Loading story…
Mt. Gox, once the world’s largest Bitcoin exchange, halted bitcoin withdrawals after citing unusual wallet activity and a transaction malleability flaw, then rapidly unraveled as customers protested in Tokyo and allegations mounted that hundreds of millions of dollars in cryptocurrency were missing. The company went offline and filed for bankruptcy protection in Japan, later seeking U.S. bankruptcy recognition, after saying it may have lost about 750,000 customer bitcoins and 100,000 of its own due to hacking linked to weaknesses in its systems; it also disclosed a major discrepancy in its bank accounts and liabilities exceeding assets.
The collapse affected tens of thousands of creditors and became one of the defining failures of the early cryptocurrency market, prompting lawsuits, regulatory scrutiny, and years of liquidation and rehabilitation proceedings. Japanese authorities later arrested former CEO Mark Karpelès over allegations that he manipulated exchange records, and a Tokyo court ultimately found him guilty of falsifying electronic records while acquitting him of embezzlement and breach-of-trust charges. Creditors continued pursuing repayment years later, with recovered bitcoin holdings raising the prospect of long-delayed distributions.
Track how attackers are adapting to this technology.
11 events from the most recent confirmed update back to the earliest known activity.
By mid-2022, creditors were reported to be nearing repayment under the long-running rehabilitation process. The development raised expectations that recovered assets could finally be distributed after years of bankruptcy and legal proceedings.
A Tokyo court found Mark Karpeles guilty of falsifying electronic records but acquitted him of embezzlement and aggravated breach of trust charges tied to Mt. Gox's collapse. He received a 2.5-year prison sentence suspended for four years.
U.S. law enforcement moved against major cryptocurrency exchange BTC-e, alleging it helped launder funds stolen from Mt. Gox and other cybercrimes. The action broadened the Mt. Gox story from bankruptcy and internal misconduct allegations to an international criminal enforcement case tied to the stolen bitcoin.
Japanese police arrested former Mt. Gox CEO Mark Karpeles over allegations that he manipulated the exchange's computer system to falsify asset records. Karpeles denied wrongdoing and maintained that hackers were responsible for the bitcoin losses.
Mt. Gox reportedly asked a Tokyo court for permission to move from rehabilitation to liquidation, saying plans to rebuild the exchange were too complex and unrealistic. If approved, a trustee would take control of the company's assets, likely reducing recoveries for major creditors.
Following the collapse, Mt. Gox later reported that roughly 200,000 bitcoins had been found in an old digital wallet. The discovery reduced the net scale of the previously reported losses but did not resolve the bankruptcy and creditor claims.
After its Japanese bankruptcy filing, Mt. Gox sought bankruptcy protection in the United States. The U.S. filing extended the insolvency proceedings across jurisdictions as creditors pursued claims.
Mt. Gox filed for bankruptcy in Japan, saying it may have lost about 750,000 customer bitcoins and 100,000 of its own due to hacking linked to weaknesses in its systems. CEO Mark Karpeles apologized publicly, and the filing revealed liabilities exceeding assets and a large discrepancy in bank accounts.
Mt. Gox's website went offline as reports circulated that the exchange may have lost hundreds of millions of dollars' worth of bitcoin in a hack. The outage marked a major escalation in the crisis surrounding what had been the world's largest bitcoin exchange.
As withdrawal problems persisted, customers gathered outside Mt. Gox's Tokyo headquarters demanding answers about missing funds. The protest reflected growing concern that users could not access their money or bitcoins on the exchange.
Mt. Gox announced it had halted bitcoin withdrawals to external addresses after detecting unusual wallet activity and investigating a flaw related to transaction malleability. The exchange said fiat withdrawals and bitcoin deposits were unaffected and that it was working on a mitigation with Bitcoin core developers.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
11 references tracked. Mallory keeps watching after this page renders.
