Episode

EP 9 — The Rise and Fall of Mt. Gox

15 December 2017 Official episode · Official transcript

bitcoin cybercrime

The episode examines the technical failures, breaches, thefts, software errors, and bankruptcy of the Mt. Gox Bitcoin exchange.

Topics: Bitcoin exchange security, Blockchain transaction analysis, Hot and cold wallet storage, XML injection, API parameter manipulation, Missing input validation, Password hash brute-forcing, Administrative account compromise, Database tampering, Account-balance manipulation, Long-term cryptocurrency theft, Unspendable wallet addresses, Trading bots, Exchange insolvency, Cryptocurrency exchange audits

Official episode-page sources

Links published on the Darknet Diaries episode page. Not LLM output.

No Sources heading on this episode page.

Entities (29)

Claims (16)

Qualified statements from this episode, not graph facts.

Bitcoin ASSOCIATED_WITH Blockchain

Jack explains that the blockchain is the public record storing all Bitcoin transactions.

Explicit Confidence 99% · Jack Rhysider EP 9 Details

“The blockchain is the public record that stores all Bitcoin transactions.”

Jack Rhysider · offsets 4205–4278

Mt. Gox DEVELOPED_BY Jed McCaleb

Jed McCaleb reused the mtgox.com domain to start Mt. Gox and personally created the site from scratch.

Explicit Confidence 99% · Jack Rhysider EP 9 Details

“Jed McCaleb took an interest in Bitcoin and he had an old domain lying around called mtgox.com”

Jack Rhysider · offsets 2079–2173

“He was a web developer and personally created the site from scratch.”

Jack Rhysider · offsets 6991–7059

Jed McCaleb MEMBER_OF Mt. Gox

Jed was likely the person running Mt. Gox at the time, though Jack presents this as likely rather than certain.

Uncertain Confidence 82% · Jack Rhysider EP 9 Details

“Which was likely ran by a single person at the time, Jed McCaleb.”

Jack Rhysider · offsets 6924–6989

Mt. Gox USES Liberty Reserve

Mt. Gox used Liberty Reserve to transfer money between users through a service tied to its back end.

Explicit Confidence 99% · Jack Rhysider EP 9 Details

“Liberty Reserve was a company Mt. Gox used to transfer money from one person to another.”

Jack Rhysider · offsets 7176–7264

Mt. Gox USES Mt. Gox hot wallet

Mt. Gox used a hot wallet on its servers for daily operational trades.

Explicit Confidence 99% · Jack Rhysider EP 9 Details

“The hot wallet is a Bitcoin wallet Mt. Gox used to conduct daily operational trades.”

Jack Rhysider · offsets 8721–8805

Mt. Gox USES Mt. Gox cold wallet

Mt. Gox kept some Bitcoin in an offline cold wallet in a safer location.

Explicit Confidence 96% · Jack Rhysider EP 9 Details

“This differs from a cold wallet, which was not stored on the Mt. Gox servers but in another location in a much safer place.”

Jack Rhysider · offsets 8807–8930

Mt. Gox hot-wallet theft COMPROMISES Mt. Gox hot wallet

Someone with access to the system stole Mt. Gox's hot-wallet file and then moved the Bitcoin to another wallet.

Explicit Confidence 99% · Kim Nilsson EP 9 Details

“The hot wallet, wallet.dat got stolen by someone with access to the system.”

Kim Nilsson · offsets 15876–15951

Mt. Gox hot-wallet theft INVOLVES Bitcoin

The hot-wallet theft siphoned approximately 650,000 Bitcoins from Mt. Gox.

Explicit Confidence 99% · Jack Rhysider EP 9 Details

“the thief had been able to siphon 650,000 Bitcoins from Mt. Gox.”

Jack Rhysider · offsets 16486–16550

Virtual machine wallet loss INVOLVES Bitomat

Bitomat accidentally destroyed its Bitcoin holdings after a wallet in a virtual machine was apparently wiped.

Explicit Confidence 98% · Kim Nilsson EP 9 Details

“there was this other exchange in Poland called Bitomat that accidentally destroyed their own Bitcoin holdings.”

Kim Nilsson · offsets 13560–13670

Unspendable Bitcoin address bug AFFECTS Bitcoin

A programming error caused withdrawals to be sent to unspendable Bitcoin addresses, effectively destroying the coins.

Explicit Confidence 99% · Kim Nilsson EP 9 Details

“That meant that a number of withdrawals actually sent Bitcoins to unspendable addresses, which is the same as destroying Bitcoins.”

Kim Nilsson · offsets 18848–18978

Mark Karpelès MEMBER_OF Mt. Gox

Mark Karpelès took over ownership and ran Mt. Gox from Tokyo.

Explicit Confidence 99% · Jack Rhysider EP 9 Details

“Mark Karpelès is now running Mt. Gox from Tokyo, Japan. All ownership is now transferred to him”

Jack Rhysider · offsets 9855–9951

Mark Karpelès USES Willy Bot

Mark was running an internal trading bot called Willy Bot.

Explicit Confidence 99% · Jack Rhysider EP 9 Details

“This trading bot he was running was called the Willy Bot”

Jack Rhysider · offsets 21772–21828

Mt. Gox ASSOCIATED_WITH CoinLab

Mt. Gox agreed to use CoinLab to handle North American transactions, but the arrangement later resulted in a breach-of-contract lawsuit.

Explicit Confidence 99% · Jack Rhysider EP 9 Details

“Mt. Gox wanted to expand into the US so it agreed to use a company called CoinLab to handle all North American transactions.”

Jack Rhysider · offsets 20432–20556

Mt. Gox shutdown and bankruptcy INVOLVES Mt. Gox

The incident is the shutdown and bankruptcy of Mt. Gox after the exchange halted withdrawals and closed.

Explicit Confidence 99% · Jack Rhysider EP 9 Details

“a few weeks later Mt. Gox, the largest Bitcoin exchange on the market, shut down entirely.”

Jack Rhysider · offsets 22519–22609

Mt. Gox shutdown and bankruptcy INVOLVES Bitcoin

The bankruptcy filing stated that Mt. Gox had lost approximately 850,000 Bitcoins, later revised after another wallet was found.

Explicit Confidence 99% · Jack Rhysider EP 9 Details

“At the end of February Mt. Gox had filed for bankruptcy in Tokyo, stating they had lost 850,000 Bitcoins”

Jack Rhysider · offsets 22887–22991

Alex Vinnik ASSOCIATED_WITH Mt. Gox

Evidence showed Alex Vinnik had some Bitcoins stolen from Mt. Gox, but Jack explicitly cautions that this does not establish that Vinnik stole them; he was accused of laundering them.

Uncertain Confidence 97% · Jack Rhysider EP 9 Details

“evidence shows that he had some of the Bitcoins that were stolen from Mt. Gox. However, just because he had them doesn’t mean he stole them.”

Jack Rhysider · offsets 24051–24192

Transcript references

Works mentioned in the transcript. Distinct from show-note sources.

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-12T18:01:10.141319+00:00