Edit Content
Submit Case
Submit Case
Edit Content
Submit Case
Submit Case

What Percentage of Lost Bitcoin Might be Recoverable?

News
6 min read

What Percentage of Lost Bitcoin is Recoverable?

Digital forensics firm Chainalysis.com made waves in 2017 when it claimed that nearly 4 million (somewhere between 2.78 – 3.79 million) bitcoin were lost forever.  In 2018 Unchained Capital, a Bitcoin financial services company, attempted to calculate the number of lost Bitcoin using a different methodology.  They came up with a similar number of lost Bitcoin.

Given that there’s no definite way to determine whether the private key for Bitcoin held at a particular address is lost, or whether its owner is simply holding that Bitcoin for future use, these analyses turn on the assumption that a certain percentage of Bitcoin that hasn’t been moved in years is controlled by private keys that have been lost.

This study provides an estimate for a related, but different question: Let’s take as a given that around 20% of all Bitcoin is lost — what percentage of that Bitcoin might be recoverable, if its owners were motivated to find it, and if they followed best practices in their search?

We estimate that about 2.45% of lost Bitcoin is recoverable.  Using Chainalysis’ estimate, this gives us a range of between 68,110 and 92,855 Bitcoin that are recoverable. At current prices (a Bitcoin is worth approximately $41,500 as of April 20, 2022) this suggests that between USD $3 – 3.9 billion in Bitcoin is recoverable.

Doesn’t Simple Math Guarantee that Once a Bitcoin Private Key is Lost it’s Gone Forever?

A Bitcoin private key is simply a number between 1 and 2256.  As Bitcoin.com put it: “even the world’s fastest supercomputer… would effectively take forever to break just one wallet”.

So, if the private key is lost, isn’t it impossible for all practical purposes to recover it?

The answer depends on whether the record of the private key has been destroyed — or whether it has simply been misplaced or encrypted.

For example, in 2013 Butterfly Labs, a now-defunct company making Bitcoin mining devices, sent on to Wired magazine in hopes that the company would write a review.  Wired editors configured the device and eventually used it to mine just over 13 Bitcoin (you can see them on the blockchain here).  Wired then intentionally destroyed the private key, thinking that if they owner Bitcoin, it might introduce a bias into their reporting.  Assuming that no one copied the private key before it was destroyed (which seems reasonable, given that the funds have not been moved in more than 7 years), it is impossible (given today’s technology) to recover those funds.  They are permanently and irretrievable lost.

Consider, however, the case of a block of 50 Bitcoin that was mined on February 9, 2009, within the first month of the Bitcoin network.  Those Bitcoin sat unmoving until May 20, 2020, when they were moved to a different wallet.  Those Bitcoin would almost certainly have been considered “lost” in Chainalysis’ analysis.  No one has claimed responsibility for the move (which was worth around $450,000 at the time) so we don’t know exactly what happened.  But, it’s certainly possible that an early miner found an old hard drive and retrieved a wallet previously believed to be lost.

Consider, also, the much smaller case of Stephen Kaufman, who lost the password to a wallet containing 1.8 Bitcoin. He used a non-custodial wallet company called Blockchain.com, which makes it possible to download a wallet backup (essentially an encrypted version of his private key).  After providing CryptoAssetRecovery.com with a series of password guesses, we were able to find the password that decrypted his wallet backup, and allowed him to regain access to his funds.

What about Satoshi’s Bitcoin?

Satoshi Nakamoto, the anonymous creator of Bitcoin, is believed to have mined around 1.1 million Bitcoin in the first 7 months of the Bitcoin network’s creation. There are several explanations as to why Satoshi has not spent his / her / its Bitcoin, including the possibility that Satoshi is dead, doesn’t want to be identified, or that the private keys are lost.

No matter the explanation, it seems unlikely that these 1.1 million Bitcoin are likely to re-enter the money supply, and so in this analysis (like those of Chainalysis and Unchained Capital) we will assume that they are permanently lost, beyond the possibility of recovery.

The Use of Burn Wallets

Burning is used in different cryptocurrencies to accomplish a number of different goals.  In January 2014 a group of developers and backers of the token Counterparty burned 2,140 Bitcoin.  This was a mechanism to distribute Counterparty’s own token XCP, and you can read more about their thinking here.

