Mt. Gox: lost Bitcoin, bankruptcy and the long road to repayment

From trading cards to a Bitcoin exchange

Jed McCaleb created the Bitcoin trading service in 2010. Its inherited name referred to Magic: The Gathering Online Exchange, an earlier trading-card idea. Mark Karpelès took over the exchange in 2011 and operated it from Japan. He was its later chief executive, not the original creator.

[22]

What Mt. Gox actually did

Mt. Gox became a leading venue for exchanging Bitcoin and fiat money in an immature market. Frequently quoted market-share estimates concern exchange trading, with differing coverage and dates; they do not mean that Mt. Gox processed that share of all Bitcoin blockchain transactions.

Customers deposited money or BTC, traded against an internal account balance and requested withdrawals. Matching trades inside the exchange did not necessarily move coins on-chain. The platform's ledger recorded its obligations; wallets and bank accounts held the assets intended to meet them.

[22]

The visible 2011 incident and the later theft allegations

In June 2011, a compromised account triggered disruptive trading and a temporary shutdown. That public incident must be separated from the prolonged wallet intrusion alleged by US prosecutors in 2023: access beginning around September 2011 and theft continuing through at least May 2014. They are different accounts of different events, with different evidentiary status.

[25] [18]

Warnings accumulated before the collapse

Contemporary reporting described delayed fiat withdrawals, banking difficulties, a US funds seizure and disputes with business partners in 2013. These were warning signs about access to funds and operations, not independent proof of the complete BTC shortfall. Later reporting also raised concerns about software testing and accounting controls; reported weaknesses are not a forensic reconstruction of every lost coin.

[23] [22]

February 2014: access closed before the legal process began

The withdrawal halt, explanation of a technical problem, website closure and court filing were separate steps. The February filing initially sought civil rehabilitation. Formal bankruptcy proceedings began later, on 2014-04-24; describing the whole sequence simply as a February bankruptcy obscures that distinction.

[24] [2] [4]

An account balance was not a private key

A private key authorizes spending; an address identifies a destination or spending condition. Coins are represented by blockchain outputs, not stored inside an app. A custodial customer normally has an account claim while the operator controls signing. Hot storage keeps signing accessible online; cold storage reduces online exposure but still requires sound key management, backups and bookkeeping.

What transaction malleability could—and could not—explain

In legacy Bitcoin transactions, certain changes could alter the transaction identifier without changing the payment's destination or amount. A service tracking only the original identifier might wrongly treat a completed payment as failed and issue another payment. That requires faulty payment tracking; malleability does not create Bitcoin or grant an attacker the private keys.

Decker and Wattenhofer's 2014 research found no widespread pre-collapse malleability activity sufficient to support the exchange's sweeping explanation. Their network study is evidence against that explanation, not a complete audit of Mt. Gox's books. The later theft allegations describe unauthorized wallet access, a separate mechanism.

[21] [18]

The numbers describe different things

Missing assets, a suspected theft, discovered holdings and repayments are not interchangeable measures. The figures below retain their dates and definitions. Subtracting an old wallet discovery from the initial estimate gives a revised approximate shortfall, not an audited list of every stolen transaction.

[2] [3] [6]

The old wallet: found coins, not a hacker's refund

The company reported finding 199,999.99 BTC in an old-format wallet used before June 2011 and previously thought empty. It moved the coins on March 7 and then into offline wallets on March 14–15. Together with roughly 2,000 previously known BTC, reported holdings were about 202,000 BTC. This was a discovery within the company's wallet records, not a documented return of stolen coins by an attacker.

[3]

Fiat shortages and assets beyond Bitcoin

The initial petition reported assets of 3,841,866,163 JPY and current liabilities of 6,501,119,371 JPY. It separately described an approximately 2,800,000,000 JPY discrepancy between bank deposits and recorded balances. These accounting categories must not be added to the BTC estimate as if they were additional coins.

A later trustee report stated account balances of 69,675,538,357 JPY under the trustee’s control at 2018-09-25, including 15,894,530,915 JPY set aside in a trust. That is a historical cash figure, distinct from the report's BTC/BCH holdings. Sales, recovered claims, expenses and protected creditor interests affect the estate; an early asset snapshot is not a 2026 payout ledger.

