QuadrigaCX Collapse and Bitcoin Custody Failures — CustodyStress

QuadrigaCX cases documented in the Bitcoin Custody Incident Archive. The exchange became insolvent following the death of its founder, who held sole control of the cold wallet private keys — the defining example of single-person knowledge custody failure at institutional scale.

The most frequently documented recovery path in these cases is Legal Proceedings (2 of 6 cases). 100% of determinate cases resulted in permanently blocked access.

QuadrigaCX was Canada's largest cryptocurrency exchange from approximately 2014 to 2019. Its founder and CEO Gerald Cotten died in India in December 2018. Following his death, the exchange announced it could not access cold wallets holding the majority of customer funds, as Cotten had been the sole keeper of the access credentials. The exchange filed for creditor protection in January 2019. Subsequent investigation by the Ontario Securities Commission found evidence of fraud — Cotten had been operating the exchange as a Ponzi scheme, and many of the cold wallet balances did not exist.

QuadrigaCX operated as a custodial exchange where all customer Bitcoin was held in exchange-controlled wallets. Cold wallet access was concentrated entirely with Gerald Cotten — no secondary keyholders, no documented recovery procedures, no institutional key management. This represented total single-person knowledge dependency at scale.

Access failed through two mechanisms: first, the death of the sole keyholder made cold wallet credentials immediately inaccessible; second, subsequent investigation revealed the cold wallets held substantially less Bitcoin than claimed, suggesting the funds had been misappropriated. Creditor recovery through Canadian insolvency proceedings produced partial distributions years after the collapse.

The QuadrigaCX case is the most documented example of single-person knowledge custody failure at institutional scale in the archive. It is also the clearest documented case of custody structure being used to facilitate fraud — the same single-person knowledge design that prevented recovery also prevented detection of misappropriation.