What Happened in the Mt. Gox Hack, and What It Still Teaches
Mt. Gox lost around 850,000 bitcoins in 2014 and customers waited a decade for repayment. Here's what happened and the custody lessons that still apply.
More than a decade later, Mt. Gox remains the defining example of what can go wrong when users trust an exchange with their crypto. Its lessons are still relevant every time an exchange pauses withdrawals.
What Mt. Gox Was
Based in Tokyo, Mt. Gox was at one point the dominant Bitcoin exchange, handling the large majority of global Bitcoin trading in its early years. For many early users, buying Bitcoin effectively meant using Mt. Gox.
What Happened
In February 2014, Mt. Gox halted withdrawals, citing technical problems. Days later it shut down its website and filed for bankruptcy protection, announcing that roughly 850,000 bitcoins belonging to customers and the company were missing. Around 200,000 were later found in an old wallet, but the rest were gone.
How the Losses Built Up
Investigations indicated that the losses weren't the result of one sudden attack. Bitcoin had been stolen from the exchange's hot wallets gradually over several years, and weak internal controls and poor record-keeping meant the losses weren't detected, or weren't disclosed, until it was far too late.
Why Customers Waited So Long
Customers became creditors in a bankruptcy process that stretched on for years. Repayments to creditors only began in 2024, roughly a decade after the collapse, illustrating how slow recovery can be when an exchange fails.
Lesson One: Custody Means Trust
Funds held on an exchange depend on the exchange's honesty, security, and record-keeping. Mt. Gox customers had no way to see that their bitcoin was disappearing. This is the core idea behind "not your keys, not your coins".
Lesson Two: Withdrawal Freezes Deserve Attention
Mt. Gox's collapse began with withdrawals being paused for "technical" reasons. Not every pause signals a crisis, but an extended, vaguely explained freeze is a signal to follow closely.
Lesson Three: Transparency Matters
Mt. Gox gave customers no independent way to verify that their balances were fully backed. Practices like proof of reserves exist partly because of failures like this one.
Why It Still Matters Today
Exchanges today are generally more regulated and more transparent than Mt. Gox was, but the basic risk hasn't disappeared. Any funds held by a third party depend on that third party.
Keep on exchanges only what you actively need, and move the rest to self-custody. Mt. Gox customers learned that lesson the hardest way possible.