web.archive.org
Open sourcecnn.com
Open sourcetheverge.com
Open sourceweb.archive.org
Open sourceweb.archive.org
Open sourcewired.com
Open sourcetheverge.com
Open sourceweb.archive.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Roger Ver, a prominent early bitcoin investor known as "Bitcoin Jesus," agreed to pay nearly $50 million to the U.S. Department of Justice to settle federal tax charges related to his cryptocurrency holdings. Ver entered into a deferred prosecution agreement after admitting that he willfully omitted a significant portion of his bitcoin assets when filing expatriation-related tax returns in 2016, which reduced his tax liability by over $16.8 million. The settlement included back taxes, penalties, and interest, and following the payment, prosecutors moved to dismiss the indictment against him. This case highlights the increasing scrutiny by U.S. authorities on cryptocurrency investors who attempt to evade taxes by renouncing citizenship or failing to report digital assets. In a separate incident, a trader suffered a loss of approximately $21 million on the decentralized exchange Hyperliquid due to a private key compromise. The attacker was able to access the trader's wallet and transfer the funds, underscoring the persistent risks associated with private key management in decentralized finance (DeFi) platforms. The Hyperliquid incident demonstrates the ongoing threat of targeted attacks against high-value cryptocurrency accounts, where a single compromised key can result in substantial financial losses. Additionally, the Ethereum Foundation and Keyring launched a fund to support the legal defense of Tornado Cash developers, reflecting the broader legal and regulatory challenges facing the crypto ecosystem. Indian authorities initiated an investigation into Binance traders for alleged crypto tax evasion, signaling a global trend of increased regulatory enforcement in the digital asset space. Hackers executed a $32.5 million dump, marking the largest crypto liquidation event of the week, which had significant market impact and raised concerns about the security of large-scale digital asset holdings. New York City established the nation's first mayoral office dedicated to digital assets and blockchain, indicating growing institutional interest in the sector. These incidents collectively illustrate the multifaceted risks in the cryptocurrency landscape, including legal, regulatory, and technical threats. The convergence of high-profile tax settlements, major thefts, and regulatory actions highlights the need for robust compliance and security measures among digital asset holders and service providers. The events also emphasize the importance of secure key management practices and the potential consequences of lapses in operational security. As the digital asset market matures, both individual investors and organizations must remain vigilant against evolving threats and regulatory developments. The week's developments serve as a reminder that the intersection of technology, finance, and law in the crypto space is increasingly complex and fraught with risk. Ongoing education, proactive risk management, and engagement with legal and regulatory frameworks are essential for mitigating exposure in this rapidly changing environment.
Jul 12, 2026
A Singapore court has allowed **Zettai Pte Ltd**, the parent entity tied to crypto exchange **WazirX**, to hold an online creditors’ meeting on a restructuring plan aimed at recovering more than **$230 million** stolen in a July 2024 cyberattack. The High Court also granted a **16-week moratorium** and approved changes to streamline the voting process, while saying there was no proper evidence for claims that Zettai had orchestrated the theft. WazirX said the proposed scheme would reorganize liabilities, issue recovery tokens, and potentially restart the platform with new products including a decentralized exchange; if creditors and the court approve it, initial payouts could begin within 10 business days after the plan takes effect. The recovery effort follows a July 18 breach of a **multi-signature wallet** that forced WazirX to halt rupee and crypto withdrawals and later revealed losses affecting roughly **45% of exchange assets**. WazirX and custody provider **Liminal** publicly disputed responsibility for the exploit, while users criticized the exchange’s transparency, withdrawal freezes, and an earlier **"socialised loss"** proposal that would have returned only 55% of tokens immediately. The company has reported the incident to police, launched bounty efforts, said it had frozen an initial **$3 million** tranche of stolen assets, and disclosed liquid assets of **566.38 million USDT** against **546.47 million USDT** in claims as legal and customer pressure continues to mount.
Jun 29, 2026
US authorities reported multiple enforcement actions tied to **crypto-enabled crime**. In the Empire Market case, prosecutors said co-creators **Raheim Hamilton** and **Thomas Pavey** designed the dark web marketplace to help users evade law enforcement and launder proceeds; the market allegedly facilitated about **$430M** in transactions (drugs, stolen payment data, counterfeit currency) before disappearing in 2020 in what investigators described as an exit scam that stole an estimated **$30M** in bitcoin. Hamilton pleaded guilty to federal drug conspiracy charges and agreed to forfeit roughly **1,230 BTC** plus **24.4 ETH** and real estate; Pavey previously pleaded guilty and agreed to forfeit about **1,584 BTC** and other assets. Separately, reporting highlighted alleged misuse and laundering of digital assets in other contexts. On-chain investigator **ZachXBT** traced movements from wallets associated with **US-seized crypto** (held under U.S. Marshals Service custodianship) to wallets allegedly linked to **John Daghita**, the son of a federal contractor executive, with claims of roughly **$23M** in diverted cryptocurrency and another wallet holding about **$36M** in Ethereum; ZachXBT said he alerted the **U.S. Marshals Service**. In another DOJ case, **Jingliang Su** (a Chinese national) was sentenced to **46 months** for laundering proceeds from a cryptocurrency investment fraud that authorities said victimized **174** people for **$36.9M**, using social engineering via social media/dating platforms and counterfeit trading sites, with **$26.9M** restitution ordered and multiple US agencies involved in tracing funds and dismantling the network.
Jun 29, 2026