[2] [6]

From customer to creditor

A creditor is someone owed an obligation; a claim is the asserted right to repayment. The trustee administers assets and claims under court supervision. An allowed claim has passed the relevant recognition process. A distribution is performance under the applicable legal rules, not a normal exchange withdrawal. Account records, identity, ownership and procedural requirements matter.

Customers had to establish their rights through the claims process. Bankruptcy and rehabilitation filings were different procedures; creditors could not assume that an old registration automatically completed every later requirement. Correct account access did not restore the missing backing assets or bypass the court's distribution rules.

[5] [10]

Why bankruptcy gave way to civil rehabilitation

Bankruptcy began on 2014-04-24, with Nobuaki Kobayashi as trustee. Civil rehabilitation commenced on 2018-06-22 and stayed the bankruptcy process. Rehabilitation here concerns a court-approved way to satisfy creditors; it did not mean reopening the trading exchange.

Bitcoin's appreciation made the legal framework consequential. Bankruptcy claims used a fixed conversion of 50,058.12 JPY per BTC, while later asset values could greatly exceed those old yen claims. Rehabilitation allowed a framework addressing cryptocurrency claims and appreciation while protecting bankruptcy creditors' interests. Rising prices did not recreate the missing BTC.

[4] [5] [9]

The plan: a calculation framework, not a wallet restoration

Creditors approved the plan on 2021-10-20; the confirmation became final and binding on 2021-11-16. The public amended draft dated 2022-09-29 explains the principal mechanics; later amendment notices and deadline notices must also be read. It is not presented here as an untouched original or a substitute for an individual creditor's current documents.

[7] [8] [9] [11]

Why finding assets did not produce immediate payments

The process combined claim verification, contested entitlements, asset protection and sales, litigation, plan approval and payment infrastructure. A disputed large claim affects the denominator used to allocate a limited estate. Creditors across jurisdictions needed identity checks and valid recipient details; banks and designated exchanges needed arrangements for safe delivery. Coins under trustee control therefore did not become immediately withdrawable customer balances.

[6] [10]

Bitcoin Cash, cryptocurrency and cash components

Bitcoin Cash split from Bitcoin in 2017. Control of relevant unspent outputs and keys at the split could give the estate assets on both chains. BCH is a separate cryptocurrency with its own value and legal treatment; the fork did not double the estate's BTC or guarantee a matching full refund to every customer.

Under the repayment arrangements, cryptocurrency claims can involve cash components and a portion allocated to BTC/BCH. Eligible creditors could choose cryptocurrency delivery through designated exchanges or cash proceeds from sales for that portion. A yen calculation base is not the market value of coins actually delivered. Amounts depend on allowed claims, elections, the plan and available assets.

[6] [10] [9]

Actual repayments and the role of other exchanges

The trustee confirmed BTC/BCH repayments to some creditors on 2024-07-05. Kraken's operator Payward had already been selected in 2014 to support the insolvency process. Bitstamp's dated announcement records receipt of BTC/BCH on 2024-07-24 and distribution beginning the next day, with separate timing for UK customers. These are historical operational roles, not recommendations to use either platform.

Transfer to a designated exchange, allocation to a creditor account and the creditor's ability to withdraw are distinct stages. Agency receipt arrangements and account checks form part of delivery. An exchange's completion of its own tranche does not establish that every Mt. Gox creditor or every type of claim has been paid.

[13] [16] [17]

The public repayment status at the review date

The 2025-03-27 notice reported BTC/BCH repayments to over 19,500 rehabilitation creditors. It also confirmed cash payments from BTC/BCH sales to some eligible creditors. That recipient count belongs to that notice; it is not a newly measured total for 2026-10-04.

The 2025-10-27 notice extended the Base, Early Lump-Sum and Intermediate deadline to 2026-10-31, Japan Standard Time, with court permission. It said those repayments were largely completed for creditors with completed procedures and no issues, except certain repayment types; many others remained unpaid. The public index reviewed at 2026-10-04 showed no later replacement repayment deadline.

[14] [15] [1]

What the public evidence does not establish

The notices reviewed do not supply a current, reconciled aggregate of BTC/BCH delivered, coins still awaiting distribution and all unresolved claim balances. We therefore give no invented percentage of completion or current remaining coin total. The historical holdings table and recipient count cannot fill that gap.

A blockchain movement is evidence of a transaction, not by itself of a sale, the beneficial owner or final payment to a creditor. The trustee's 2024-05-28 notice explicitly distinguished preparations from cryptocurrency delivery and sales for repayment at that time. Wallet labels and market commentary cannot replace the trustee's accounting.

