QuadrigaCX’s Identified Bitcoin Cold Wallets Were Empty

Public reporting on March 2, 2019 centered on a finding that materially changed the developing account of QuadrigaCX’s collapse: six Bitcoin cold-wallet addresses identified by the failed Canadian exchange contained no cryptocurrency.

The finding came from Ernst & Young Inc., the monitor appointed in Quadriga’s proceeding under Canada’s Companies’ Creditors Arrangement Act. Its third report was dated and filed on March 1, then circulated through news coverage continuing into March 2. The report did not establish where all customer assets had gone. It did show that the wallets examined could not support the initial expectation that substantial reserves were merely inaccessible because founder Gerald Cotten had died without leaving usable credentials.

That distinction mattered institutionally. Lost keys describe an access problem: assets exist, but nobody can authorize their transfer. Empty wallets raise a different question—whether the expected assets were ever present at the relevant time or had already been moved elsewhere.

Four years of wallet history

Quadriga’s representatives gave the monitor six addresses that the company had previously used to secure bitcoin, which the report described as the platform’s primary traded cryptocurrency. Ernst & Young examined public blockchain records covering approximately April 2014 through April 2018.

Across that four-year window, the six wallets’ combined month-end balance ranged from zero to a peak of approximately 2,776 BTC. The average aggregate month-end balance was approximately 124 BTC. In April 2018, the remaining bitcoin was transferred out, reducing the combined balance to zero.

Five wallets received no further deposits after April 2018 apart from an inadvertent transfer disclosed in an earlier monitor’s report. The sixth appeared to receive bitcoin from an account at another cryptocurrency exchange and forward it to Quadriga’s hot wallet. Its last transaction was initiated on December 3, 2018, and it was empty when the third report was prepared.

These figures describe balances at month-end and transaction history for six identified addresses. They are not a complete audit of every wallet Quadriga or Cotten may have controlled. The monitor also identified three potential cold-wallet addresses for other cryptocurrencies; those were empty as of the report, but the corresponding analysis remained incomplete.

Internal accounts added another uncertainty

The report disclosed 14 platform accounts that may have been created outside Quadriga’s normal customer process under various aliases. A company representative told the monitor that the accounts had been created internally without corresponding customers and used for trading. Some deposits may have been artificially entered before being used on the platform.

Transaction histories showed substantial activity, including cryptocurrency withdrawals to addresses not associated with Quadriga. Ernst & Young had not yet determined whether the deposits were artificial, how the accounts were used, the net effect on Quadriga’s reserves or who controlled the receiving addresses. Those were preliminary investigative leads, not proven findings of fraud on March 2.

The limits of blockchain visibility

The monitor said some bitcoin leaving the six wallets appeared to reach addresses associated with other cryptocurrency exchanges. It had contacted 14 exchanges and received four responses by March 1. Some confirmed accounts associated with Quadriga or Cotten, but only a minimal amount of cryptocurrency had been located and transferred to the monitor at that stage.

Public blockchains made the identified addresses’ balances and transfers observable. They did not establish ownership of every destination address with certainty, reconcile Quadriga’s internal customer balances or reveal who authorized each transfer. The monitor also lacked full access to the platform database stored through Amazon Web Services because the relevant account appeared to be held personally in Cotten’s name.

The event-day conclusion was therefore narrow but consequential. Quadriga’s known Bitcoin cold wallets were empty, their regular use had largely stopped in April 2018, and investigators could not yet explain why. The evidence undermined a simple missing-password narrative without yet providing a complete replacement account of the exchange’s shortfall.