Introduction
Has Bitcoin ever been hacked? Looking only at news headlines, it is easy to believe so. In 2013, as Bitcoin’s price fluctuated following the Mt. Gox security incident amid market overheating, CNBC ran a headline that plainly stated, “Bitcoin Hacked”. Reading just the title, one might assume the Bitcoin protocol itself had been breached. If the 2013 incident was a one-off security failure, the 2014 Mt. Gox crisis was closer to a total collapse. At the time, Mt. Gox was the world’s largest Bitcoin exchange, and approximately 850,000 BTC, including customer assets, vanished. This amounted to around $480 million at the time, representing roughly 7% of the total circulating supply. While many reports accurately described it as an “exchange bankruptcy” or “exchange hack,” the public simply internalized it as a “Bitcoin hack”. This narrative repeated itself in 2016 when another major exchange, Bitfinex, saw roughly 120,000 BTC stolen.
However, what was breached in these incidents was not the Bitcoin network, but the servers of centralized exchanges. Exchanges are private companies that pool and store users’ bitcoins on centralized servers. To use an analogy, a depository holding gold belonging to multiple people was robbed; the fundamental properties of gold itself were not compromised. Hackers exploited vulnerabilities in corporate security systems, specifically server management and internal controls, not Bitcoin’s cryptographic architecture.
The Bitcoin network itself has not been hacked a single time since its launch on January 3, 2009. It is worth reflecting on what this means. For over 16 years, the Bitcoin network has generated a block every 10 minutes without fail. The value of the assets secured on this network has reached a market capitalization of approximately $1.6 trillion (as of May 2026). For anyone capable of breaking this network’s cryptography, the potential reward would be immense. Despite huge incentives for countless attackers, ranging from independent hackers and research institutions to state-level actors, the system has never been breached.
But does this robustness have an expiration date? This is a valid question because Bitcoin’s defenses rest entirely on a single premise: that the mathematics underpinning its security remain unbroken. If that math is broken, a 16-year flawless track record offers no guarantees.
Read the full report (PDF)
