In December 2018, Gerald Cotten — the thirty-year-old founder of QuadrigaCX, Canada's largest cryptocurrency exchange — died suddenly of complications from Crohn's disease while travelling in India. The exchange's announcement carried a detail that turned a tragedy into a crisis: Cotten, it said, had been the only person holding the keys to the cold wallets. Roughly CA$190 million of customer money, locked behind the password of a man who could no longer be asked.
For a few months, this was the most famous lost-key story in the world — the Landfill and the IronKey, but with a death certificate. Television crews asked security experts whether the encryption could be broken. It couldn't. The money, everyone agreed, was simply frozen forever.
Then the Ontario Securities Commission opened the books, and the story changed genre.
The cold wallets weren't frozen. Several were empty, and had been for months before Cotten died. The OSC's investigation concluded that QuadrigaCX had operated, in substance, as a Ponzi scheme: about CA$115 million of the shortfall came from Cotten trading against his own customers through fake accounts funded with fictitious money, and another CA$28 million evaporated through his losing trades on other platforms. The locked vault was a story told about a vault that had already been walked out of.
Creditors were owed roughly CA$303 million. They recovered about thirteen cents on the dollar. The conspiracy theories — that the death was faked, that the body should be exhumed — got their own Netflix documentary. The Bureau takes no position on any of it beyond the arithmetic, which required no exhumation.
The Bureau's finding: CLOSED, and filed with care: this is the Archive's only case where the loss was certified before anyone understood what kind of loss it was. The customers thought they were mourning a password. They were mourning the money it had been guarding all along.