BitForex Exit Scam · The $56.5M Empty Shell

I. What this exchange actually was

BitForex publicly described itself as headquartered in Hong Kong, a centralised crypto exchange founded around 2018, built around derivatives and altcoin spot markets, and at its peak it did place mid-table in the various volume league tables. But according to public reporting, BitForex had not appeared out of nowhere as a new venue — its predecessor was the older Bifu Wang exchange, relaunched under a new name and a new coat of paint.

That change of skin matters. When a venue has accumulated a bad record under one name and then reappears repackaged under another, that alone is worth a second look. In the years after the rename, on-chain observers and reporters repeatedly identified a serious wash-trading problem at BitForex: self-dealing across multiple accounts, cross-platform round-tripping, money circulating in and out of the same perimeter — inflating its reported volume and its apparent liquidity. In a bull market that kind of operation fools retail traders and listing-hungry projects alike. What it holds up is a hollow shell, and the shell is the first thing to fall once real money starts leaving.

II. Those few days in February 2024

The timeline below lists only the checkpoints that can be matched against a public record.

III. The signs were all there beforehand

What I most want you to take from the Verification Desk is not that some exchange ran off with the money, but that before it ran, the warning was already sitting in public information. Hold this case up against the eight red flags in Lesson Three and it lights up several of them at once:

• A change of skin (an extension of red flag 8). Renamed from Bifu Wang, with a negative record under the old name. One whois or Wayback lookup plus one search for the old name is enough to surface the connection.
• Sustained wash trading and fake liquidity. Self-dealing across multiple accounts leaves traces in on-chain and trade data, and observers had pointed at it long before. When a venue props itself up by trading against itself, the paper prosperity and the real reserves are two different things.
• No self-verifiable proof of reserves. It never offered anything like the Merkle-tree reserve attestations that let users check their own balance at the larger venues. That its hot-wallet holdings turned out to be lopsidedly stacked into one small coin (TRB) is precisely the evidence those reserves would not have survived being looked at.
• An ambiguous regulatory position. It claimed a Hong Kong headquarters, but it was not a licensed, compliant virtual asset trading platform — a point the regulator only confirmed retroactively, by way of the alert list, after the event.

Not one of those requires inside information. All of them are findable in the ten or fifteen minutes before you send money. The problem was never that the information could not be found. It is that nobody goes looking before the transfer.

IV. The withdrawal notice five months later

The story has a tail. According to public reporting, roughly five months after the shutdown, BitForex abruptly posted a statement on social media saying that withdrawals had reopened, explaining that assets had previously been unreachable because team members had been detained by police in mainland China.

But the statement sidestepped the only question that mattered: where the roughly $56.5 million of abnormal hot-wallet outflow actually went, who executed it, and whether users would get their money back in full — not a word. "The team was detained" can explain why a service was suspended. It cannot explain why the hot wallets were emptied. A platform unwilling to account for where the money went gives you no reason to treat it as trustworthy, however many withdrawal buttons it switches back on.

The practical advice for an ordinary user is blunt: do not send money back in because of a "withdrawals are open again" post, and do not trust any private message that wants you to pay a fee, pass a verification or make a deposit before you can recover old assets — a ring of secondary scams offering to "recover your funds" attaches itself to every collapsed exchange within days. Real recovery runs through a police report and the legal process, not through wiring the platform one more payment.

V. What the empty shell leaves behind

BitForex is not a great ship of the kind that gets written into financial history the way FTX was. It belongs to the other category — mid-sized, regulatory-grey, propped up by wash trading, the sort of small empty shell that turns up every few months. The damage these venues do to ordinary people is not remotely small: the barrier to entry is low, the name is unfamiliar, they never make a mainstream headline, and victims often cannot find anywhere to even state their case.

The lesson it leaves behind is the same one every wreck in this museum leaves: where your assets sit is decided in the ten minutes before you transfer, not in the recovery group chat afterwards. Put that checklist to work — check the app stores, check the domain age, check whether reserves can be self-verified, check the regulatory alert lists, check the on-chain reserves — and a venue like BitForex fails on nearly every line. For the more systematic version of how to pick a venue, see Archaeology · Lesson Two · Five selection criteria distilled from eight collapses.

The most dangerous thing about a venue like BitForex is that there is no way for you to verify whether its reserves exist at all — by the time you find out, the money is already in somebody else's wallet. The least effortful way to sidestep that class of risk is to start from a venue that puts its transparency on the surface: reserve attestations published on a regular cadence that let you check your own balance, a user protection fund, licences in several jurisdictions, and tens of millions of genuine app-store ratings.

Binance has published monthly proof of reserves since November 2022 (later upgraded to a zero-knowledge-proof scheme in which a user can verify that their own balance is included in the total), runs the SAFU user protection fund, and holds regulatory licences in multiple jurisdictions. None of that amounts to a guarantee of permanent safety, but set against an empty shell that will not even explain where the money went, there are far fewer risk signals to count. Whether to register is your own decision.