QuadrigaCX (2019): The Exchange with One Key Holder

5.1 What it was

QuadrigaCX was Canada's largest crypto exchange in the late 2010s. It let Canadians buy and sell bitcoin and other assets with Canadian dollars, and many used it as their main gateway to crypto.

People trusted it because it was a local, established exchange, operating for several years, with a well-known founder and chief executive.

5.2 What happened

Date	Event
2018	Customers experience growing delays withdrawing Canadian dollars, which the exchange attributed to banking and payment processor problems
December 2018	The exchange's founder and CEO dies while travelling abroad
January 2019	The exchange announces his death and says he was the only person with access to the cold wallets holding customer crypto
Early 2019	The exchange seeks creditor protection, owing about 76,000 users roughly 215 million Canadian dollars in cash and crypto
2019 to 2020	Investigators find that the cold wallets were largely empty, and that customer funds had been moved, traded, and lost long before his death

In numbers, about 215 million Canadian dollars owed to roughly 76,000 users is an average of about 2,800 Canadian dollars each, though individual balances varied widely.

In 2020, a report by the Ontario Securities Commission concluded that what happened at QuadrigaCX was fraud by its CEO. According to the report, he had opened accounts under false names, credited himself with fake balances, traded with customers' assets, and moved funds to other platforms, while the exchange operated without proper records, controls, or segregation of customer assets.

5.3 Key-person risk

QuadrigaCX illustrates key-person risk: when a single person controls critical systems, and the organisation can't function, or can't be checked, without them.

Problem	Effect
One person controlled the cold wallets	No one else could verify or access customer funds
No independent oversight	Fraud could continue for years undetected
No proper accounting	Nobody could tell how much was actually owed or held
Customer and company funds mixed	Customer money could be used for other purposes

"So the story that only he had the keys was part of the problem, and also a cover for the bigger problem," said Node.

"Exactly," said Hash. "Whether or not keys exist, a system where only one person knows the truth is a system where the truth can be hidden."

5.4 Warning signs

Warning sign	Module
Persistent withdrawal delays, blamed on banking issues	Module 1, Chapter 7
No proof of reserves or independent audits	Module 1, Chapter 7
Unclear corporate governance and controls	Module 5, Chapter 11
A single person with control over funds	Module 2, Chapter 13 (multisig as the alternative)
Lack of regulatory oversight at the time	Module 14

5.5 Aftermath

Customers recovered only a fraction of what they were owed through the bankruptcy process, years later. The case influenced Canadian regulators, who later introduced stronger registration and custody requirements for crypto platforms. It also became a frequently cited example of why custody controls, segregation of customer assets, and multi-person key management matter.

5.6 Lessons

1. Withdrawal delays are a serious warning, whatever the explanation (Chapter 2 of this module).
2. Single points of control are dangerous. Well-run custodians use multi-party controls and multisig (Module 2, Chapter 13).
3. Use regulated platforms with segregation and audits (Module 14, Chapters 7 and 8).
4. Proof of reserves helps, but only with liabilities and independent verification (Module 1, Chapter 7).
5. Self-custody removes this entire category of risk for long-term holdings (Module 2).

5.7 Try it yourself

For each platform holding your crypto, find out: whether customer assets are legally segregated, who audits it, whether it uses multi-party controls for custody, and what happens to customer assets if the company fails. If you can't find answers, consider what that tells you.

Key takeaways from this chapter

1. QuadrigaCX was Canada's largest crypto exchange, which collapsed after its CEO's death in December 2018.
2. Claims that only he could access cold wallets masked a larger problem: funds had already been misused.
3. The Ontario Securities Commission concluded in 2020 that the collapse resulted from fraud by the CEO.
4. Key-person risk, missing controls, mixed funds, and no audits allowed fraud to continue undetected.
5. Withdrawal delays and a lack of proof of reserves were warning signs.
6. Use regulated, audited platforms with segregation and multi-party controls, or self-custody.