Mt. Gox

The name is an acronym for Magic: The Gathering Online Exchange, the card trading site the domain was originally registered for in 2007. At its peak in 2013 it processed roughly 70 percent of all bitcoin trades, which is why its failure defined the industry's first decade and still shapes how careful people are with custody. Every rule about withdrawing from exchanges traces back to this one company.

How it works

Mt. Gox failed slowly and then all at once, and the slow part is the instructive half.

Jed McCaleb turned the domain into a bitcoin exchange in July 2010 and sold it to Mark Karpeles in March 2011, when the whole market was a hobby. The engineering never caught up with what it became. There was no formal accounting reconciliation between the coins in the wallets and the balances in the database, the codebase was maintained by a very small group, and an internal trading bot was later found to have been buying against customers.

Coins were leaking the entire time. A breach in June 2011 let an attacker sell from a compromised account until the quoted price on the exchange touched one cent. Independent forensic work published by the security researcher Kim Nilsson in 2015 concluded that most of the missing bitcoin had already been stolen between 2011 and 2013, drained gradually from hot wallets, and that the company did not know. The transaction malleability bug it blamed publicly in 2014 was not the mechanism.

Regulatory pressure exposed the rest. In May 2013 US authorities seized funds from the exchange's American payment accounts over unregistered money transmission, dollar withdrawals slowed from days to months, and the price on Mt. Gox drifted above every other venue because customers who could not get money out were bidding for coins instead. That premium was the market pricing an insolvency nobody had confirmed yet.

Why this matters when you buy bitcoin

Mt. Gox is not a story about 2014. It is the template every later custodial failure has followed, and the warning signs it produced are the ones worth recognizing on a live platform.

Withdrawal friction came first, and it came months before the collapse. A platform that is slow to send your money is telling you something about its reserves or its banking, and it is the earliest signal any outsider ever gets. The habit that follows is simple: withdraw a small amount from any new platform in your first week, while nothing is at stake, so you know what normal looks like.

Concentration came second. Mt. Gox held most of the market's coins because it was first, not because it was good, and its customers had nowhere else to go. Today there is a real choice, and the exchange reviews on this site record which venues publish proof of reserves, which are licensed where you live, and which have withdrawal limits that would trap a large balance. Kraken, appointed by the Japanese trustee in 2014 to help creditors file claims, exists in these records partly because it survived the era that killed its competitors.

The third lesson is about recovery. Creditors did eventually get paid, in bitcoin rather than yen, when distributions began in July 2024. That took more than ten years, and it worked only because the trustee found 200,000 coins in an old wallet in March 2014. A recovery that depends on someone checking a forgotten wallet is not a plan.

February 2014, week by week

Mt. Gox's final month is worth reading as a sequence, because the public excuses arrived in a specific order.

February 7. Mt. Gox halts all bitcoin withdrawals, blaming transaction malleability, a known quirk that lets an unconfirmed transaction's identifier change. Other exchanges paused briefly and resumed within days, which should have been the tell.

February 10 to 23. Statements promise a fix. Customers cannot withdraw coins or dollars. A leaked internal document circulates claiming a shortfall of hundreds of thousands of bitcoin.

February 24. The website goes blank. Karpeles resigns from the Bitcoin Foundation board.

February 28. Mt. Gox files for bankruptcy protection in Tokyo, reporting 850,000 bitcoin missing, 744,408 of them customer coins and 100,000 its own, worth roughly 473 million dollars at prices that week.

March 20. The company announces it has found 200,000 bitcoin in an old wallet format it had stopped using in 2011.

Karpeles was later convicted in Japan of falsifying financial records and given a suspended sentence, and acquitted of embezzlement. The bankruptcy became a civil rehabilitation, which is why creditors were repaid in coins rather than in the yen value of 2014.

Mt. Gox vs exit scam

Mt. Gox was an insolvency, not a disappearance. An exit scam is a platform designed to take deposits and vanish, run by people who leave the jurisdiction and stop answering. Mt. Gox kept operating, published excuses, filed in a Japanese court, submitted to a trustee, and its chief executive stood trial. The distinction is not a defense of the company, whose record keeping was catastrophic and whose management traded against its own customers, but the two failures give different warnings. An exit scam is caught by asking who runs the company and where. An insolvency is caught by watching how withdrawals behave.

Mt. Gox vs Silk Road

Mt. Gox and Silk Road were two completely different events. Silk Road was a darknet marketplace shut down by US law enforcement, a criminal prosecution in which bitcoin was the payment method. Mt. Gox was a Japanese exchange that lost customer funds through theft and mismanagement, with no allegation that its business was illegal. They get merged in memory because they happened months apart and both taught the public that bitcoin was dangerous. What they actually demonstrated were two separate risks: one about what a market is used for, the other about who is holding your coins.