revenue through a repayment program that ran from Feb 2018; NiceHash announced its completion on 16 Dec 2020. | $63.9M4,700 BTC | fortune.comnicehash.comnicehash.com |
| 2017-07-25 | BTC-eSeizure | US prosecutors indicted BTC-e and its alleged operator Alexander Vinnik for money laundering, and the site went offline after server equipment was seized, locking every customer's balance.Since then: The operators relaunched as WEX in Sept 2017, restoring 61.79% of each balance and issuing IOU tokens for the other 38.21%; WEX itself collapsed in 2018. | Not reported | justice.govfincen.govweb.archive.org |
| 2017-06-30 | BithumbHack | Attackers stole personal data on more than 31,000 Bithumb users from an employee's home PC and used it in phone-phishing attacks that drained customers' exchange accounts.Since then: Bithumb pledged ₩100,000 (about $87) to each user whose data leaked and said it would compensate phishing losses; how much was actually paid was not verified. | $7M | fortune.comnewsis.comnews.sbs.co.kr |
| 2017-04-22 | Yapizon (operator Yapian; renamed Youbit in Oct 2017)Hack | Attackers emptied four Yapizon hot wallets of 3,831 BTC, about 37% of the exchange's holdings, and the exchange cut every customer's balance by 37.08% to spread the loss. | $4.9M3,831 BTC | ibtimes.co.ukboannews.comundocs.org |
| 2017 | CampBXFrozen withdrawals | Atlanta-based CampBX, one of the earliest US bitcoin exchanges, stopped letting many customers access their accounts in 2017 and wound down without returning all balances, leading to lawsuits.Since then: In May 2022 the operator said BTC and USD balances had been returned to over 99% of customers, with about 190 still to be paid; customers' lawyer disputed this, and a federal jury in Atlanta found for one customer (claim of more than $250,000) in April 2022. | Not reported | wsbtv.comweb.archive.orgen.bitcoin.it |
Exchange hacks and collapses in 20164 incidents, $85.1M lost, stolen or frozen | ||||
| 2016-10-13 | BitcurexHack | One of Poland's oldest bitcoin exchanges went offline citing an 'update', later said an outside intrusion had cost it 'part of the assets', and never reopened, leaving users without access to about 2,300 BTC. | $1.5M2,300 BTC | news.bitcoin.comweb.archive.orggov.pl |
| 2016-08-02 | BitfinexHack | A hacker made more than 2,000 unauthorized transfers of 119,756 BTC out of customers' segregated multisig wallets (co-signed with BitGo); Bitfinex spread the loss across all customers with a 36% haircut, paid in debt tokens it redeemed within eight months.Since then: Every account was cut 36.067% and holders got BFX debt tokens, all redeemed at $1 (or swapped for iFinex shares) by 3 Apr 2017. Recovery Right Tokens (RRTs) cover later recoveries; ~$315K recovered in 2023 went to RRT holders. The DOJ seized 94,000+ BTC from the launderers in Feb 2022 and in 2025 recommended returning the coins to Bitfinex; completion not verified as of Oct 2026. | $72M119,756 BTC | reuters.comreuters.comjustice.gov |
| 2016-05-13 | GatecoinHack | Attackers altered Gatecoin's systems so that ETH and BTC deposits bypassed multisig cold storage and landed in hot wallets, from which 185,000 ETH and 250 BTC were taken, about 15% of the crypto it held for customers.Since then: Gatecoin said it was raising funds to reimburse customers' BTC and ETH losses; completion not verified. A Hong Kong court wound Gatecoin up in March 2019. | $2M250 BTC | web.archive.orgthenextweb.com |
| 2016-01 | CryptsyCollapse | After months of withdrawal delays, Florida-based Cryptsy declared itself insolvent in January 2016, saying it had secretly absorbed a July 2014 theft of about 13,000 BTC and 300,000 LTC; it was put into receivership and its CEO left for China.Since then: The court receiver (Apr 2016) and class counsel recovered more than $1.5M gross (settlement approved Jun 2017), plus $1M from Coinbase (2020) and an $874,391 clawback; the settlement site says no class member has been made whole. | $9.6M13,000 BTC | coindesk.comcoindesk.comcryptsysettlement.com |
Exchange hacks and collapses in 20154 incidents, $7.3M lost, stolen or frozen | ||||
| 2015-05-22 | BitfinexHack | Bitfinex's hot-wallet keys were compromised and about 1,500 BTC were taken; the exchange said over 99.5% of customer BTC sat in multisig wallets and it would cover the loss itself.Since then: Bitfinex said the loss would be 'fully absorbed by the company'; customer balances were not reduced. | $400K1,500 BTC | web.archive.orgsiliconangle.combbc.com |
