Mt. Gox to FTX: The Custody Graveyard

Where you're going: Over about a decade, most of the biggest names in crypto custody collapsed: Mt. Gox, QuadrigaCX, Celsius, Voyager, BlockFi, Genesis, FTX. Every time, customers were locked out of their money, and in most cases they lost some of it for good. This chapter goes through what happened in each one and what they had in common. The short version is that holding your own keys would have prevented all of them. Self-custody has its own costs, though, and we cover those too.

Everyone repeats it, almost nobody acts on it

Every Bitcoiner has heard "not your keys, not your coins." Most of us repeat it. Far fewer act on it, and the reason is simple: a balance on an exchange feels exactly like owning bitcoin. You can see the number in the app and move it around whenever you want. It looks like yours, right up until the day you go to withdraw and the button doesn't work.

That day has come around a lot. What follows is just a list of what actually happened to people who left their coins with a custodian, with the dates and the dollar amounts attached.

The graveyard at a glance

Seven collapses across nine years. The details differ each time, but the underlying failure is the same one, which is easier to see once you have the individual cases in front of you. Here they are.

2014: Mt. Gox

Mt. Gox handled around 70 percent of all Bitcoin trading by 2013. It halted withdrawals on 7 February 2014 and filed for bankruptcy in Tokyo three weeks later, on 28 February, with roughly 850,000 BTC missing. About 750,000 of those were customer coins. It wasn't one dramatic hack. Mt. Gox later found about 200,000 of them in an old wallet, and independent investigators concluded that most or all of the rest had been stolen from the exchange's hot wallet bit by bit, starting in late 2011.

The first repayments came at the end of 2023, when creditors reported receiving payments from the trustee in yen. Repayments in bitcoin started in July 2024, more than ten years after the collapse.

At the time most people read this as one badly run company. The more durable lesson is about what an exchange balance actually is. It's an IOU, and an IOU is only worth as much as the company behind it is solvent and honest. You usually can't tell whether that's true until the moment it isn't.

2019: QuadrigaCX

QuadrigaCX was the largest exchange in Canada. In December 2018 its co-founder and CEO, Gerald Cotten, died while travelling in India. The company told a court that Cotten had been the only person who moved coins out of its cold wallets, and that more than CAD 180 million in coins should be sitting in them, now out of reach. That was the story, anyway.

When the court-appointed monitor, Ernst & Young, went looking at those wallets, they were empty. They had been empty since April 2018, eight months before Cotten died. In 2020 the Ontario Securities Commission concluded that Quadriga had "operated like a Ponzi scheme." Cotten had been faking trades under aliases, paying real withdrawals out of new deposits, and spending customer money on houses, a yacht and a share in a private jet.

So Quadriga added something to the Mt. Gox lesson. With Mt. Gox you could at least imagine outside thieves. With Quadriga there was nothing left for thieves to take, because the custody had never really existed. A company telling you its funds are safe in cold storage is making a claim, not showing you proof, and the people making the claim had every reason to stop you from checking it.

2022: the lenders

Mt. Gox and Quadriga still looked like one-off disasters. 2022 showed they were a type. Over a few months a whole chain of lenders and exchanges went down one after another, and the wreckage made it obvious what had been happening to money people thought they had simply deposited. It had been lent out, and sometimes lent on again.

The trigger was the Terra/LUNA token, which lost about 99 percent of its value in mid-May 2022. Celsius went first. It advertised interest on deposits the way a bank advertises a savings account, and put customers' coins to work to pay for it. It froze every withdrawal on 12 June 2022, leaving hundreds of thousands of customers with $4.7 billion they couldn't reach, and filed for bankruptcy a month later.

Then a hedge fund went down. Three Arrows Capital had borrowed from lenders across the industry to fund its bets, and much of its portfolio was in LUNA. It defaulted on several of those lenders, and at the end of June 2022 a court in the British Virgin Islands put it into liquidation. By late July, creditors had filed claims of more than $2.8 billion.

That default tore through the firms that had lent 3AC their customers' money. Voyager had lent 3AC more than $650 million. It froze withdrawals on 1 July and filed for bankruptcy days later, with about $1.3 billion of customers' crypto and more than $350 million of their cash inside. Genesis, the lending desk owned by Digital Currency Group, had lent 3AC about $2.4 billion. When that money evaporated it was left with a roughly $1.1 billion hole, which its parent company covered on paper with a promissory note that doesn't come due until 2032. According to New York's attorney general, Gemini kept telling Gemini Earn investors, whose coins were lent to Genesis, that the program was low-risk, and Genesis and its parent said publicly that Genesis's balance sheet was strong. About 340,000 investors had money in Gemini Earn when Genesis stopped withdrawals that November. BlockFi, already hurt by 3AC, got rescued mid-year by FTX, and then went down when FTX did.

Voyager's "FDIC insured" marketing is worth pausing on, because it shows how the reassurance was built. There was some insurance behind it. It covered the US dollars Voyager kept at a partner bank, and it only applied if that bank failed. It did not cover crypto, and it did not cover Voyager itself going bankrupt, which is what actually happened. The Federal Trade Commission later charged that telling customers their accounts were FDIC insured was false, and Voyager settled.

November 2022: FTX

Then the biggest one. By the autumn of 2022 FTX was one of the most respected exchanges anywhere. It had celebrity endorsements, sports sponsorships, and a founder who had testified in front of Congress. None of that had anything to do with whether the customer coins were actually there.

