In the beginning, QuadrigaCX did not look like a grand deception. It looked like a startup. It had a Canadian flag in its story, a digital sheen, and the kind of frontier energy that made cryptocurrency feel less like a market and more like a mood. Gerald Cotten, the company’s founder, entered that world as an entrepreneur from the margins of traditional finance, a young man who was not a banker, not a broker, and not visibly tethered to any institution that would later be asked to explain him. That, in the crypto years after Bitcoin’s rise, was not a disqualifier. It was often the point.
The structural conditions were unusually forgiving. In the early 2010s, crypto exchanges operated in a regulatory fog that was thinner than the one surrounding securities dealers, thicker than the one surrounding hobbyist forums, and almost entirely dependent on trust. Canada had no bespoke federal regime for cryptocurrency trading that could, at the time, do what a bank examiner or a securities custodian might do: verify segregation of funds, demand routine audits, or force a clean line between customer deposits and operating capital. The exchange could grow fast without looking much like a bank, and it could hold itself out as a platform without accepting the burdens that came with the word.
Cotten and QuadrigaCX began by exploiting the gap between appearance and control. According to later court filings and the report of Ernst & Young, the court-appointed monitor, QuadrigaCX represented itself as an exchange where users could buy and sell digital assets securely. Yet the infrastructure beneath that promise was concentrated in astonishingly few hands. The founder’s advantage was not merely that he understood the business; it was that he could make himself indispensable to it. In a lightly policed market, that concentration was not immediately suspicious. It was efficient. Until it wasn’t.
One of the early scenes of the fraud’s architecture sits in plain sight in the company’s own operational design: customers sent money in, and the exchange controlled the keys. In traditional finance, custody is an institution. Here, it was a person. That difference mattered more than the branding on the website or the optimism of users who saw a Canadian company as a safer alternative to offshore platforms with murky ownership. The cold-wallet system, a supposed safeguard for digital assets kept offline, was part of that trust architecture. It sounded modern, technical, and reassuring. It also depended on the honesty and competence of those who held the keys.
Cotten’s private world reinforced the illusion. He and his wife, Jennifer Robertson, projected the ordinary comforts of upward mobility: a home in Nova Scotia, a marriage, the routines of a young business couple. That normalcy became one of the most effective trust signals in the case. Fraud often advances not through flamboyance but through relatability. A founder who appears domestic, disciplined, and boring can pass more easily than a showman. At QuadrigaCX, the founder was not selling himself as a genius in a tower. He was selling reliability in a market that desperately wanted it.
The first crossing of the line, as later investigators reconstructed it, was not a single cinematic act but a series of small permissions. Internal control loosened. Access consolidated. Customer obligations were treated less like liabilities than like liquidity. The company’s dependence on one man’s operational authority became part of the business model. If he could move funds, approve withdrawals, and manage the exchange’s banking relationships, then the system’s safety depended on his continued virtue. That is not a safeguard. It is a vulnerability with a logo.
A crucial, and later devastating, fact emerged only after the collapse: by the time customers thought their assets were still sheltered in cold storage, the wallets were already empty. Court-supervised investigations would eventually conclude that the supply of real crypto had been depleted long before the public learned the exchange was in distress. The concealment did not begin with panic in 2019; it began in the quiet period when withdrawals still seemed to work and account balances still looked real. The operation was live, the website functioned, and money kept flowing in.
What made the setup so dangerous was not only the absence of oversight but the presence of belief. Users and counterparties could see a platform that behaved like an exchange and infer that it was one. They could not see the internal ledger, the missing reserves, or the concentration of authority behind the screen. In the gap between interface and infrastructure, Cotten had room to build a machine that could perform solvency while becoming insolvent.
By the time the first funds were moving through QuadrigaCX in a durable way, the exchange had already crossed the line from startup to dependency. Customers were no longer testing a product. They were trusting a custodian. That trust would prove to be the only asset the company truly had, and it was already being spent.
The next step was to persuade the public that the platform was not merely functional, but desirable — a place where money could grow because other people already believed it would.