2026-07-31 · Illicit Finance
The famous version is that a young CEO died in India and took the private keys to the customer funds with him. The court-appointed monitor looked at the blockchain and found that the cold wallets it had been pointed to had been emptied in April 2018, eight months before he died.
Case file
| Field | Value |
|---|---|
| Matter | QuadrigaCX / Quadriga Fintech Solutions Corp., Whiteside Capital Corporation, 0984750 B.C. Ltd. |
| Insolvency | CCAA protection granted 5 February 2019 by Order of Justice Wood, Supreme Court of Nova Scotia |
| Monitor | Ernst & Young Inc., appointed 5 February 2019 |
| Transition to bankruptcy | Termination and Bankruptcy Assignment Order, Justice Wood, 11 April 2019. Applicants assigned into bankruptcy 15 April 2019; EY became trustee, affirmed at the first meeting of creditors on 2 May 2019 |
| Claims | Claims process approved by the Nova Scotia court 27 June 2019. 16,959 proofs of claim received against the operating estate as at 6 May 2020 |
| Venue | Bankruptcy proceedings transferred to the Ontario Superior Court of Justice (Commercial List) on 10 September 2019 |
| Founder | Gerald Cotten, died 9 December 2018 in India while on his honeymoon. Cause of death not established in the documents read |
| Obligations to users at filing | CA$214.6 million (CA$74.1m fiat, CA$140.5m crypto), per the Monitor’s Fifth Report from Quadriga’s own database. The OSC states CA$215 million |
| Assets recovered or identified | CA$46 million |
| Losses found by regulator | at least CA$169 million, being CA$215m owed less CA$46m recovered, across over 76,000 clients, approx. 40% Ontarians |
| Regulator report | QuadrigaCX: A Review by Staff of the Ontario Securities Commission, cover date 14 April 2020 |
| OSC finding | Cotten perpetrated a fraud on his clients, and in effect operated Quadriga like a Ponzi scheme |
| Posture as of 31 July 2026 | Bankruptcy administration. The OSC brought no enforcement proceeding. No criminal charge against Cotten, who is deceased |
All figures are in Canadian dollars, which is the convention the OSC report uses.
What the record shows
Gerald Cotten, co-founder and chief executive of the Canadian cryptocurrency exchange QuadrigaCX, died in India on 9 December 2018 while on his honeymoon. On 5 February 2019, by an order of Justice Wood, the Supreme Court of Nova Scotia granted Quadriga Fintech Solutions Corp. and two affiliates protection under the Companies’ Creditors Arrangement Act and appointed Ernst & Young Inc. as monitor. On 11 April 2019, Justice Wood issued a Termination and Bankruptcy Assignment Order, and on 15 April 2019 each of the applicants was assigned into bankruptcy, with Ernst & Young acting as trustee.
What the company said, and what the monitor found
The company’s position at the outset came from the affidavit of Cotten’s widow, Jennifer Robertson, filed in support of the initial application. At paragraph 24(g) it stated: “Quadriga keeps only a minimal amount of coins on the server (in a hot wallet). The normal procedure was that Gerry would move the majority of the coins to cold storage as a way to protect the coins from hacking or virtual theft.”
The monitor asked the applicants to identify every wallet Quadriga had used. They gave it six cold wallet addresses used in the past to hold bitcoin, plus three further addresses that might have held other cryptocurrencies. In its Third Report, dated 1 March 2019, the monitor set out what the public blockchain showed about those six addresses:
- From April 2014 to approximately April 2018, their aggregate month-end bitcoin balances ranged from nil to a peak of approximately 2,776 bitcoin, averaging approximately 124 bitcoin over the four-year period.
- In April 2018 the remaining bitcoin was transferred out, bringing the balances to nil.
- Apart from one address the monitor called the Sixth Wallet, there had been no deposits into any of them since April 2018, other than an inadvertent transfer by the applicants after the filing.
- After April 2018 the Sixth Wallet appears to have been used to receive bitcoin from another cryptocurrency exchange account and pass it on to Quadriga’s hot wallet. Its last transaction was initiated on 3 December 2018, and it held no cryptocurrency at the date of the Third Report.
Two things follow from that. Cotten died on 9 December 2018, eight months after the balances went to nil. And the identified cold wallets had never held anything approaching the sums owed to clients: their four-year peak was around 2,776 bitcoin.
In a detail that captures the state of the company’s controls, the monitor’s First Report of 12 February 2019 records that on 6 February 2019, the day after creditor protection was granted, “Quadriga inadvertently transferred 103 bitcoins valued at approximately $468,675 to Quadriga cold wallets which the Company is currently unable to access.” Across all its hot wallets at the filing date, the company held cryptocurrency worth approximately $902,743.