Counterparty’s burn is the largest documented Bitcoin burn, but until 2018 the website BitcoinWhosWho.com tracked known burn addresses, and determined that around 2,761 Bitcoin have been burned to date.

What Type of Lost Bitcoin is Potentially Recoverable?

On May 4, 2011, SgtSpike, a user on BitcoinTalk.org, proposed a new post called: Let’s add up the KNOWN lost bitcoins.  He proposed: “If you’ve lost bitcoins (i.e. they’re gone forever, completely unrecoverable), post how much you lost, and add it to the running tally.”

Users contributed to that thread as recently as March 2021.  Like many forums, it’s a messy thread, and at some point in 2018 users stopped any sense of continuing with SgtSpike’s original intent of keeping a credible tally of lost Bitcoin.

However, the thread gives lots of examples of Bitcoin that is lost forever, and of Bitcoin that is potentially recoverable.

On the “lost forever” front are stories of

  • corrupted hard drives containing private keys that were overwritten and formatted multiple times
  • hard drives thrown away years before anyone realized that Bitcoin might become valuable
  • software errors caused by user misunderstandings or bugs in early versions of wallets
  • coins intentionally sent to burn wallets
  • amounts lost that were so small that even at today’s valuations you would make pennies an hour trying to recover them.

The stories of “potentially recoverable” tokens fall into essentially two camps:

  • People who had encrypted private keys, but they weren’t able to find the correct password.
  • People that had failed hard drives with private keys on them.

Generating an Estimate of the Lost Bitcoin that are Still Recoverable

In the Bitcointalk.org thread mentioned above, 72 forum posts report losing at least .5 Bitcoin.  (We have ignored losses smaller than .5 Bitcoin in this analysis). The largest of these (that we could document independently) was the loss of 17,000 Bitcoin by crypto exchange Bitomat.pl which lost its wallet file when an Amazon Web Services instance was rebooted.

Of those 72 posts, we determined that 10 are potentially recoverable — that is, they list either failed hard drives (where they don’t specify that the hard drives are lost or formatted) or people with encrypted private keys.

Taking this as a sample of all lost Bitcoin, it appears that about 14% of lost Bitcoin is potentially recoverable.  We then apply two further discounts to this estimate:

  • The probability that a lost hard drive has been discarded, and is therefore lost forever.  We estimate that 50% of these are drives have been discarded in the meantime.  Given that Bitcoin has appreciated quickly, it seems reasonable that many people holding substantial amounts of Bitcoin have kept old hard drives.
  • An estimate of the probability of recovering either a lost password or a wallet backup on a problematic hard drive.  We know from our own work recovering wallets that with motivated holders of Bitcoin willing to share a wide range of password guesses, that we can decrypt about 35% of passwords.

This means that about 2.45% of lost Bitcoin is likely recoverable.

You may also like

Secure Your Wallet: A Guide to Safe DeFi Airdrops

Cryptocurrency Wallets: Weighing the Convenience and Security of Hot, Cold, Custodial and Non-Custodial Options

Metamask vs Coinbase Wallet

What are Cross Chain Transactions and How do You Recover Them?

Get Help From Our Experts

Click the button below to get started.

Submit Your Case
Frequently Asked Questions

What is cyber security?

Cyber security is a term used to describe the protection of electronic and computer networks, programs and data against unauthorized access. Maintaining a high standard of security is essential to protect critical systems and data against cyber-attacks. The sophistication, persistence and continuous evolution of cyber threats means organizations are finding it increasingly challenging to defend against them. This makes it essential to approach cyber security as a continuous journey, involving regular assessments and appropriate investment in people, processes and technologies to mitigate the risk.

What are cyber security services?

Cyber security services are specialized engagements designed to enable organizations to manage and mitigate the risk and impact of cyberattacks. Kroll’s cyber security services are designed to help organizations protect, detect and respond. The right mix of cyber security services, including advisory services, proactive assessments, managed detection and response, incident response and breach notification, ensures that organizations are able to defend against threats on endpoints, across the surface web and throughout the deep and dark web.

What are the 3 pillars of information security?

Infosec, or information security, forms a critical part of cyber security because it helps to protect online data from authorized access or use. The three pillars of infosec, Confidentiality, Integrity and Availability, often referred to as the CIA triad, are foundational principles for maintaining a robust level of security. Confidentiality involves checking whether your systems are protected from external, authorized access. Integrity entails ensuring that data has not been tampered with and is correct and trustworthy, while availability involves checking that networks, systems and applications are operational and ready for use when required.

