Study: between Bitcoin's creation in 2009 and March 2015, 33% of all Bitcoin exchanges were hacked, and 48% closed
When hackers penetrated a secure authentication system at a bitcoin exchange called Bitfinex earlier this month, they stole about $70 million worth of the virtual currency.
Context & Ripple Effects
This study put hard numbers on a failure mode the market had been living through: between Bitcoin's creation in 2009 and March 2015, a third of all Bitcoin exchanges were hacked and nearly half shut down entirely. It landed just weeks after Bitfinex's August breach, in which attackers got through the exchange's authentication system and made off with roughly $70 million in bitcoin — an incident that knocked the currency down almost 20% and showed the study's statistics were not history.
The corpus since then reads as the same pattern compounding at scale: CipherTrace counted over $1.7B stolen from exchanges and investors in 2018 alone, Binance had to tap its user-protection fund after losing 7,000 bitcoins to hackers who grabbed API keys and 2FA codes, and Chainalysis measured hack value up ~84% year-over-year to $1.58B in the first seven months of 2024.
First-order effects
- Exchanges operating at the time faced immediate proof that compromise was the base rate, not the exception — with Bitfinex's loss showing even authentication-layer defenses fail, and its users bearing the direct hit.
- Bitcoin's price absorbed the shock directly, dropping almost 20% on the Bitfinex news, so every exchange hack is also a market-wide liquidity event.
Second-order effects
- Operators responded by building loss-absorption mechanisms rather than preventing losses outright — Binance's Secure Asset Fund for Users, deployed to cover its $41M theft, turned insurance into a competitive feature.
- Security economics shifted toward tracking and disclosure firms: CipherTrace and Chainalysis built businesses quantifying stolen funds, giving regulators and insurers the data they lacked when this study was written.
Third-order effects
- If half of early exchanges closed and hack values keep scaling with prices, the durable structure is consolidation around a few capitalized platforms that can self-insure — pushing smaller venues out and concentrating custody risk.
- The persistent gap between crypto's scale and its security record feeds the broader legitimacy problem: each headline breach gives regulators a concrete case for imposing traditional financial-controls standards on exchanges.
The trend: Crypto exchange security has scaled from a per-exchange survival problem in Bitcoin's first six years into a systemic, price-correlated risk that now drives insurance funds, analytics firms, and regulatory attention.