When CoinDesk reported that the balance sheet of FTX's sister hedge fund, Alameda Research, was propped up by FTX's own FTT token, confidence broke. A competitor said it would sell its FTT and customers rushed to pull their money out. By the SEC's count they withdrew about $5 billion in a single day. On 8 November FTX paused all withdrawals, because the money wasn't there to give them. FTX had been quietly sending customer deposits to Alameda through a credit line with effectively no limit. On 11 November 2022, FTX, Alameda, and about 100 related companies filed for bankruptcy. The customer shortfall was about $8 billion. Sam Bankman-Fried was convicted on all seven counts, including fraud and conspiracy to launder money, in November 2023 and sentenced to 25 years in March 2024.

The repayment is the part worth sitting with. FTX's customer claims were fixed in dollars, valued as of 11 November 2022 at $16,871 a bitcoin. In its report for the second quarter of 2026, the FTX Recovery Trust said that after a payout on 31 July 2026, every allowed claim that earns interest had been paid, or had money set aside for, at least 100 percent of that dollar value, and smaller claims had been paid 120 percent. Bitcoin first traded above $90,000 in November 2024. So if you held bitcoin on FTX, you got back its dollar value from one of the worst weeks of that year, and you no longer own the coins or get their later price. What you held on FTX was a claim that happened to be measured in bitcoin, which is not the same thing as the bitcoin.

The pattern

Put the seven side by side and the same few things show up in almost all of them.

Your deposit was never just sitting there. "Earn interest on your crypto" and "your funds are safe with us" are two descriptions of the same thing: your coins got lent out into somebody else's leveraged trade. At Celsius, Voyager, BlockFi, and Genesis, counterparty risk wasn't a side effect of the product. It was the business model.

You couldn't check the custody yourself. "Cold storage," "fully reserved," "FDIC insured" were words on a website, not anything you could verify. Quadriga's wallets were empty. Voyager's insurance covered the wrong thing. FTX's "reserves" were a loan to a hedge fund.

The bigger the reputation, the bigger the failure. Mt. Gox basically was the market. FTX was about as respectable as a crypto exchange could get, right up to the week it imploded. A trusted brand tells you nothing about whether the coins are there.

When it broke, you were just a creditor. Not someone who owned coins, but a line in a bankruptcy filing, paid back often years later, at whatever value the court settled on. Even the cases that ended relatively well ended that way.

Why holding your own keys fixes this

This is where Bitcoin works differently from the dollars and stocks those same companies held. Bitcoin is a bearer asset. Whoever holds the private keys controls the coins, completely, and without needing anyone's permission. Holding your own keys isn't an advanced trick you bolt on afterward. It's the normal way Bitcoin was meant to be held. When the keys are yours, there's no company that can go insolvent out from under you, no balance that's secretly a loan, and nobody on the other end who can switch your withdrawals off.

Every failure in this chapter happened on a layer that people added on top of Bitcoin: the exchange, the lender, the interest account. None of it happened to Bitcoin itself, which kept producing blocks the entire time. In every case the coins were lost because someone other than the owner was holding the keys.

The honest counterargument

It would be easy, and a little dishonest, to stop there. All of this is a strong argument against keeping your savings on a custodian. It is not an argument that custodians are evil, or that everyone should hold all of their own keys all of the time. An honest version has to deal with the other side.

You still need exchanges. Getting dollars into bitcoin almost always means going through a centralized exchange. The point isn't to avoid them, it's to not treat one as a place to store anything. Buy your bitcoin and move it to a wallet you control, then do the same thing next time.

Self-custody moves the risk, it doesn't erase it. Once you hold your own keys, you also hold every way of losing them. Lose your seed phrase and the coins are gone for good, with none of the partial recovery the Mt. Gox creditors eventually got. A bad backup, a house fire, a passphrase you forget, an heir who has no idea what a hardware wallet is, a thief who knows you keep keys at home: those are all your problem now instead of an exchange's. For a lot of people that's still the better deal. It's a real trade, though, not a free upgrade, and our seed backup strategies chapter exists because getting this part right is genuinely hard.

Some custody is fine. A custodian that's actually regulated, audited, and insured can be a reasonable choice for an institution, for someone holding more than they can safely secure on their own, or for a beginner who isn't ready to manage keys yet. The companies in this chapter weren't dangerous because custody is inherently evil. They were dangerous because they were unregulated, unaudited, or lying, while telling everyone they were safe.

Proof of reserves helps, a little. By early 2023, some exchanges were publishing "proof of reserves" reports, meant to show they control a given set of coins. It's a genuine improvement. It also isn't proof that the exchange is solvent: a company can demonstrate the assets it holds while saying nothing about what it owes, and it can arrange to look fully funded on the one day it knows it's being checked. Useful information, not a guarantee.

What to actually do

You don't have to pick between trusting everyone and burying steel plates in the backyard. There's a reasonable middle, and a sensible default.

• Treat an exchange like a cash register, not a vault. Keep only what you're actively trading there, and only an amount you could stand to lose if withdrawals stopped tomorrow.
• Move anything you're holding for the long term into a wallet you control. The one skill it takes is backing up a seed phrase properly, and you can learn that in an afternoon.
• Match the setup to the amount. A single hardware wallet is already a big step up from an exchange balance. Multisig is worth the extra effort once the sum is large enough that losing it would change your life.
• If you do leave some with a custodian, use one that's regulated, audited, and insured, and stay aware that you're still trusting a promise.

None of this means everyone running a custodian is a crook. It means a balance with a custodian is a promise, and Bitcoin is the rare case where you don't have to rely on the promise at all. Every company in this chapter asked you to trust that your coins were really there. With Bitcoin you can just hold them yourself. That is the whole point of holding your own keys, and the people in this chapter learned it the expensive way.