"Bitcoin" is layered. The base protocol is the consensus rules that every node checks: valid signatures, no double spends, correct proof of work, the issuance schedule. Exchanges, custodial wallets and web services sit on top of that and are ordinary software companies with servers, logins and customer databases, exactly the things that get breached in any industry.
Media headlines about a Bitcoin exchange being "hacked" describe a company losing customer funds it held, not a flaw in the protocol. Mt. Gox, various exchange breaches, and phishing scams against individuals all fall in this category. The user's own mistakes, reused passwords, fake wallet apps, phishing links, malware that swaps a clipboard address, are a separate and very common failure mode that has nothing to do with the protocol's soundness.
The protocol itself has had real bugs. In August 2010 an integer overflow let someone create 184 billion bitcoin in a single transaction; developers patched it and the chain was rolled back within hours, an event now called 'value overflow incident'. In September 2018, CVE-2018-17144 was a bug in Bitcoin Core that could have allowed a miner to crash nodes or, in principle, create coins from nothing; it was privately reported and fixed before it was exploited. Both cases show a functioning process: a defect was found, disclosed, patched and adopted, rather than proof that the system is unhackable by design.
Explain more simply
"Bitcoin got hacked" almost always means an exchange, an app or a person got hacked, not the Bitcoin network itself.
The rules that run Bitcoin have held up since 2009. What fails is usually a company holding coins for someone, or someone's own device.
Real-world analogy
It is like a bank vault built to a public blueprint that anyone can inspect, sitting inside a building whose front-desk staff can still be tricked. The vault has held; front desks sometimes have not.
Key facts
- The Bitcoin consensus protocol has never been broken to steal or create coins outside its rules since 2009.
- Most 'Bitcoin hacks' reported in the news are breaches of exchanges, wallets or individuals, not the protocol.
- Two protocol-level bugs (2010 overflow, CVE-2018-17144) were found and patched before or shortly after being noticed, without lasting loss.
Common misconception
“Bitcoin exchanges getting hacked proves Bitcoin itself is insecure.”
An exchange is a company that custodies coins for customers; its security depends on its own servers and practices, not on Bitcoin's protocol. Self-custody removes that specific risk but introduces the responsibility of securing your own keys.[1]
Go deeper
A '51% attack' means someone controls a majority of mining power and can reorganise recent blocks to double-spend their own coins or censor transactions. This has happened on smaller proof-of-work chains, but Bitcoin's total hash rate makes it extremely costly to attempt, and even a successful attacker cannot change the rules, create coins out of thin air, or steal coins from addresses they do not control, the attack only lets them rewrite very recent history involving their own transactions.
Because every rule change requires broad voluntary adoption by node operators, an attacker who tried to alter the 21 million supply cap or steal arbitrary funds would just be running a fork that other nodes reject, not 'hacking Bitcoin'.
Quick check
Answer every question correctly (100%) to complete this lesson.
1.When news reports say 'a Bitcoin exchange was hacked', what usually happened?
2.What can a successful 51% attacker NOT do?
Counts towards your streak in this browser.
Extra exam questions
Every question here counts towards your accuracy, XP and rank. No guessing: every answer is explained.
Quick check
Answer every question correctly (100%) to complete this lesson.
1.Has the core Bitcoin protocol ever been successfully 'hacked' to create coins out of thin air?
2.What is commonly confused with 'Bitcoin being hacked' in media reports?
3.What is a '51% attack'?
4.Why is a 51% attack on Bitcoin considered extremely costly to sustain?
5.Can a 51% attacker steal bitcoin from any wallet they don't control the keys to?
6.What is the most common way individuals actually lose bitcoin to theft?
7.What cryptographic technology secures Bitcoin transaction signatures?
8.What theoretical future threat is sometimes raised regarding Bitcoin's cryptography?
Counts towards your streak in this browser.
Sources
- Bitcoin: A Peer-to-Peer Electronic Cash System (2008), Satoshi Nakamoto
The original nine-page proposal. Describes proof of work, timestamping and the incentive model.
- Bitcoin Core documentation, Bitcoin Core project
Reference implementation documentation, including validation and release notes.