Episode
EP 9 — The Rise and Fall of Mt. Gox
15 December 2017
Official episode
·
Official transcript
bitcoin
cybercrime
The episode examines the technical failures, breaches, thefts, software errors, and bankruptcy of the Mt. Gox Bitcoin exchange.
Topics: Bitcoin exchange security, Blockchain transaction analysis, Hot and cold wallet storage, XML injection, API parameter manipulation, Missing input validation, Password hash brute-forcing, Administrative account compromise, Database tampering, Account-balance manipulation, Long-term cryptocurrency theft, Unspendable wallet addresses, Trading bots, Exchange insolvency, Cryptocurrency exchange audits
Official episode-page sources
Links published on the Darknet Diaries episode page. Not LLM output.
No Sources heading on this episode page.
Entities (29)
Claims (16)
Qualified statements from this episode, not graph facts.
Bitcoin
ASSOCIATED_WITH
Blockchain
Jack explains that the blockchain is the public record storing all Bitcoin transactions.
Explicit
Confidence 99%
· Jack Rhysider
EP 9
Details
“The blockchain is the public record that stores all Bitcoin transactions.”
Jack Rhysider ·
offsets 4205–4278
Mt. Gox
DEVELOPED_BY
Jed McCaleb
Jed McCaleb reused the mtgox.com domain to start Mt. Gox and personally created the site from scratch.
Explicit
Confidence 99%
· Jack Rhysider
EP 9
Details
“Jed McCaleb took an interest in Bitcoin and he had an old domain lying around called mtgox.com”
Jack Rhysider ·
offsets 2079–2173
“He was a web developer and personally created the site from scratch.”
Jack Rhysider ·
offsets 6991–7059
Jed McCaleb
MEMBER_OF
Mt. Gox
Jed was likely the person running Mt. Gox at the time, though Jack presents this as likely rather than certain.
Uncertain
Confidence 82%
· Jack Rhysider
EP 9
Details
“Which was likely ran by a single person at the time, Jed McCaleb.”
Jack Rhysider ·
offsets 6924–6989
Mt. Gox
USES
Liberty Reserve
Mt. Gox used Liberty Reserve to transfer money between users through a service tied to its back end.
Explicit
Confidence 99%
· Jack Rhysider
EP 9
Details
“Liberty Reserve was a company Mt. Gox used to transfer money from one person to another.”
Jack Rhysider ·
offsets 7176–7264
Mt. Gox
USES
Mt. Gox hot wallet
Mt. Gox used a hot wallet on its servers for daily operational trades.
Explicit
Confidence 99%
· Jack Rhysider
EP 9
Details
“The hot wallet is a Bitcoin wallet Mt. Gox used to conduct daily operational trades.”
Jack Rhysider ·
offsets 8721–8805
Mt. Gox
USES
Mt. Gox cold wallet
Mt. Gox kept some Bitcoin in an offline cold wallet in a safer location.
Explicit
Confidence 96%
· Jack Rhysider
EP 9
Details
“This differs from a cold wallet, which was not stored on the Mt. Gox servers but in another location in a much safer place.”
Jack Rhysider ·
offsets 8807–8930
Mt. Gox hot-wallet theft
COMPROMISES
Mt. Gox hot wallet
Someone with access to the system stole Mt. Gox's hot-wallet file and then moved the Bitcoin to another wallet.
Explicit
Confidence 99%
· Kim Nilsson
EP 9
Details
“The hot wallet, wallet.dat got stolen by someone with access to the system.”
Kim Nilsson ·
offsets 15876–15951
Mt. Gox hot-wallet theft
INVOLVES
Bitcoin
The hot-wallet theft siphoned approximately 650,000 Bitcoins from Mt. Gox.
Explicit
Confidence 99%
· Jack Rhysider
EP 9
Details
“the thief had been able to siphon 650,000 Bitcoins from Mt. Gox.”
Jack Rhysider ·
offsets 16486–16550
Virtual machine wallet loss
INVOLVES
Bitomat
Bitomat accidentally destroyed its Bitcoin holdings after a wallet in a virtual machine was apparently wiped.
Explicit
Confidence 98%
· Kim Nilsson
EP 9
Details
“there was this other exchange in Poland called Bitomat that accidentally destroyed their own Bitcoin holdings.”
Kim Nilsson ·
offsets 13560–13670
Unspendable Bitcoin address bug
AFFECTS
Bitcoin
A programming error caused withdrawals to be sent to unspendable Bitcoin addresses, effectively destroying the coins.
Explicit
Confidence 99%
· Kim Nilsson
EP 9
Details
“That meant that a number of withdrawals actually sent Bitcoins to unspendable addresses, which is the same as destroying Bitcoins.”
Kim Nilsson ·
offsets 18848–18978
Mark Karpelès
MEMBER_OF
Mt. Gox
Mark Karpelès took over ownership and ran Mt. Gox from Tokyo.
Explicit
Confidence 99%
· Jack Rhysider
EP 9
Details
“Mark Karpelès is now running Mt. Gox from Tokyo, Japan. All ownership is now transferred to him”
Jack Rhysider ·
offsets 9855–9951
Mark Karpelès
USES
Willy Bot
Mark was running an internal trading bot called Willy Bot.
Explicit
Confidence 99%
· Jack Rhysider
EP 9
Details
“This trading bot he was running was called the Willy Bot”
Jack Rhysider ·
offsets 21772–21828
Mt. Gox
ASSOCIATED_WITH
CoinLab
Mt. Gox agreed to use CoinLab to handle North American transactions, but the arrangement later resulted in a breach-of-contract lawsuit.
Explicit
Confidence 99%
· Jack Rhysider
EP 9
Details
“Mt. Gox wanted to expand into the US so it agreed to use a company called CoinLab to handle all North American transactions.”
Jack Rhysider ·
offsets 20432–20556
Mt. Gox shutdown and bankruptcy
INVOLVES
Mt. Gox
The incident is the shutdown and bankruptcy of Mt. Gox after the exchange halted withdrawals and closed.
Explicit
Confidence 99%
· Jack Rhysider
EP 9
Details
“a few weeks later Mt. Gox, the largest Bitcoin exchange on the market, shut down entirely.”
Jack Rhysider ·
offsets 22519–22609
Mt. Gox shutdown and bankruptcy
INVOLVES
Bitcoin
The bankruptcy filing stated that Mt. Gox had lost approximately 850,000 Bitcoins, later revised after another wallet was found.
Explicit
Confidence 99%
· Jack Rhysider
EP 9
Details
“At the end of February Mt. Gox had filed for bankruptcy in Tokyo, stating they had lost 850,000 Bitcoins”
Jack Rhysider ·
offsets 22887–22991
Alex Vinnik
ASSOCIATED_WITH
Mt. Gox
Evidence showed Alex Vinnik had some Bitcoins stolen from Mt. Gox, but Jack explicitly cautions that this does not establish that Vinnik stole them; he was accused of laundering them.
Uncertain
Confidence 97%
· Jack Rhysider
EP 9
Details
“evidence shows that he had some of the Bitcoins that were stolen from Mt. Gox. However, just because he had them doesn’t mean he stole them.”
Jack Rhysider ·
offsets 24051–24192
Transcript references
Works mentioned in the transcript. Distinct from show-note sources.
Extraction provenance
Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19
· 2026-09-12T18:01:10.141319+00:00