On April 9, 2018, as Bitcoin traded at $6,770 and the broader cryptocurrency market continued its months-long slide from December 2017 highs, a different kind of crisis was unfolding in New Delhi. Coinsecure, one of India’s largest cryptocurrency exchanges, discovered that 438 Bitcoin — worth approximately $3.5 million at the time — had vanished from its wallets. The exchange believed it was an inside job, and the chief security officer was the prime suspect.
TL;DR
- Coinsecure reported 438 BTC ($3.5M) missing from its wallets on April 9, 2018
- The exchange accused its own CSO, Dr. Amitabh Saxena, of orchestrating the theft
- CEO Mohit Kalra filed a First Information Report with Delhi police demanding Saxena’s passport be seized
- The funds disappeared during a Bitcoin Gold extraction process meant to distribute BTG to customers
- The incident occurred just days after India’s Reserve Bank banned banks from dealing with cryptocurrencies
- Venezuela simultaneously declared its Petro cryptocurrency legal tender, creating a stark global regulatory contrast
The Heist: 438 Bitcoin Gone Without a Trace
The disappearance was first reported on April 9, 2018, when Coinsecure’s Chief Security Officer Dr. Amitabh Saxena notified CEO Mohit Kalra that funds were missing from the exchange’s Bitcoin wallet. The timing was particularly damaging — the funds had supposedly vanished during a routine Bitcoin Gold extraction process, where the exchange was separating Bitcoin Gold (BTG) to distribute to its customers following the blockchain fork.
According to Coinsecure’s official statement, the company’s Bitcoin reserves were kept in a secure wallet to which only two people had access: CEO Mohit Kalra and CSO Dr. Amitabh Saxena. The exchange’s statement was blunt: Our Bitcoin funds have been exposed and seemed to have been siphoned out to an address that is outside our control.
The scale of the theft — 438 BTC valued at roughly $3.5 million — made it the largest cryptocurrency exchange heist in India at the time. While it paled in comparison to the infamous Mt. Gox breach, the Coinsecure incident exposed the same fundamental vulnerability: centralized exchanges holding customer funds with inadequate internal controls.
The Accusation: Insider Threat at the Highest Level
What made the Coinsecure case particularly striking was that the exchange publicly accused its own chief security officer. In the First Information Report filed with Delhi police on April 9, CEO Mohit Kalra stated that he believed Saxena had fabricated the story of an external attack to divert attention from his own involvement.
As the private keys are kept with Dr. Amitabh Saxena, we feel that he is making a false story to divert our attention and he might have a role to play in the entire incident, the FIR stated. Kalra further requested that Saxena’s passport be seized to prevent him from fleeing the country, noting that Saxena held an Indian passport.
The accusation was remarkable for its directness. In most exchange hacks, the perpetrators are anonymous external actors exploiting technical vulnerabilities. Here, the alleged thief was the person entrusted with the exchange’s highest level of security access. It was a powerful reminder that in cryptocurrency, the greatest security risk is often not a sophisticated external attacker but a trusted insider with access to private keys.
Law Enforcement Response and Investigation
Delhi police moved quickly in response to the FIR. According to the Economic Times of India, investigators seized Coinsecure’s servers to determine the full scope of the breach. They were checking whether additional wallets had been compromised and were calling in the exchange’s senior security officials for questioning.
Coinsecure attempted to reassure customers by stating that losses would be covered through the company’s personal funds. Whether the exchange had the resources to fully back this promise remained uncertain, particularly given that the theft represented a significant portion of its total reserves.
The RBI Ban: A Double Blow for Indian Crypto
The Coinsecure heist could not have come at a worse time for India’s cryptocurrency ecosystem. Just days earlier, the Reserve Bank of India had issued a directive banning all banks and regulated financial institutions from dealing with virtual currencies. The RBI ban effectively cut off the fiat on-ramps and off-ramps that Indian exchanges relied on to operate.
The combination of a major exchange theft and a central bank prohibition created a perfect storm of negative sentiment. For Coinsecure’s customers, the situation was particularly dire: not only had their funds been stolen, but the regulatory environment made it extremely difficult for them to move remaining assets to other platforms or convert them to fiat currency.
The thief would also face significant challenges converting the stolen Bitcoin to Indian rupees, given the RBI’s new restrictions on bank-crypto interactions. This regulatory barrier, while offering cold comfort to victims, at least complicated the laundering process for the stolen funds.
Venezuela’s Petro: The Regulatory Contrast
While India was cracking down on cryptocurrencies, Venezuela was moving in the opposite direction. In April 2018, the Venezuelan government declared its Petro cryptocurrency to be legal tender, making it the first state-backed digital currency to receive official legal status. The Petro was nominally backed by the country’s oil reserves, though independent verification of this backing proved difficult.
The juxtaposition was striking: on the same day that an Indian exchange was reeling from a multi-million dollar theft and the central bank was shutting down crypto-banking relationships, a sovereign nation was formally integrating cryptocurrency into its financial system. The divergent approaches highlighted the fundamental regulatory uncertainty that defined the global cryptocurrency landscape in 2018.
The Global Regulatory Landscape in April 2018
The Coinsecure incident and the contrasting Venezuelan approach occurred against a backdrop of intensifying global regulatory activity. Bloomberg had declared Bitcoin the biggest bubble in history on April 9, reflecting mainstream financial media’s increasingly skeptical posture. The Hangzhou city government in China had recently funded a $1.6 billion Global Blockchain Innovation Fund, signaling that while China was cracking down on cryptocurrency trading, it remained committed to blockchain technology development.
In the United States, the Alibabacoin Foundation faced a temporary restraining order after Alibaba accused the Dubai-based ICO of trademark infringement, illustrating how traditional legal frameworks were being tested by the new digital asset economy.
Market Context: A $261 Billion Ecosystem Under Pressure
The broader market provided little comfort. Total cryptocurrency market capitalization stood at approximately $261 billion on April 9, 2018. Bitcoin traded at $6,770 with a market cap of $114.9 billion and 24-hour volume of $4.9 billion. Ethereum held at $398 with a $39.3 billion market cap. The market was roughly 65% below its January peak, and negative headlines like the Coinsecure theft only reinforced the bearish narrative.
Why This Matters
The Coinsecure heist was more than just another exchange hack — it was a case study in the intersection of security, trust, and regulation that defined the 2018 cryptocurrency landscape. The alleged insider theft exposed the fundamental vulnerability of centralized custody in an ecosystem designed to eliminate the need for trusted intermediaries. The RBI ban, coming simultaneously, demonstrated how regulatory overreaction to security failures could compound harm to ordinary users. And the Venezuelan Petro experiment showed that governments themselves were not immune to the allure of cryptocurrency, even as they struggled to regulate it effectively. These tensions — between decentralization and custody, between regulation and innovation, between state control and financial freedom — would continue to shape the cryptocurrency industry for years to come.
Disclaimer: This article is for informational purposes only and does not constitute financial advice. Cryptocurrency markets are highly volatile. Always conduct your own research before making investment decisions.