Mt. Gox 2014: 850,000 Bitcoin Vanish Forever

850,000 Bitcoin vanished. The biggest heist in crypto history.

Mt. Gox exchange

This wasn't a hack in the usual sense. It was a slow-motion robbery that ran for roughly three years in plain sight. By the time anyone noticed, 850,000 BTC, worth about $460 million at 2014 prices, had vanished from the world's largest exchange.

Mark Karpelès discovered the scale of the loss in early 2014, though the bleeding had started years earlier. The leading theory, and the one Mt. Gox itself pointed to, involved transaction malleability: a quirk in early Bitcoin's transaction format that let someone alter a transaction's ID before it confirmed, making a completed withdrawal look like it had failed. A user (or, researchers later argued, insiders with system access) could then re-request the same withdrawal, collecting the funds twice while Mt. Gox's own accounting believed the first attempt never went through. Some researchers have since argued the malleability story doesn't fully explain a loss this large, and that a portion of the coins likely disappeared through direct access to Mt. Gox's own hot wallets rather than any exploit at all. Mt. Gox never provided a forensic account precise enough to settle the question.

The public collapse happened fast even though the theft didn't. On February 7, 2014, Mt. Gox halted all withdrawals, citing "technical issues." On February 24, the website went completely blank. Customers who had spent years trusting the exchange with their savings were staring at an empty page. Karpelès filed for bankruptcy protection in Tokyo on February 28, listing liabilities that dwarfed anything the crypto industry had seen.

Then the story took its strangest turn. While picking through the wreckage months later, Karpelès's team found roughly 200,000 BTC sitting untouched in an old-format wallet nobody had checked, a batch of coins worth around $116 million at the time that had simply been forgotten rather than stolen. It didn't come close to covering the hole, but it became one of the case's defining oddities: an exchange that couldn't account for most of its Bitcoin also somehow lost track of a chunk that was never gone at all.

The legal aftermath dragged on for the better part of a decade. Trustee Nobuaki Kobayashi took over the civil rehabilitation process, a Japan-specific bankruptcy framework, and spent years just cataloguing claims before any repayment plan could move forward. Karpelès himself was arrested in Japan in August 2015 and held for 11 months, at points questioned by police for extended stretches without formal charges being filed, a legal tactic Japan permits that drew international criticism. In March 2019, a Tokyo court acquitted him of embezzlement and breach of trust but convicted him on a lesser charge of falsifying financial data, handing down a suspended sentence with no prison time.

Creditor repayments finally began in 2024, a full decade after the collapse, distributed in a mix of Bitcoin, Bitcoin Cash, and yen based on each creditor's original claim. The final twist is the cruelest part of the whole saga: because Mt. Gox's remaining Bitcoin holdings sat untouched through crypto's biggest bull runs, the value of the recovered stash eventually exceeded the total value of every claim against it. Some creditors who had no choice but to wait a decade for their money ended up net ahead of where they'd started, the slowest and most involuntary investment strategy in financial history.