In this lesson
- find out what happened to QuadrigaCX, Canada's largest crypto exchange, after its founder died in 2018
- understand why "only he had the keys" was not the real reason the money was gone
- learn why one person controlling all the keys is a warning sign in itself
What happened to QuadrigaCX? In January 2019 the Canadian exchange QuadrigaCX announced that its founder and CEO Gerald Cotten had died in India in December 2018 – and that he alone had controlled the wallets holding customers' coins. About 76,000 clients were owed about 215 million Canadian dollars. In 2020 the Ontario Securities Commission concluded that the money was not locked away by his death: Cotten had already lost or spent most of it through fraud.
It sounds like the plot of a thriller: a young crypto millionaire dies on his honeymoon, takes the password to a fortune to the grave, and angry investors ask the police to dig up his body. Unfortunately for the 76,000 customers, the real story was less mysterious – and much more ordinary.
Timeline#
| Date | What happened |
|---|---|
| 2013 | Gerald Cotten and a co-founder start QuadrigaCX in Vancouver |
| 2016–2018 | Quadriga becomes Canada's largest crypto exchange; withdrawals are often delayed |
| 27 November 2018 | Cotten signs a will |
| 9 December 2018 | Cotten dies in Jaipur, India, reportedly of complications of Crohn's disease |
| 14 January 2019 | Quadriga announces his death; the exchange goes offline |
| 31 January 2019 | Quadriga seeks creditor protection: "only Cotten had the keys" |
| early 2019 | the court-appointed monitor EY finds the exchange's cold wallets empty – since April 2018 |
| April 2019 | Quadriga goes bankrupt |
| December 2019 | lawyers for the customers ask police to exhume Cotten's body to confirm his death |
| June 2020 | the Ontario Securities Commission (OSC) publishes its report: "fraud" |
| May 2023 | an interim payout of about 13% of proven claims is announced |
"Only he had the keys"#
Quadriga's first explanation was simple. Cotten handled all the funds and coins alone; his laptop was encrypted, and nobody else knew the passwords. The coins were supposedly safe in cold wallets, just out of reach.
The story collapsed within weeks. When experts finally opened the cold wallets, they found them empty. Most had been emptied in April 2018 – eight months before Cotten died. There was no locked treasure. The death did not cause the hole; it revealed it.
How did the fraud work?#
The OSC investigated for over a year. Its report from June 2020 describes what Cotten did:
- Fake accounts. He opened accounts under aliases and credited them with balances of money and crypto that did not exist.
- Trading against his own customers. With those invented balances he traded against real clients, who paid real money for what was, in effect, nothing. This cost clients about 115 million Canadian dollars.
- Gambling with deposits. He moved client coins to three other exchanges and traded them without permission, losing about 28 million.
- A Ponzi structure. When customers wanted to withdraw, he paid them out of new customers' deposits – the classic Ponzi scheme.
- A comfortable life. Client money paid for properties, cars, a boat and a private plane.
In total, the OSC found that about 169 million Canadian dollars of the clients' losses resulted directly from Cotten's fraud. Because he died, he was never charged or tried.
Did the customers get their money back?#
Only a small part. The bankruptcy trustee EY recovered what it could, including assets that Cotten's widow agreed to hand over (she was not accused of taking part in the fraud). In 2023 creditors were told they would receive an interim payment of about 13% of their proven claims. As of October 2026 we could not find any announcement of a final payout; for most customers the money is gone.
And the body? The request to exhume it made headlines around the world, but no result was ever made public. Cotten's death certificate from India stands, and the Netflix documentary "Trust No One" (2022) shows how much doubt the case left behind.
Warning signs you could have seen#
- One person holds all the keys. No serious custodian lets one human control everything. That is not a security model; it is a single point of failure – and a single point of fraud.
- Withdrawals that took weeks or months. Quadriga customers complained for years. Slow withdrawals often mean the money is not there.
- No audits, no regulator, no accounting. Quadriga had no proper bookkeeping at all. Nobody outside could see whether customer balances were backed.
- Payment problems blamed on banks. Quadriga regularly said its banks had frozen money. Sometimes true, often a convenient excuse.
If one person can lose your money, one person can take it
An exchange where a single person controls the keys can lose everything through one accident, one illness – or one decision to steal. Before you trust any platform with your savings, ask who controls the funds and who checks them. If the answer is "one guy" or "nobody", walk away.
Your own coins deserve the same rule. Find out how to make sure your family can reach them and why it is wise not to rely on a single key in the lessons on inheritance and split backups and multisig.
Common myths#
- "The money is still in wallets nobody can open." The wallets were already empty. The OSC found the losses came from fraud, not lost passwords.
- "Cotten faked his death." That is a popular theory, but no evidence has ever been published to support it.
- "It was a technical accident." The keys problem was real, but it only hid a hole that had been growing for years.
Summary
- QuadrigaCX said its CEO Gerald Cotten died in December 2018 with the only keys to the customers' crypto.
- About 76,000 clients were owed about 215 million Canadian dollars; the cold wallets turned out to be empty.
- The OSC found in 2020 that Cotten ran fake accounts, traded and gambled with client money and paid withdrawals from new deposits.
- Creditors got an interim payout of about 13%. One person controlling all the keys is a red flag.