| 2015-02-14 | BterHack | Bter said 7,170 BTC were taken from its cold wallet system, shut its platform, and later reopened with a plan to repay affected users over time.Since then: On reopening (Mar 2015) Bter pledged to repay users' lost BTC in batches from future profits plus a 1,000 BTC interest-free loan from Jua.com; whether repayment was completed is not verified. | $1.8M7,170 BTC | coindesk.comcoindesk.comthenextweb.com |
| 2015-01-27 | 796 ExchangeHack | An attacker who had compromised part of the bitcoin futures exchange 796 swapped a customer's withdrawal address for their own, so a 1,000 BTC withdrawal went to the attacker.Since then: 796 said its major shareholders covered the loss in full out of their unpaid dividends. | Not reported1,000 BTC | cointelegraph.comweb.archive.org |
| 2015-01-04 | BitstampHack | After a weeks-long phishing campaign against six employees, attackers drained Bitstamp's hot wallet of 18,866 BTC, including customer deposits that kept arriving during the day, and the exchange suspended service for several days.Since then: Bitstamp absorbed the loss; CEO Nejc Kodric said balances held before the 5 Jan 2015 suspension would be honored in full. | $5.1M18,866 BTC | coindesk.comcoindesk.com |
Exchange hacks and collapses in 20149 incidents, $475.4M lost, stolen or frozen | ||||
| 2014-10-14 | MintPal (Moolah)Fraud | Moopay's CEO 'Alex Green', later identified as Ryan Kennedy, abruptly shut the MintPal exchange and announced Moopay's bankruptcy; about 3,700 BTC of user funds were allegedly moved to his personal wallet. | $1.5M3,700 BTC | web.archive.orgweb.archive.org |
| 2014-10-12 | JustcoinHack | An attacker abused the Ripple/Stellar partial-payments feature to withdraw 32 million XRP and 54 million STR, emptying Justcoin's STR hot wallet. The exchange shut down at the end of October 2014, citing the loss of its bank account. | $300K | financemagnates.comcoindesk.com |
| 2014-08-15 | BterHack | A hacker who broke into one of Bter's hosting accounts took 50 million NXT, about 5% of the coin's supply.Since then: Bter reportedly paid the thief 100 BTC and got 5 million NXT back. NXT's developers declined to roll the chain back. Bter said it would try to cover the loss; not verified whether customers were made whole. | Not reported | web.archive.orgweb.archive.org |
| 2014-07-13 | MintPalHack | A hacker took about 8 million VeriCoin, roughly 30% of the coin's supply, from MintPal's VRC wallet.Since then: Reversed: VeriCoin's developers rolled the blockchain back on 14 Jul 2014, undoing the theft, and MintPal said VRC holders would be unaffected. | Not reported | web.archive.orgweb.archive.org |
| 2014-03-24 | VircurexFrozen withdrawals | Citing two 2013 hacks and an emptied cold wallet, the exchange froze all BTC, LTC, TRC and FTC balances and promised to pay them back gradually from profits.Since then: Small monthly payouts from 2014 to 2016 (e.g. 14.34 BTC in May 2014, 3.45 BTC in Jan 2016). At the last update, 3 Jan 2016, 1,666 BTC, 124,763 LTC and 78,782 TRC were still frozen. A 2018 US class action alleged that repayments had stopped. | Not reported1,666 BTC | web.archive.orgcourthousenews.com |
| 2014-03-11 | CryptoRushHack | The altcoin exchange lost about 950 BTC and 2,500 LTC in a hack around 11 Mar 2014, kept the resulting insolvency from users, and collapsed by early April 2014. | Not reported950 BTC | web.archive.orgweb.archive.org |
| 2014-03-04 | PoloniexHack | An attacker used a withdrawal race condition to take about 12.3% of the exchange's bitcoin, and the loss was spread across all users' balances.Since then: Poloniex cut every user's BTC balance by 12.3% and promised to repay from fees and the owner's own money. Payouts began in March 2014. Forum users reported full repayment by mid-2014, but no operator statement confirming it was found. | $50K77 BTC | bitcointalk.orgweb.archive.org |
| 2014-03-02 | FlexcoinHack | The Alberta-based 'bitcoin bank' lost all 896 BTC in its hot wallet to an attacker and announced its closure the next day.Since then: Only coins that users had put in Flexcoin's separate cold storage were returned, after identity checks. Hot-wallet losses were not reimbursed. | $600K896 BTC | reuters.comweb.archive.org |
| 2014-02-28 | Mt. GoxCollapse | The largest bitcoin exchange of its era halted withdrawals on 7 Feb 2014, went offline on 24 Feb and filed for bankruptcy protection in Tokyo on 28 Feb, saying about 750,000 customer bitcoins and 100,000 of its own were missing.Since then: Mt. Gox found 199,999.99 BTC in an old wallet on 20 Mar 2014 (net loss ≈650,000 BTC). Under its civil-rehabilitation plan the trustee started paying creditors in BTC and BCH on 5 Jul 2024 (alongside cash), had paid BTC/BCH to over 19,500 creditors by 27 Mar 2025, and on 27 Oct 2025 said repayments were 'largely completed' for creditors who had finished the procedures, extending the deadline to 31 Oct 2026. Press reports put the repayment pool at about 142,000 BTC, 143,000 BCH and ¥69bn. | $473M850,000 BTC | reuters.commtgox.comtheblock.co |
