Mt. Gox - 10 years later, where do we stand?

Mt. Gox is an extremely well known name by anyone that’s been in crypto long enough. Originally founded by Jed McCaleb, known for his work on Ripple and Stellar, the platform started as a card trading platform, before pivoting into a Bitcoin exchange as the network gained traction nearly 15 years ago. In early 2011, McCaleb sold Mt. Gox to Mark Karpelès. During ownership change, the exchange’s hot wallet was hacked, for a total of almost 80k BTC (which interestingly was never moved again). Off to a rough start, and with both seller and buyer knowing about this debacle, the ownership transition continued. Mark began focusing on bolstering the platform's security, which was rudimentary at best.

By June 2011, a privileged account which was said to belong to an auditor, was compromised. This breach coincided with reports of user accounts being compromised, casting doubt on Mt. Gox’s reliability. Simultaneously, rumors emerged of a database leak being sold online, which seemingly didn’t affect Mark in any way. But it appears the damage had already been done. It is even possible that multiple breaches occurred at the time. We now know today that this was the true beginning of the end, with Bitcoin being slowly siphoned out of the exchange in the background.

The summer of 2011 brought further challenges. The exchange experienced growing pains and issues when deploying updates. Trades were executed with erroneous amounts, and a system rollback was issued. Despite these issues, Mt. Gox managed to gain significant trading volume, and a "proof of solvency" transaction temporarily reassured users. Later that year, the exchange lost another 2,000 BTC due to a faulty withdrawal to an invalid address - an irreversible mistake.

2 years later, Mt Gox kept operating, in a fractional reserve system. Mark was quickly losing BTC outright as months went by, and trading fees weren’t making up for this loss. Desperate for a solution, Mark allegedly deployed a bot, later nicknamed "Willy," which artificially inflated trading activity to mask the missing funds. This bot was thoroughly investigated using leaked data from the exchange, published during its demise in early 2014. It is possible to see that it even traded during system outages, when nobody else was able to do so. Evidence points to it being used as a leverage against the BTC loss, transferring it to the fiat side, by buying up BTC. The hole was already there, and this stop-gap solution had its days numbered since the get go. This tactic significantly influenced the 2013 Bitcoin bull run, culminating in a huge drop in price early the following year, given there was no liquidity to actually back it, and on the closure of the exchange, followed by the bankruptcy fillings.

After stopping operations and filing for bankruptcy in late February 2014, Mark found an old wallet with 200000 BTC left in it, reducing the total loss to creditors. And while many other things have happened since, including Mark Karpelès’ arrest, this brings us to present day, where creditors are finally receiving what is owed to them.

After several long rounds of claim submissions and KYC, which started back in 2014, creditors are expected to receive up to around 15% of their total deposits. This plan was approved in late 2020, and the deadline for filling claims ended late 2021.

In late 2022 creditors were requested for another ID verification, and to select their preferred payment method (where they were given the option to receive fiat, or a mix of fiat and crypto). This step ended in April 2023. The payments started in the summer of 2024 and continue to this day.

In October, repayment deadlines were extended for a year allegedly to allow creditors to complete missing steps in their claims process. Which leads us to the present day, where the majority of creditors were already paid. However, just under 40k BTC remain in the address associated with proceedings, showing us saga is far from over, highlighting the long-lasting consequences of Mt. Gox’s collapse.

What have we learned from Mt. Gox?

The Mt. Gox debacle forever changed how exchanges are perceived, underscoring the importance of balancing usability with robust security measures. This pivotal event popularized the mantra “Not your keys, not your coins”, urging users to prioritize self-custody of their assets.

For exchanges, it served as a sobering reminder that no system is invulnerable, pushing them to adopt more professional practices, implement advanced security protocols, and prepare for worst-case scenarios.

What’s the takeaway?

The crypto industry has grown more resilient in response to these crises. Modern exchanges prioritize security, transparency, and user trust, often incentivizing responsible disclosures through bug bounties.

At the same time, these incidents have reinforced the value of self-custody - something we, at AmaZix, truly believe in. We find this of the utmost, and we acknowledge self custody as the sole way of holding your assets. For those who must use exchanges, the advice is simple: only deposit funds needed for immediate trades.

At AmaZix, we remain committed to educating the crypto community, ensuring users understand the best practices for safeguarding their assets. Whether you're new to the space or a seasoned user, we’re here to guide you toward a more secure and informed crypto journey.