[14] [12]

An illustrative customer with 10 BTC

Customer A saw 10 BTC in the account before the halt. After withdrawals stopped, A could not sign a transfer from the exchange's wallets. In the legal process, A needed an allowed claim and the required identity, account and repayment registrations. This is an educational example, not a real creditor's statement.

If an allowed BTC claim were 10 BTC, applying the plan's BTC calculation rate of 749,318.83 JPY gives 7,493,188.30 JPY as its BTC calculation base. This excludes any BCH or fiat claim and is neither a cash promise nor a statement that 10 BTC remained available. Base deductions, the chosen route and cash/coin allocation still matter. The 21% rate applies to the eligible remaining yen balance, not directly to 10 BTC.

A might ultimately receive BTC/BCH through a designated platform and cash through the applicable payment channel, or sale proceeds for the cryptocurrency portion, according to the election and rules. Actual net amounts can reflect applicable fees and account conditions. Today's BTC price cannot turn a recognized claim into an automatic return of the original 10 BTC.

[9] [10]

Market price, legal value and opportunity cost

The table gives historical USD reference prices, not Mt. Gox execution prices. Legal conversion rates, the market value of received assets and the hypothetical value of an inaccessible original holding answer different questions. A creditor may receive more fiat value than the 2014 deposit while recovering fewer BTC and losing years of access. Opportunity cost depends on an unobservable alternative path; it is not automatically an additional payable claim.

Source: archived Coin Metrics Community PriceUSD observations, UTC daily reference convention. Values are rounded to two decimals; the underlying observations are retained. No live price or creditor-specific return is implied.

[26]

Criminal proceedings: keep the findings separate

Reuters reported that the Tokyo District Court in March 2019 convicted Mark Karpelès of data manipulation, imposed a 2½-year sentence suspended for four years and acquitted him of embezzlement. That reported judgment is not a finding that he personally stole all missing Bitcoin. We rely on the court reporting here, not an independently inspected complete Japanese criminal judgment.

The US Department of Justice's 2023 announcement charged Alexey Bilyuchenko and Aleksandr Verner with conspiring to launder approximately 647,000 BTC connected to alleged Mt. Gox theft. The indictment's allegations are not convictions and do not simply reclassify the initial 850,000 BTC estimate. Alexander Vinnik's 2024 guilty plea concerned the separate BTC-e money-laundering conspiracy; it does not establish that he stole every missing Mt. Gox coin.

[20] [18] [19]

A theft mechanism and the conditions that enabled damage

Unauthorized signing or wallet access can remove assets directly. Weak reconciliation, excessive privileges, poor change controls, inadequate separation of hot and cold operations and delayed incident response can allow a deficit to persist. These are control mechanisms explaining how harm can accumulate, not a claim that every proposed weakness has been proved in Mt. Gox's case. Banking restrictions affect access to fiat; they are a different risk from lost private-key control.

Where custody changes the risk

An exchange offers trading, liquidity and convenience while making access dependent on an operator. Self-custody removes that signing dependency but puts recovery and transaction decisions on the user. No storage method is always superior; purpose, capability, legal arrangements and the amount exposed matter.

A practical checklist before leaving assets with a platform

Proof of Reserves can provide evidence about specified assets at a time. It does not alone establish complete liabilities, unencumbered ownership, liquidity or legal protection in insolvency. Read the scope and method, including what was excluded. A customer's strong password cannot repair the operator's missing assets.

The enduring lesson

Mt. Gox combined technical, operational, financial and legal risks. After failure, customers depended on the assets that remained, recognition of their claims and a distribution process lasting years. Asset diversification does not necessarily diversify custody if all holdings depend on the same operator.

Know who can sign, where the backing assets are, what legal right the account gives you and what happens if access stops. An attractive balance is only one part of that picture. Self-custody changes the responsibilities; centralized custody changes the dependency. Neither choice eliminates the need for operational discipline.

Evidence and method

Trustee notices support estate figures, dates and procedural status. The amended plan explains calculation mechanics; criminal allegations come from the DOJ, while the Karpelès outcome is attributed to Reuters reporting. Contemporary reporting supplies early history. We distinguish each source's date from the current review date and do not treat market reconstructions as court findings.

[1] [9] [18]