Where to start with cyber security?

An effective starting point for effective cyber security is to assess your current cyber security posture. Look at which of your systems, networks and data are secure and which are vulnerable. Consider using external providers to undertake assessments such as penetration testing to gain a complete picture. Uncovering potential vulnerabilities will then allow you to start developing an effective cyber security policy and strategy. Again, expert support with this will ensure that your cyber security approach is effective and robust.

What is asset recovery?

Asset recovery involves the confiscation of illicit assets, usually the proceeds of crime, and the return of these assets to the legitimate owner(s). Assets can take the form of money or other items of value, for example real estate, precious metals, investments such as shares, virtual assets such as cryptocurrencies, race horses, luxury goods, or an aeroplane. Asset recovery can be a purely domestic process when the funds have been hidden or invested in the jurisdiction where they were illegally obtained. It can also be international, when the funds have been sent to another jurisdiction. The process of asset recovery is complex but generally covers four basic phases: pre-investigation (verification of information), investigation (often including seizing/freezing assets and international cooperation to obtain intelligence or evidence), judicial proceedings (following which the court may issue a confiscation order for the assets), and disposal or return (where the assets are returned to the rightful owner).

Why is asset recovery important in preventing and combatting corruption?

First, for its deterrent effect. People are more likely to engage in corrupt behaviour if they are confident that – even if they are caught and convicted – they and their families will still be able to enjoy their illegally obtained wealth. Recovering illicit assets helps deter corruption by turning it into a higher-risk, lower-reward activity. Second, by convicting corrupt officials and recovering stolen assets, countries can also generate funds for development and strengthen their criminal justice system. The end results are stronger rule of law, integrity and trust in government.

What support do you offer in terms of actual cases?

Our asset recovery specialists work hand-in-hand with practitioners in our partner countries to tackle complex international financial crime cases. We are currently assisting with around 100 high-stakes cases across 20 countries.

Our assistance takes the form of advice in the following fields:

  • Intelligence gathering and analysis
  • Asset tracing
  • Financial profiling
  • Investigation and prosecution strategies
  • International cooperation and mutual legal assistance

Many of our experts are embedded in partner institutions, where they can provide closer support more efficiently and build the necessary relationships and trust.

Through our technical assistance and on-the-job coaching, we not only help to advance individual asset recovery cases but also develop skills and good practices among the practitioners we work with. That often leads to long-term reform processes to give practitioners the legal and institutional frameworks necessary to operate effectively.

While assisting with asset recovery cases, we help to identify and address gaps in national laws, policies and practices. Common challenges are:

  • Poorly developed processes for building and documenting cases
  • Lack of, inadequate, contradictory or unclear legal framework
  • Weak/inefficient international networks
  • Lack of domestic inter-agency cooperation
  • Infrastructure and technology deficits
  • Insufficient security of staff, documents and communications
  • Agencies lacking autonomy
What Our Customers Say About Us

Bettie Boyett

Excellent service, prompt responses, and the return of my password (in just two days!).

Scott W Hayes

"Keeping your information secure is their main focus..."

Marshall Weaver

They did a great job and had my funds recovered within a few days. Only downside is that it’s a little expensive.

Laura Stansberry

I would like to thank them. They worked so hard to recover my assets, over several months. I had nearly given up, but they persisted on my behalf, and they came through for me. I can't praise them enough, you can trust them with your crypto asset recovery.

Christina Douglas

They did a great job and had my account recovered within a few days. Only downside is that it’s a little expensive.

Michael

Overall excellent service They assist me in getting two of my wallets back. The team at Logan is really helpful, and I am really appreciative of their assistance. I have not used the wallets in more than four or five years, and when I returned, I essentially forgot and could not find everything. They were the only people who could have actually helped me! My life changed because of what they did; I lost everything, but now I have everything!

  • Created by security experts to empower individuals, firms, and nation-states to take charge and use modern tools and methods in fighting security threats. 
Get in Touch
Email Us Now
SERVICES
WALLETS WE RECOVER
Company

All Rights Reserved © 2011 – 2025 Aliance Consults Journalism.

This is a staging environment