The ongoing bankruptcy case of Celsius Networks has taken a controversial turn after a court filing revealed roughly 14,000 pages of customer usernames and trading histories. The 18.6-gigabyte document, first reported by Gizmodo, does not include full names, addresses, or financial provider details, but the crypto community fears that the exposed data could be easily combined with blockchain analysis tools to dox high-net-worth individuals.
“This is one of the most egregious privacy violations in crypto history,” a Twitter user wrote. “Many on this list may have their safety at risk. It’s more important than ever to maximize your digital security.” Another commenter noted the irony: “Typically, when you get doxxed you don’t get rugged. And when you get rugged, you don’t get doxxed. Celsius is a tier-1 sh** storm.”
The Filing: Transparency vs. Privacy
The filing contains usernames and trade data for a large subset of Celsius customers, as well as trades from executives Alex Mashinsky, Dan Leon, and Nuke Goldstein. While customer names are redacted, the U.S. bankruptcy court trustee William Harrington objected to earlier requests to fully conceal customer identities, arguing that the bankruptcy process must be “open and transparent.” He stated that Celsius needed to “demonstrate extraordinary circumstances and a compelling need to obtain protection to justify any such request.”
This stance has ignited debate over the balance between judicial transparency and individual privacy. Supporters of full disclosure claim that the public has a right to know the details of a multi-billion-dollar insolvency. Critics, however, point out that even redacted usernames can be linked to real-world identities through heuristic matching, social media cross-referencing, and on-chain analysis. This could expose wealthy traders to targeted attacks, extortion, or physical threats.
The leak comes on the heels of a previous security incident: on July 28, Celsius disclosed that a third party had gained unauthorized access to customer data. The new court filing further erodes trust in both the platform’s security measures and the legal system’s handling of sensitive data.
What Data Was Exposed?
Each record in the filing includes the username, the trading pair, the trade amount, and the timestamp. No cryptocurrency addresses or bank numbers are directly listed, but the combination of usernames and trade patterns can be enough to identify individuals. “A username alone is often enough — many people reuse the same handle across platforms,” said a blockchain security analyst. “Once you link the name to a wallet on chain, you can see all their holdings and transactions.”
As of now, Celsius has not issued a new statement regarding this specific filing. The company filed for Chapter 11 bankruptcy in July 2022 and is currently undergoing asset sales and liquidation proceedings.
The incident has prompted calls for better anonymization techniques in court filings, such as using zero-knowledge proofs or aggregated data summaries to protect user identities while still allowing judicial oversight. The Celsius case serves as a stark reminder that in the intersection of decentralized finance and traditional legal processes, user data privacy remains a critical and unresolved challenge.