Exchange hacks and collapses in 201310 incidents, $6.3M lost, stolen or frozen | ||||
| 2013-11-29 | PicoStocksHack | PicoStocks lost 5,896 BTC from both its hot and cold wallets, which it suspected had been copied by someone with past system access.Since then: Operator said user balances would be returned from company funds; compilations report users were made whole | Not reported5,896 BTC | wired.combitcointalk.org |
| 2013-11-11 | Bitcash.czHack | Hackers breached Czech exchange Bitcash.cz and emptied up to 4,000 customer wallets, after which the site shut down. | $100K485 BTC | coindesk.comtheregister.co.uk |
| 2013-10-26 | GBLFraud | Chinese bitcoin trading platform GBL, which falsely claimed a Hong Kong license, went offline and took about CNY 25 million of investors' money with it. | $4.1M | coindesk.comtheregister.com |
| 2013-10-23 | Inputs.ioHack | Web wallet Inputs.io lost about 4,100 BTC in two thefts after an attacker took over its hosting account, and could not repay users in full.Since then: Partial refunds on a sliding scale from remaining coins (smaller balances got a higher percentage back) | $1.2M4,100 BTC | coindesk.comabc.net.auventurebeat.com |
| 2013-07-28 | BitFunder / WeExchangeHack | Users exploited a bug in BitFunder's code to withdraw about 6,000 BTC from the WeExchange wallet holding customer coins, and the operator hid the shortfall until shutting down in November 2013. | $775.1K6,062 BTC | sec.govjustice.govbleepingcomputer.com |
| 2013-06-20 | Mt. GoxFrozen withdrawals | Mt. Gox halted US-dollar withdrawals, and even after it said they had resumed, customers waited weeks to months for cash.Since then: Not separately; customer claims were folded into Mt. Gox's 2014 bankruptcy (creditor repayments began in 2024) | Not reported | wired.comtechcrunch.comwired.com |
| 2013-06 | PicoStocksHack | PicoStocks lost about 1,300 BTC when attackers exploited passwords reused across its accounts, according to its founder. | $160K1,300 BTC | wired.comunchained.com |
| 2013-05-10 | VircurexHack | An attacker obtained Vircurex's hosting-account credentials and emptied its hot and warm wallets.Since then: Operator said the loss would be covered from exchange income (withheld dividends); reserves ran out and BTC/LTC/TRC/FTC withdrawals were frozen in March 2014 | Not reported1,454 BTC | bitcointalk.orgbitcointalk.orgweb.archive.org |
| 2013-04-03 | InstawalletHack | Web wallet Instawallet was suspended indefinitely after its database was fraudulently accessed, and users had to file claims to get their balances back.Since then: Claims process ran 2013-04-11 to 2013-07-11 and payouts began 2013-07-19; balances under 50 BTC were to be refunded, larger ones case by case | Not reported | venturebeat.comweb.archive.org |
| 2013-04 | Bitcoin-24Seizure | Bitcoin-24, then Europe's largest bitcoin exchange, shut down after Polish and German prosecutors froze its bank accounts in a fraud and money-laundering probe, trapping customers' euro balances for years.Since then: BTC withdrawals reopened 2013-04-28; the German account seizure was lifted 2013-05-31 and some EUR paid out; customers voted in Nov 2013 for a 72% payout; Polish-held funds were still unreleased in 2020 | Not reported | heise.deheise.dekuttler.eu |
Exchange hacks and collapses in 20125 incidents, $565.8K lost, stolen or frozen | ||||
| 2012-12-21 | BitMarket.euCollapse | BitMarket.eu's operator admitted he had moved most of the exchange's offline customer bitcoins to Bitcoinica for a trading strategy, where they were lost in Bitcoinica's May 2012 collapse, leaving 18,787.72 BTC missing.Since then: The operator said its claims in Bitcoinica's liquidation were worth only about $50,000; trading restarted 2013-01-03 with pre-Dec-21 balances frozen, and the exchange stopped trading in Feb 2013. No repayment found. | Not reported18,788 BTC | bitcointalk.orgen.bitcoin.it |
| 2012-09-04 | BitfloorHack | Attackers who breached Bitfloor's servers used an unencrypted backup of its wallet keys to move about 24,000 BTC, most of the coins the New York exchange held.Since then: Partial: Bitfloor resumed trading in Sept 2012 and made at least one pro-rata BTC repayment (Dec 2012); it shut down on 2013-04-17 after losing its US bank account, saying it would return remaining funds. Moore & Christin classify it as partially repaid. | $250K24,000 BTC | theverge.combitcointalk.orgweb.archive.org |
