QuadrigaCX: $169M Lost When One Person Held the Keys

Clients thought their coins were stored safely. The regulator later found the exchange was run by one person who answered to nobody, and the money was not there.

By Siddharth ShankarUpdated October 11, 2026

A crypto exchange is a company that holds customers' digital assets on their behalf. When customers deposit funds, they trust the company to keep them safe and to pay them out on request. QuadrigaCX shows what happens when that trust rests on one person, with no checks around them.

What happened

QuadrigaCX collapsed in late 2018 and early 2019. In June 2020, the Ontario Securities Commission published a review of the company, which CBC summarized. The OSC concluded that Quadriga was a fraud and a Ponzi scheme.

The OSC estimated that clients lost about $169 million. When the OSC began its work, over 76,000 clients were owed a combined $215 million. About $115 million of the losses was tied to the founder's fraudulent trading, and about $28 million to losses on outside trading platforms.

How it worked

The founder was the sole controller from 2016. According to the OSC's conclusions as reported, there were no internal controls and no proper books. He opened accounts under aliases and credited himself with fictitious balances. Quadriga was not registered with any securities regulator.

Customers saw a normal-looking exchange website with balances. But a balance on a screen is only a record, and in this case the records were not backed by the assets they claimed. Because one person controlled both the records and the access, nobody else was positioned to notice.

What was exposed

Unlike a hack, this was a failure of custody, which is who actually holds the assets and controls the keys. The OSC found the founder alone controlled the exchange. Customers depended entirely on his honesty, and there was no independent control that could verify what the company owned.

How it ended

For clients, this is an unhappy ending. The bankruptcy trustee, Ernst & Young, recovered about $46 million for clients, a fraction of the $169 million the OSC estimated was lost. The OSC said enforcement was impractical because the founder is dead and Quadriga is bankrupt.

What customers could and could not see

From a customer's side, the exchange looked ordinary: an account, a balance and a withdrawal button. None of that proves the assets exist. The OSC's findings, as CBC reports them, show that the visible records were not tied to independent verification, and that the founder could credit himself with balances that were not real.

This is why regulators insist on registration and audits for firms that hold other people's money. Those requirements exist so that the answer to "where are my assets?" does not depend on one person's word.

Key facts at a glance

• OSC conclusion: Quadriga was a fraud and a Ponzi scheme
• Client losses: about $169 million
• Clients owed when the review began: over 76,000 clients, $215 million combined
• Recovered by the trustee: about $46 million
• Registration: Quadriga was not registered with any securities regulator
• OSC report: June 2020

How to reduce custody risk

What the coverage does not say

CBC's article does not give the OSC report's detailed method, and we have not read the report. We therefore do not add facts beyond those listed. For an investment fraud case that ended with a large seizure, see the Zhimin Qian bitcoin seizure in the UK.

Why this case matters

QuadrigaCX is often remembered for its strange ending, but the lasting lesson is about structure. Any arrangement where one person alone controls the money and the records is fragile. In a regulated bank or a registered dealer, there are audits, segregated accounts and legal duties meant to prevent that.

If you hold crypto, ask the same question you would ask about any institution: who can move the money, who checks the records and what happens if that person is unavailable? An exchange that cannot answer clearly is asking for a lot of trust.

Your own exposure is the part you can still change. These guides cover how scammers find your phone number and email, how credential stuffing works and how to prevent identity theft. You can also try our free digital footprint check.