This led Mt Gox to be operating “knowingly or unknowingly” at fractional reserve since at least 2012. According to the chart below, this left Mt Gox drained of bitcoin way before its filing of bankruptcy in February 2014.
Wizsec matched up most of the deposit/withdrawal log and was able to rule out that the deposits were made up while the bitcoins going in were real. Thus, this discrepancy was being caused by bitcoins that were “leaving without going through valid withdrawals.”
The theft had been ongoing since 2011 and many of the missing bitcoins were stolen straight out of Mt Gox’s hot wallet. A significant amount of the stolen bitcoins were deposited at various exchanges like BTC-e, Bitcoinica, Mt Gox itself, and other not yet identified wallets, and subsequently sold for cash.
-- Plotting Data between Expected and Actual bitcoins
Wizsec noticed a glaring recurring pattern while scouring through the data:
“MtGox bitcoins would suddenly get sent to a new non-MtGox address, without any withdrawal log entry, often in fairly recognizable amounts of a few hundred BTC at a time. Shortly afterwards, these addresses in turn would get gathered up into bigger addresses holding a few thousand BTC. From there, the coins would get deposited in chunks of some hundred BTC at a time onto various bitcoin exchanges.”
Mt Gox had been depleted of most of its bitcoin by 2013 according to a new report from Wizsec, the Tokyo based bitcoin security firm, which has been conducting an ongoing unofficial investigation into Mt Gox’s collapse.
"We believe that there is a high probability that these bitcoins were stolen as a result of an abuse of this bug. We are looking [at a] variety of causes including hacking by third parties."
The next step was to plot the difference between actual and expected Mt Gox bitcoin holdings. This showed that the bitcoins went continuously missing over time, but at a decelerating pace. According to Wizsec, the rate of loss in the chart below “seems unusually smooth.”
Scouring through over 2 million Mt Gox bitcoin addresses as the chart above shows, there was a “clear discrepancy” of hundreds of thousands of bitcoin between the actual and the expected holdings. Moreover, this discrepancy grew over time until by mid 2013 when almost all the bitcoins on Mt Gox were gone.
The new report concludes by stating the deposited Mt Gox coins were real, definitely stolen, and then sold for cash. This leaves it highly unlikely that any creditors will recover their bitcoins from Mt Gox. With no definitive answer as to who was behind the theft, Wizsec is continuing the investigation.
The report asks the question, “Were the missing Mt Gox bitcoins ever actually real?” In other words, did Mt Gox ever really hold any of the coins or were they faked deposit entries to make them look real.
A theory that emerges is that it was an inside job and the cold storage was compromised “either physically by someone with on-site access, or somehow electronically through some security flaw in the key generation process.”
Did you enjoy this article? You may also be interested in reading these ones:
When Mt. Gox filed for bankruptcy on February 28, 2014, the issued statement read in part:
The conclusion was obvious: intentional theft. Wizsec asks if the majority of the coins were kept in cold storage, then how did they leave Mt Gox?
Jiang Zhuoer: BTC.Top Will Support the Camp Favored by a Majority of Hash Power in the Bitcoin Cash Hash War
Jiang Zhuo’er and his BTC.TOP , a major Chinese mining pool, will not take side in the upcoming Bitcoin Cash’s hash war between two competing camps, Bitcoin ABC and Bitcoin SV. Zhuo’er shared h
F2Pool Will Support the Mining of BCHABC and BCHSV after Bitcoin Cash Hard Fork
F2Pool, the sixth largest bitcoin mining pool in the world, announced on Tuesday that it will allow miners to mine both coins generated from the upcoming Bitcoin Cash hard fork after the chain split
IBM Says Blockchain Can Power 'Open Scientific Research' in New Patent Filing
A patent application published Thursday claims the process of conducting scientific research can benefit from the blockchain.
Led by a team at IBM's Watson Research Center, the patent application p
CFTC Fines Bitcoin Trader $1.1 Million for Crypto Fraud
The U.S. Commodity Futures Trading Commission (CFTC) has jailed a bitcoin trader and fined him over $1 million for running a fraudulent bitcoin and litecoin scheme.
According to a press release iss
Japanese Firms Claim Success in Marine Insurance Blockchain Trial
One of Japan's largest insurance companies, Tokio Marine & Nichido Fire Insurance, and IT firm NTT DATA have completed a trial that put the paperwork for marine cargo insurance claims on a blockchain.
Accenture Puts Software License Management on a Blockchain Platform
Global professional services giant Accenture has rolled out a new software license management application built with tech from distributed ledger startup Digital Asset.
Accenture announced in a pre
Singapore's Central Bank, SGX Develop Blockchain Settlement System
The Monetary Authority of Singapore (MAS) and the country's stock exchange, Singapore Exchange (SGX), have developed a settlement system for tokenized assets that can work across different blockchains
Colorado Regulators Crack Down on Four More ICOs
Colorado regulators took action against four ICOs Thursday, bringing the state's total number of cease-and-desist orders against crypto startups to 12.
The state's "ICO Task Force" rebuked Bitcoin