When the only keyholder dies: the QuadrigaCX lesson

In January 2019 a Canadian crypto exchange called QuadrigaCX told its customers that its founder, Gerald Cotten, had died the month before while travelling in India. He was 30. The message that followed was the part nobody was ready for: Cotten alone held the keys to the offline wallets where most of the customers' crypto was kept, and without him, the exchange said, the money could not be reached.

Quadriga stopped operating within weeks and sought creditor protection in February 2019, with Ernst & Young appointed to oversee what was left. A later regulator's review counted roughly 76,000 clients around the world and put losses at a minimum of $169 million. A young founder dead on his honeymoon, a locked laptop nobody could open, a fortune apparently sealed behind one man's password. That was the story that went round the world.

It seemed to prove crypto's harshest rule in public. Lose the keys and the coins don't freeze in some recoverable limbo; they sit on the blockchain forever, plain to see and impossible to spend. Investigators traced cold wallets thought to hold a large sum and found them empty. Then, after his death, the exchange managed to send about 103 more bitcoin into a wallet it could no longer open. It read as a tragedy of forgotten passwords.

The Ontario Securities Commission, one of Canada's main securities regulators, spent months on the collapse and published its review in 2020. Its conclusion was darker than a lost password. Most of the money had gone before Cotten ever boarded the plane. Staff described it as old-fashioned fraud in modern dress, not a custody accident.

The mechanics were grubby and simple. Cotten had been in sole control of the company since 2016. He opened accounts under false names, credited those accounts with balances that did not exist, and traded them against real customers. When his own bets lost, he covered the gap with other people's deposits, which is the shape of a Ponzi scheme. The review attributed around $115 million of the losses to this fraudulent trading and roughly $28 million more to client funds he moved onto outside platforms without telling anyone.

So the tale of keys dying with him was, in part, cover for a hole that was already there. But look at what let every bit of it happen. One person, no oversight, no proper records, holding every key and answering to nobody. The fraud and the frozen wallets were two symptoms of the same underlying fault.

Set aside the question of whether Cotten was a crook or just unlucky with a laptop. The structural fault is identical either way: everything ran through a single human being. Access to the funds, control of the company, the records that might have exposed a problem, the power to check any of it. All of it sat with one man. Take him out of the picture, by death or by dishonesty, and nothing is left holding the thing up.

Engineers have a name for this: a single point of failure. Custody built this way can kill you in two separate directions. The keyholder can disappear, through death, illness or a lost device, and take access with them. Or the keyholder can abuse the trust, and because no one else can see inside, the abuse runs undetected until the money is gone. Quadriga contrived to do both at once.

Here is the uncomfortable bit. Most people's own arrangements have exactly the same shape, just smaller. One seed phrase. One person who knows where it is. Nobody else able to look in or step in. On a personal scale that is not fraud, it is only fragility, but the failure mode is the same one that emptied an exchange. If access depends on a single person, it dies with that person.

The answer isn't a cleverer hiding place. It's spreading the dependency so that no single loss, and no single betrayal, is fatal. Cryptographers do this with threshold schemes: the secret is split into shares, an agreed number of them brought back together rebuild it, and any one share on its own tells you nothing. Two of three. Three of five. One share can be lost in a fire, or held by someone who turns out to be unreliable, and the money stays both safe and reachable.

Oversight is the other half, and Quadriga is the proof. Sole control wasn't a detail of the fraud; it was the precondition for it. Split the keys across people who don't all answer to the same person and somebody would have had to notice. For an ordinary estate the same principle scales down neatly: more than one trusted person who knows the plan exists, a record others can actually read, and no setup where one death or one bad actor ends everything in a single stroke.

This is the gap a zero-knowledge vault like LifeWyn is built to close. The instructions, the inventory of what you hold, the pointer to where each share lives, can sit encrypted while you're alive and be released to the people you named once it's verified they should have them. Access outlives you without lying exposed while you're still here. The point is not to trust one clever place with the whole secret. It's to make sure the secret never depended on one heartbeat.

You don't run an exchange. But you are almost certainly a single point of failure for something: a wallet, a password vault, the only copy of where the important things are kept. The Quadriga lesson isn't avoid crypto. It's that any store of value guarded by exactly one person is one accident away from being unreachable and one temptation away from being emptied, and often you can't tell which risk you're carrying until it's too late.

So do the unglamorous work while it's easy. Sort each holding into custodial, where a company holds the keys for you, or self-custody, where only you do. For anything self-custodied, split the secret with a real threshold scheme rather than a phrase torn in half, which only leaks clues to a thief. Make sure at least one other trusted person knows the plan exists and could act on it. Leave plain instructions, not just secrets. Then test the recovery once, with a trivial amount, so the gaps show up now rather than at the worst possible moment.

None of this is about distrusting yourself. It's about refusing to be the only load-bearing wall. A fortune vanished because everything rested on one person and no one could see in. Build the opposite of that, on whatever scale you own, and check what applies where you live for the parts a will or an estate has to handle.