| 2012-07-31 | BTC-eHack | An attacker who cracked BTC-e's Liberty Reserve API key credited fake USD deposits, bought coins with them and withdrew about 4,500 BTC from the exchange's hot wallets.Since then: BTC-e said it would refund all losses from its reserves, restored its database to just before the attack and paused trading for about 1-2 days. | Not reported4,500 BTC | web.archive.org |
| 2012-05-11 | BitcoinicaHack | An attacker who got into a company email account with access to Bitcoinica's Rackspace servers emptied its 18,547 BTC hot wallet, and the margin-trading platform shut down for good.Since then: Bitcoinica never reopened. Verified claimants were paid about 50% of their claims (via Mt. Gox codes) in June-July 2012; in Aug 2012 creditor Wendon Group moved to put Bitcoinica LP into New Zealand receivership and liquidation. No final distribution was found. | $87K18,548 BTC | arstechnica.combitcointalk.orgarstechnica.com |
| 2012-03-01 | Bitcoinica, Slush's pool and other Linode-hosted bitcoin servicesHack | An intruder in Linode's customer-support portal accessed eight bitcoin-related customer accounts and emptied hot wallets, including 43,554 BTC from margin-trading platform Bitcoinica and 3,094 BTC from Slush's mining pool.Since then: Bitcoinica said it would reimburse customers in full from its reserves and kept trading; slush said he covered his pool's 3,094 BTC loss from his own income. | $228.8K46,703 BTC | arstechnica.combitcointalk.orgbitcointalk.org |
Exchange hacks and collapses in 20113 incidents, $1M lost, stolen or frozen | ||||
| 2011-07-29 | MyBitcoinHack | The popular web wallet MyBitcoin went offline on 2011-07-29 and days later said it had been hacked, losing 51% of the 154,406 BTC it held for users.Since then: MyBitcoin said half its deposits were in cold storage and offered every user 49% of their balance via a claims form open for 30 days (Aug 2011); the remaining 51% was never recovered. | $800K78,740 BTC | web.archive.orgweb.archive.orgen.wikipedia.org |
| 2011-07-26 | Bitomat.plCollapse | Bitomat.pl, then the third-largest bitcoin exchange, lost its only wallet file and backups when its Amazon EC2 virtual machine was wiped during a restart.Since then: Mt. Gox took over Bitomat.pl on 2011-08-11 and restored the lost user balances, migrating users to Mt. Gox. | $221K17,000 BTC | siliconangle.comweb.archive.org |
| 2011-06-19 | Mt. GoxHack | An attacker used a compromised admin account to dump unbacked bitcoins on Mt. Gox, crashing its price from about $17.50 to $0.01, withdrew roughly 2,000 BTC, and the exchange's user database leaked.Since then: Mt. Gox rolled back the fraudulent trades and said the ~2,000 BTC withdrawn would be replaced at its own expense; the exchange was offline until it relaunched on 2011-06-26. | Not reported2,000 BTC | web.archive.orgtheregister.comwired.com |
This list includes only companies that hold customer funds. It does not include darknet markets, investment schemes, casinos, payment processors, non-custodial swap services or DeFi exploits. It also does not include amounts without a reliable source. 4 incidents are in the list but not in the totals, because another incident already includes their amounts. We made this list in October 2026. If you find an error, tell us.
Casa, “Exchange hacks and collapses since 2011”, casa.io/exchange-hacks, updated October 7, 2026.
The largest hack in this list is Bybit, on February 21, 2025, with $1.5 billion.
The largest collapse is FTX, in November 2022, with $8 billion of customer funds.
This list has 154 incidents since 2011. There are 100 hacks, 31 collapses, 11 cases of frozen withdrawals, 7 frauds and 5 seizures.
No. FTX repaid customers in US dollars, at the prices of November 2022, plus 9% interest each year. The payments started in February 2025, when the price of bitcoin was much higher. So customers with bitcoin got back much less than the value of their bitcoin.
Hold your own keys. Then an exchange cannot lose your bitcoin. But other risks become important, for example the loss of a key, a fire or an inheritance with no plan. The Durability Test checks 7 of these risks in 2 minutes.
If the company fails, you can lose your bitcoin. With a Casa Vault, you hold your bitcoin yourself.
See How a Casa Vault WorksA fund charges a fee each year, and a custodian holds the bitcoin. See the cost of the fee in 10, 20 and 30 years.
See the Cost of the FeeAn exchange cannot lose your bitcoin. 7 other risks can. The Durability Test checks them in 2 minutes.
Start the Durability Test