QuadrigaCX, Canada’s largest cryptocurrency exchange at its peak, collapsed in early 2019 after co-founder and CEO Gerald Cotten died in Jaipur, India on December 9, 2018, leaving 115,000 users locked out of wallets holding approximately C$215 million in cryptocurrency and cash. The platform had operated since December 2013, growing to serve hundreds of thousands of registered users across Canada and internationally. The exchange announced Cotten’s death publicly on January 14, 2019, claiming no other employee possessed the encryption passwords to the cold wallets. The exchange filed for creditor protection under Canada’s Companies’ Creditors Arrangement Act on January 31, 2019.
Subsequent investigation by the Ontario Securities Commission, completed in April 2020 and published June 11, 2020, determined that what appeared to be a tragic accident was in fact a long-running fraud. Cotten had been operating a Ponzi scheme for years: he created accounts under aliases, credited himself with fictitious cryptocurrency balances, traded against his own customers, and covered accumulating losses with incoming client deposits. The OSC calculated that C$169 million of the asset shortfall was attributable to Cotten’s fraudulent conduct, with approximately C$115 million arising directly from his fake-balance trading. No criminal conviction has ever been recorded — Cotten is officially deceased — and no assets approaching the scale of the losses have been recovered.
The 115,000 users who held active balances at collapse were predominantly ordinary Canadian retail investors, many of whom had deposited savings, retirement funds, and money exchanged from national currency into Bitcoin and Ethereum on a platform that projected institutional legitimacy. As of May 2023, creditors received an interim distribution of 13 cents on the dollar, calculated on claims worth C$303.1 million — a figure that reflects continuing losses in real terms as cryptocurrency prices moved over the intervening years.
Cryptsy, a Florida-based cryptocurrency exchange founded in 2013 by Paul Vernon — known by his forum handle “Big Vern” — collapsed in January 2016 after Vernon secretly drained the exchange’s cryptocurrency reserves, abandoned his Florida home, and relocated to China. The theft he concealed had begun more than eighteen months earlier: on July 29, 2014, Vernon claimed hackers had stolen 13,000 Bitcoin and 300,000 Litecoin from Cryptsy’s hot wallets. He disclosed nothing to users and continued operating the exchange, covering the resulting shortfall with incoming deposits in a manner consistent with a Ponzi scheme. By the time he shut the exchange down via a mass email to users on January 13, 2016, at least $6.6 million in customer cryptocurrency was confirmed missing, and Vernon was already abroad.
A class-action lawsuit filed the same day as the closure by attorney David Silver resulted in U.S. District Judge Kenneth Marra appointing receiver Jim Sallah in April 2016 to administer what remained of Cryptsy’s assets. On July 27, 2017, Judge Marra entered a default civil judgment — case number 9:16-cv-80060, Southern District of Florida — finding Paul Vernon liable to the plaintiff class in the principal sum of $8,200,000. The court simultaneously declared that the 11,325.0961 Bitcoin stolen from customers on July 29, 2014, constituted property of the plaintiff class subject to the judgment. Vernon did not appear, did not respond to the complaint, and did not make any payment toward the judgment. As of the date of this report, he remains believed to be in the Liaoning province of China, where he has no credible extradition exposure under existing treaty arrangements between the United States and the People’s Republic of China.
The customers who lost funds were predominantly early cryptocurrency adopters and traders who had deposited Bitcoin, Litecoin, and other altcoins into an exchange that processed significant daily volume across hundreds of listed trading pairs. The receiver’s efforts to recover assets were hampered by the absence of documentation of where customer funds had gone, and the $8.2 million judgment has never been enforced.
MapleChange, a small Canadian cryptocurrency exchange that had launched in May 2018, announced on October 28, 2018 that it had suffered a hack in which all funds were drained from its hot wallets. The same day, the exchange deleted its Twitter account, its Discord server, its Telegram channel, and its website. The reported loss was 913 Bitcoin — approximately $5.9 million at the time — which the exchange attributed to a bug that allowed users to exploit the withdrawal system. No verifiable evidence of an external hack was ever produced. The exchange’s operators were never publicly identified through any confirmed name or legal proceeding, and no charges have been filed in connection with the incident.
The sequence of events on October 28 — hack announcement followed within hours by simultaneous deletion of every public-facing channel — was widely characterised by security researchers and the crypto press as an exit scam executed under the cover of a fabricated security incident. The anonymous internet investigation that followed the deletion identified an individual suspected to be behind the exchange, but no law enforcement body has publicly confirmed or acted on that identification. Approximately five months of operations and 913 Bitcoin in customer deposits were the total scope of the exchange’s existence.
The users who lost funds at MapleChange were cryptocurrency traders who had deposited Bitcoin, Litecoin, and other altcoins into a platform that had listed 62 trading pairs and was in the process of building a user base. Many had modest balances; some had more significant positions. The exchange had been in operation for only five months, had no known regulatory registration, no published team information, and no audited financial records.