By its Fifth Report of 19 June 2019, the monitor had found that significant volumes of client cryptocurrency had been moved off the platform to competitor exchanges into personal accounts controlled by Cotten, where it was traded and in some cases used as security for a margin account; that Cotten had created accounts under aliases into which unsupported deposits were credited and then traded, producing inflated revenue figures and artificial trades with users; and that substantial funds had been transferred to Cotten personally and to related parties, for which the monitor located no supporting justification. The monitor identified fourteen platform accounts controlled by Cotten and estimated that more than forty financial accounts had been used by or on behalf of Quadriga since inception.
The same report put the Canadian dollar equivalent of Quadriga’s obligations to users at the filing date, taken from the company’s own database, at $74.1 million in fiat and $140.5 million in cryptocurrency, or $214.6 million in aggregate.
The Nova Scotia court approved a claims process on 27 June 2019, under which users assert claims as at 15 April 2019 denominated in Canadian dollars, US dollars or units of the six cryptocurrencies the platform supported. On 10 September 2019 the bankruptcy proceedings were transferred to the Ontario Superior Court of Justice (Commercial List). In an interim claim status report dated 12 May 2020, the trustee recorded that as at 6 May 2020 it had received 16,959 proofs of claim against the operating estate, many with multiple currency components, and that it expected to convert all claims to a Canadian dollar equivalent for distribution.
What the OSC found
Staff of the Ontario Securities Commission published a review of Quadriga, its report bearing the cover date 14 April 2020. Its conclusion was direct: “In our assessment, Cotten perpetrated a fraud on his clients through this conduct”, and “In effect, this meant that Quadriga operated like a Ponzi scheme.”
Staff addressed the missing-keys explanation twice and rejected it both times. “It has been widely speculated that the bulk of investor losses resulted from crypto assets becoming lost or inaccessible as a result of Cotten’s death. In our assessment, this was not the case.” And later: “It was widely believed that the bulk of the asset shortfall was due to lost or inaccessible private keys; however, this was not the case.”
The mechanism staff described was specific. From Quadriga’s inception in December 2013, Cotten traded with clients through alias accounts he credited with fake fiat and fake crypto by manual adjustments to the internal ledger. Over 97% of that trading ran through one account in the name “Chris Markay”; others were named “Sceptre Gerry”, “Aretwo Deetwo” and “Seethree Peaohhh”. Through the Chris Markay account alone he completed over 250,000 trades between 2015 and 2018. In 2017 and early 2018 he credited it with single fake deposits of $100 million and $50 million. Staff found that Cotten was party to at least 87% of all trades in bitcoin settled in Canadian dollars on the platform in its first full year measured by value, and 35% over the platform’s lifespan.
When prices moved against those fabricated positions, the losses were real, and they created a genuine shortfall in the assets available to meet client withdrawals. Staff attributed approximately $115 million of the shortfall to that trading. A further $28 million was lost when Cotten traded client assets on three external crypto platforms without authorisation from or disclosure to clients, and staff noted evidence that he likely traded on other external platforms they could not quantify. Staff also found he misappropriated client assets to fund his personal spending.
Staff found the company’s public statements about custody were untrue and misleading. Clients had been told on Reddit that Quadriga used “the tried and tested method of storing 99% coins in cold storage”, and in 2018 Cotten wrote in an email that “clients’ cryptocurrency is held in secure and offline multi-signature wallets.” Staff concluded that the majority of crypto assets were not held in cold storage at all, and that Quadriga was primarily using a mix of hot wallets and other trading platforms.
On timing, staff found that by November 2016 Cotten had injected so many fake assets into the platform that its eventual insolvency was all but assured, and that Quadriga never stopped accepting new clients and new deposits until the new directors shut it down.
Staff brought no enforcement proceeding, on the basis that Cotten was dead and Quadriga bankrupt with its assets in a court-supervised distribution.
The two headline figures, and how they relate. They are not measuring different things, which is how they are usually presented. The OSC states that when Quadriga filed for creditor protection on 5 February 2019 it owed clients assets worth collectively $215 million; that the monitor recovered or identified $46 million; and that the remainder, $169 million, is the shortfall. The monitor’s own figure for obligations to users at the filing date, taken from Quadriga’s database, is $214.6 million. That is the same measure as the OSC’s $215 million, rounded.
What I think happened
The interesting thing about QuadrigaCX is how completely the wrong lesson stuck.
Ask most people what happened and you get: the CEO died, nobody else had the keys, the money is locked in a wallet somewhere. It is a genuinely good story. It made the case famous, it produced documentaries, and it turned a fraud into a cautionary tale about key management.
