The unraveling began with a freeze that did not feel, at first, like history. On April 21, 2021, Thodex told customers that withdrawals were temporarily suspended, citing what it said was an abnormal fluctuation in company accounts and a need to investigate. For users staring at unresolved balances, the explanation sounded like a technical pause. For investigators and later prosecutors, it marked the beginning of the end. What had looked like a routine operational interruption quickly became the kind of event that, in hindsight, defines a fraud case: the moment when access stops, explanations blur, and the clock starts moving in only one direction.
The first hard scene of collapse was digital but felt physical. Customers logged in and found the same barriers: the same inability to move out assets, the same messages indicating that withdrawals were unavailable, the same public uncertainty spreading faster than any official clarification. In the world of retail crypto, a frozen withdrawal page can trigger a bank run without a bank. People do not wait patiently for an update when they fear the exit may already be blocked. Every minute mattered because every minute could mean a final chance to transfer out funds that still existed somewhere on the platform’s ledgers.
The second scene was more dramatic and better documented. While customers and authorities were trying to understand the freeze, Faruk Fatih Özer left Turkey for Albania. Reporting and official statements placed him on a flight shortly after the shutdown, transforming a domestic exchange crisis into an international manhunt. The detail mattered not because it was cinematic, but because it was evidentiary. A founder departing during a collapse gives investigators a map of urgency. It tells them where to look first, what to preserve, and which records may already be under strain. It also changes the public meaning of the event: a platform halt is one thing; a platform halt followed by the founder’s disappearance is another.
Tension escalated as Turkish authorities moved from consumer complaint to criminal inquiry. The company’s explanation was no longer enough to contain the damage. Media coverage converged, regulators were forced into the open, and customers began calculating losses in real time. Some had a few thousand lira trapped. Others had life savings. In fraud cases like this, the social shock is amplified by the ordinary scale of the victims. This was not only a story of one company’s failure. It was a story about how ordinary people, many of them retail users, can be left inside a system that appears functional right up until the moment it is not.
The public record includes allegations that as much as $2 billion in customer assets may have been implicated, though estimates varied widely in the first days after the freeze. That uncertainty mattered because uncertainty is itself part of collapse. When a platform withholds access and its founder is abroad, the exact size of the hole becomes a second wound. People are robbed first of money and then of the ability to know how much is gone. The difference between a platform failure and a suspected exit scam often lies in exactly this phase, when the numbers are still contested and the records are still being assembled.
A surprising fact from the collapse period is how quickly the exchange went from active marketplace to forensic object. Once withdrawals stopped, the platform ceased being a place to trade and became evidence. Every announcement, account movement, and timestamp acquired legal weight. What users experienced as an emergency was, for prosecutors, the transition from business failure to potential criminal flight. The logs, statements, and account histories that once served ordinary operations were suddenly part of the evidentiary chain.
According to Turkish authorities, warrants and investigations followed. The CEO’s exit changed the case from a consumer disaster into a cross-border chase. Albania became central because that was where Özer was later located and detained in 2022, but in the immediate aftermath, the crucial question was simpler: how does a major exchange freeze overnight and its founder vanish almost simultaneously? That question drove the public narrative and the investigative one. It forced attention onto timing, sequence, and the precise relationship between the suspension notice and the departure of the exchange’s founder.
The first reactions were panic, then anger, then a search for names. Investors demanded explanations from the company. Regulators had to account for why the exchange had been able to operate so freely. The press began reconstructing the timeline from withdrawal complaints, corporate statements, and flight records. In these cases, the narrative becomes visible only after the escape attempt exposes the perimeter. What had seemed diffuse becomes concrete through documents: the suspension notice on one side, the outbound travel on the other, and the widening gap in the middle where customer access had once been.
The collapse had reached the point where the scheme could no longer sustain a public face. What remained was the legal one. The names of defendants would follow, then charges, then warrants, then extradition. The exchange had not merely failed. It had been publicly named as the vehicle of a suspected exit scam. And in that naming, the event hardened from rumor into case file. The story was no longer about a temporary pause in withdrawals. It was about the destruction of trust, the freezing of access, and the moment a crypto platform’s internal crisis became a matter for police, prosecutors, and cross-border enforcement.