Lawsuit Accuses Xapo, Indodax of Negligently Holding Stolen Bitcoin

A crypto trader is trying to seize nearly 500 bitcoins from exchanges Xapo and Indodax through a new lawsuit that accuses the two crypto exchanges of harboring his stolen funds.

AccessTimeIconJun 4, 2020 at 9:28 p.m. UTC
Updated Sep 14, 2021 at 8:48 a.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global event for everything crypto, blockchain and Web3.Register Now

A crypto trader is trying to seize nearly 500 bitcoins from Xapo and Indodax through a new lawsuit that accuses the two crypto exchanges of harboring his stolen funds.

Plaintiff Dennis Nowak, a German resident, and his counsel, longtime crypto lawyer David Silver, filed their demand for jury trial Monday in the U.S. District Court for the Northern District of California. They alleged the exchanges aided and abetted an unnamed thief who they claimed stole 500 bitcoins from Nowak and the exchanges remain in possession of the funds. 

The suit accused Xapo and Indodax of aiding and abetting unauthorized access of a computer in violation of federal code. It also alleged they unlawfully assisted that access and are in possession of stolen property, which are violations of California code.

The suit said Xapo and Indodax “knew” their know-your-customer and anti money laundering policies “were inadequate” and have permitted, “whether intentionally or not” criminal activity to persist. 

Xapo did not immediately respond to a request for comment.

Nowak sought the return of his “stolen personal property” and additional relief, according to the suit. His bitcoin was worth about $2,300,000 at the time of the theft, the suit said.

Nowak’s bitcoins appeared to have fled his account almost as soon as he had deposited it. According to the suit, Nowak deposited 500 BTC at his unnamed U.S.-based exchange on Nov. 20, 2018. “John Doe” had taken all 500 of it by 4 p.m. on Nov. 23. 

Plaintiff claimed his bitcoins followed a handful of relatively transparent steps over to Xapo and Indodax. Investigations firm Kroll, who traced the transaction, found “no obvious attempts” to hide their path, according to the suit.  

The suit alleged Xapo held 19.99 BTC and Indodax held 479.69 BTC of Nowak’s original 500.

Silver, the lawyer, declined to elaborate on the original hack beyond what is alleged in the suit. In an email statement he said the ensuing investigation related to his work representing victims of SIM swapping. 


Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.

Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to to register and buy your pass now.