Orca Crypto
Menu
Start Here
Learn
Chains
Exchanges
Markets
Tools
Safety
More
Buy OCX Book a session
What went wrong

QuadrigaCX

Canada's largest exchange said its founder had died taking the only keys with him. The keys turned out to be beside the point, because the coins had been gone for years.

Loading live prices
By the Orca Crypto teamUpdated 2026-09-016 min readCase study
In one line

What happened

Canada's largest exchange said its founder had died taking the only keys with him. The keys turned out to be beside the point, because the coins had been gone for years.

WhenJanuary 2019
What kind of failureExchange collapse
What it costAbout 190 million Canadian dollars owed to 76,000 customers
What was promised

The version the public saw

QuadrigaCX was the main on ramp for Canadians buying bitcoin, and its founder Gerald Cotten was a familiar face at industry events. Customer balances appeared normally in the interface. The company described its holdings as being kept safely in cold storage that only Cotten could reach, and presented that as security rather than as a risk.

What was actually happening

Underneath the same period

There was no meaningful cold storage. Cotten had been running the exchange as a Ponzi, crediting customer accounts with currency that did not exist, trading against his own customers on his own platform under false names, and covering withdrawals with other customers' deposits. An Ontario Securities Commission review later described it plainly as an old fashioned fraud.

How it came apart

The sequence

  1. A death is announced

    In January 2019 the company said Cotten had died in India the previous December of complications from Crohn's disease.

  2. The keys are said to be lost

    QuadrigaCX told a court that Cotten alone held the keys to the cold wallets and that the funds were therefore unreachable.

  3. Researchers look at the chain

    Independent analysts examined the addresses the company identified and found the cold wallets had been empty since April 2018, months before the death.

  4. The regulator publishes

    The Ontario Securities Commission concluded that the shortfall was caused by Cotten's fraudulent trading, not by any lost key.

What was visible at the time

The signals, before anybody knew the ending

None of these needed hindsight. Each one was public, or checkable, while the money was still there.

Warning signs
  • One person with sole control of everything, described publicly as a feature
  • No independent audit and no proof of reserves
  • A platform where the operator could trade against its own customers
  • A company registered nowhere that regulated a securities business
Where it stands now

The aftermath

The bankruptcy trustee recovered a fraction of what was owed. No criminal charges have been brought, because the only person charged would have been Cotten. The absence of a body in Canada and the timing have kept a persistent public theory alive that he faked his death, for which no evidence has been produced.

What to take from it

The part that changes what you do

The lesson

"Only one person can access the funds" is not a security model, it is a single point of failure with a marketing department. Any platform that cannot show reserves independently is asking you to accept its own word about the one fact that matters.

Common questions

Was Gerald Cotten's death real?
A death certificate was issued in India and his widow has always maintained it was genuine. No evidence of a faked death has ever been produced. It also does not change the finding that the money had already gone.
Did the lost keys actually matter?
No, and that is the point of the case. Analysts found the cold wallets had been empty since the previous April. The lost key story explained a shortfall that had a different cause.
How much did customers get back?
A minority of what they were owed, after a lengthy bankruptcy. Recovery came from seized assets rather than from any recovered crypto.

Would your setup have survived this?

We go through where your coins actually sit and who is holding them, and what happens to each of those if the company behind it fails. No sales pitch, and usually about an hour.