The monitor emptied that story in three weeks by reading the chain. The addresses the company itself had pointed to went to zero in April 2018 and had never held much to begin with. Cotten died in December. There was no locked treasure. There was a hole, and the missing-keys explanation was the thing that made the hole hard to look at for a while.
I want to be careful about what I am asserting. The OSC made findings after an investigation, and Cotten was never tried, because he was dead. But the April 2018 finding does not depend on anyone’s characterisation of intent, and it is worth being precise about who made it. It came from the court-appointed monitor’s Third Report, not from the OSC, and it is a blockchain observation about six specific addresses the company volunteered. The wallets either had coins in them or they did not.
What strikes me most is the 103 bitcoin. The day after the company obtained creditor protection, with the whole world watching and lawyers everywhere, it accidentally sent another $468,675 into wallets nobody could open. That is not the behaviour of an organisation that has been compromised by one bad actor at the top. That is an organisation with no operational controls of any kind, which is the condition that let a single person run the fraud in the first place. The monitor’s later finding that more than forty financial accounts had been used by or on behalf of the business says the same thing from a different angle.
The reason the myth matters is that it points at the wrong fix. If you believe the Quadriga story is about key succession, the lesson you take is “make sure somebody else has the keys.” That is a reasonable thing to do and it would have changed nothing here. Two people with access to empty wallets is two people looking at empty wallets.
What would have changed the outcome
The real failure at Quadriga is that nobody outside the company could verify that the assets existed. Clients saw a balance on a screen. The number on the screen was produced by the same company that was supposed to be holding the coins, and by the end a meaningful share of the balances on that screen were fabrications typed in under aliases.
So the question worth asking about anywhere you hold assets is not “who has the keys.” It is: who other than the platform can confirm my assets are there, and when did they last do it?
Concretely:
- Is there a third party who holds or verifies the assets, separate from the business that shows you your balance? A qualified custodian, an auditor, an attestation firm.
- When was the last attestation or proof of reserves, and who signed it? A dated report from a named firm is worth more than any amount of assurance on a website. Quadriga’s website said 99% cold storage. The OSC found that untrue.
- Can you verify anything yourself on-chain? Quadriga’s undoing was that the monitor could look at the wallets. So can you, when addresses are published.
- Is any single person able to move everything? Not as a succession question, as a controls question. Where one person can act alone, there is nothing to detect a problem except that person’s honesty.
Holding assets with an independent third-party qualified custodian, in your own name, separates the entity that shows you a balance from the entity that holds the asset. That separation is what makes independent verification possible at all. DAG coordinates independent custody arrangements on that basis.
The honest limits, and this case sets them sharply. Independent custody addresses whether somebody other than the platform can confirm the assets exist. It does nothing about market risk, it does not prevent a hack, and it is not a substitute for a succession plan, which remains worth having for the ordinary reason that people do die. It simply would not have been the thing that saved a Quadriga client. As DAG’s own disclosure puts it, custody arrangements with third-party independent qualified custodians reduce certain risks but do not eliminate them.
Sources
- QuadrigaCX: A Review by Staff of the Ontario Securities Commission, cover date 14 April 2020, at
osc.gov.on.ca/quadrigacxreport. - First Report of the Monitor, Ernst & Young Inc., 12 February 2019, CCAA proceedings, Supreme Court of Nova Scotia.
- Third Report of the Monitor, Ernst & Young Inc., 1 March 2019, same proceedings.
- Fifth Report of the Monitor, Ernst & Young Inc., 19 June 2019, same proceedings.
- Notice to Creditors, Interim Claim Status Report, Ernst & Young Inc. as trustee, 12 May 2020.
- Initial Order of Justice Wood, 5 February 2019; Termination and Bankruptcy Assignment Order of Justice Wood, 11 April 2019; assignments into bankruptcy 15 April 2019.
Related on this desk
- Prime Trust: the custodian that could not open its own wallets — the other case where a custodian could not reach its own wallets, decided on commingling rather than keys.
- Ruscoe v Cryptopia: crypto can be held on trust — what a court does when the records are good enough to say who owned what.
- The 3 best crypto cold wallets — the practical end of the same question, which is how a single holder should store a key at all.
Disclosure. Max Avery is affiliated with Digital Ascension Group (DAG). Investment advisory services are offered through DAG Wealth, an SEC-registered investment adviser (CRD No. 328627). Registration does not imply a certain level of skill or training. DAG is not a law firm and does not provide legal or tax advice. Custody arrangements with third-party independent qualified custodians reduce certain risks but do not eliminate them. Nothing here is investment, legal, or tax advice, or a recommendation to buy or sell any asset. This article describes matters of public record; charges are allegations and defendants are presumed innocent unless and until proven guilty. Gerald Cotten died before any proceeding against him was determined, and no criminal charge against him was ever brought or tested in court.