Lawsuit Accuses Xapo, Indodax of Negligently Holding Stolen Bitcoin
A crypto trader is trying to seize nearly 500 bitcoins from exchanges Xapo and Indodax through a new lawsuit that accuses the two crypto exchanges of harboring his stolen funds.

A crypto trader is trying to seize nearly 500 bitcoins from Xapo and Indodax through a new lawsuit that accuses the two crypto exchanges of harboring his stolen funds.
Plaintiff Dennis Nowak, a German resident, and his counsel, longtime crypto lawyer David Silver, filed their demand for jury trial Monday in the U.S. District Court for the Northern District of California. They alleged the exchanges aided and abetted an unnamed thief who they claimed stole 500 bitcoins from Nowak and the exchanges remain in possession of the funds.
The suit accused Xapo and Indodax of aiding and abetting unauthorized access of a computer in violation of federal code. It also alleged they unlawfully assisted that access and are in possession of stolen property, which are violations of California code.
The suit said Xapo and Indodax “knew” their know-your-customer and anti money laundering policies “were inadequate” and have permitted, “whether intentionally or not” criminal activity to persist.
Xapo did not immediately respond to a request for comment.
Nowak sought the return of his “stolen personal property” and additional relief, according to the suit. His bitcoin was worth about $2,300,000 at the time of the theft, the suit said.
Nowak’s bitcoins appeared to have fled his account almost as soon as he had deposited it. According to the suit, Nowak deposited 500 BTC at his unnamed U.S.-based exchange on Nov. 20, 2018. “John Doe” had taken all 500 of it by 4 p.m. on Nov. 23.
Plaintiff claimed his bitcoins followed a handful of relatively transparent steps over to Xapo and Indodax. Investigations firm Kroll, who traced the transaction, found “no obvious attempts” to hide their path, according to the suit.
The suit alleged Xapo held 19.99 BTC and Indodax held 479.69 BTC of Nowak’s original 500.
Silver, the lawyer, declined to elaborate on the original hack beyond what is alleged in the suit. In an email statement he said the ensuing investigation related to his work representing victims of SIM swapping.
More For You
Protocol Research: GoPlus Security

What to know:
- As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
- GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
- Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.
More For You
Coinbase Sees Crypto Recovery Ahead as Liquidity Improves and Fed Rate Cut Odds Climb

The crypto exchange also took note of a so-called AI bubble that continues to go strong and a weaker U.S. dollar.
What to know:
- Coinbase Institutional is seeing a potential December recovery in crypto, citing improving liquidity and a shift in macroeconomic conditions that could favor risk assets like bitcoin.
- The firm's optimism is driven by rising odds of Federal Reserve rate cuts, with markets pricing in a 93% chance easing next week, and improving liquidity conditions.
- Several recent institutional developments, including Vanguard's crypto ETF policy reversal and Bank of America's greenlighting of crypto allocations, have contributed to bitcoin's rebound from recent lows.











