The Cold Case of QuadrigaCX: Did Gerald Cotten Fake His Death to Secure $190 Million?

 

In December 2018, Gerald "Gerry" Cotten, the thirty-year-old co-founder and CEO of QuadrigaCX, Canada’s largest cryptocurrency exchange, traveled to Jaipur, India, for his honeymoon. Just nine days into the trip, Cotten suddenly died from complications of Crohn's disease. One month later, his widow announced his passing, alongside a chilling revelation: Cotten was the sole keyholder to Quadriga’s offline "cold storage" wallets. Roughly $190 million in cryptocurrency belonging to 115,000 users was locked behind an encrypted laptop.

The news triggered widespread panic and fueled wild conspiracy theories. On Reddit and Telegram, angry investors accused Cotten of faking his death, escaping with a new face, and executing the ultimate digital exit scam. Suspicion escalated when it was revealed he had signed a detailed will just twelve days before his death, and his death certificate misspelled his name. Jaded creditors eventually demanded his body be exhumed to verify his identity.

However, a ten-month investigation by the Ontario Securities Commission (OSC) unmasked a much darker reality. The missing millions weren't trapped in cold wallets, because those wallets were empty. Gerry Cotten had been running an old-fashioned Ponzi scheme wrapped in modern technology.

Under various aliases, Cotten credited himself with fictitious balances and traded them against unsuspecting clients, gambling away $115 million of investor funds on rival exchanges. When the crypto market crashed in 2018, his house of cards collapsed. Cotten’s sudden death in India became a convenient cover for a massive fraud that had already consumed his clients' life savings. It remains the ultimate cautionary tale of digital trust, proving that sometimes, the keys to the vault never existed in the first place.

The LinkedIn Trap: How a Malicious Job Offer Stole $620 Million

 

In March 2022, a senior software engineer at Sky Mavis, the creator of the wildly popular blockchain game Axie Infinity, received a flattering message on LinkedIn. A recruiter representing an elite global firm was offering an incredibly lucrative job opportunity. Interested in the life-altering salary, the engineer entered a rigorous, multi-stage interview process, unaware that he was stepping into a meticulously crafted trap.

The "recruiter" was actually an operative of the Lazarus Group, a notorious state-sponsored hacking collective backed by the North Korean government. After multiple rounds of interviews, the engineer was sent a formal job offer packaged in a malicious PDF document. The moment he downloaded and opened the file on his work computer, spyware silently bypassed the network's security, initiating an infection chain that compromised the Ronin Network, the sidechain powering Axie Infinity.

The hackers hijacked five out of nine validator nodes on the Ronin network, gaining the private keys necessary to authorize transaction requests. In minutes, they drained 173,600 Ether and 25.5 million USDC, totaling a staggering $620 million in one of the largest cyber-heists in human history.

The Lazarus Group immediately moved the stolen assets through decentralized exchanges, chain-hopping across different blockchains, and utilizing Tornado Cash to wash their digital trail. The stolen funds were ultimately used to bankroll North Korea's ballistic missile programs. For Sky Mavis, the fallout was catastrophic, resulting in massive security restarts, the termination of the phished engineer, and a multimillion-dollar scramble to reimburse affected players. It remains a terrifying case study of how a single click on a fake job offer can dismantle a billion-dollar digital empire.

Crypto Heists of 2025 So Far: How Hackers Are Evolving Faster Than Security

Over $2 billion has been stolen through crypto hacks and exploits in the first half of 2025, per reports. Unlike older tactics like phishing, this year's hackers use AI-assisted tools to scan smart contracts for vulnerabilities, and further execute precision-based attacks. 

Decentralized finances (DeFi) remain the most targeted sector among hackers, followed by NFT marketplaces. Security auditors are struggling to keep up with the ever evolving tactics of these scammers, thus prompting calls for AI-driven, real-time threat monitoring. 

Meanwhile, state-sponsored groups like North Korea's Lazarus Group which attacked Dubai based exchange Bybit in March this year, are suspected in high-profile breaches. With growing popularity of cross-chain protocols, vulnerabilities keep increasing, and there is no saving grace in sight, at least, not yet.

Experts warn investors to use cold wallets, and avoid patronizing untested DeFi platforms. It is no longer enough to be cautious, cryptocurrency users must now be proactive and highly informed, in order to have their funds well secured.

 

Top Unsolved Cryptocurrency Crimes: Where Did the Millions Go?

 

As the rise of cryptocurrency has revolutionized finance, it has also opened the door to sophisticated cybercrimes. With the anonymity blockchain technology provides, tracing stolen digital assets remains a daunting task, thus leaving many cases unsolved.

One of the most infamous crypto cases is the 2014 Mt. Gox exchange hack, where 850,000 bitcoins, worth billions today, vanished. Despite extensive investigations, only a fraction of the amount has been recovered. Blockchain forensic experts have traced some transactions, but the identity of the perpetrators remains unknown. This case underscores the vulnerability of early crypto exchanges to security breaches.

Another high-profile incident is the 2016 DAO hack on the Ethereum network, where attackers exploited a code vulnerability, draining $60 million worth of Ether (worth about $50 million at the time). While the funds were traced to specific wallets, the pseudonymous nature of blockchain made the identification of the hacker nearly impossible.

More recently, the 2021 Poly Network attack also saw about $610 million stolen. In a surprising move, the hacker returned most of the funds, citing ethical motives, though his identity and true intentions remain unknown.

These cases highlight the complexities of investigating crypto crimes. While the blockchain technology offers transparency, its decentralized nature poses challenges for law enforcement. As forensic tools continue to evolve, the hope is that future investigations will crack these unsolved mysteries and bring perpetrators to book.

Cryptocurrency Scams: Types, Warning Signs, and How to Stay Safe

       

Cryptocurrency has revolutionized the financial world, offering decentralization and anonymity. However, this innovation, as positive as it is, also has its downsides. It has attracted scammers seeking to exploit unsuspecting investors. Understanding the types of scams and how to avoid them is crucial for anyone navigating the crypto space.

One common type of scam is the investment scam, where fraudsters promise high returns in exchange for your cryptocurrency. This happens especially on Telegram and Twitter, now known as X. These schemes often operate as Ponzi structures, using new investors' funds to pay earlier participants until the operation collapses. Some of these last for about a week, or two at most.  Another widespread scam is phishing, where hackers trick users into providing their wallet keys or login credentials through fake websites or emails resembling legitimate platforms.

Additionally, rug pulls occur when developers launch a cryptocurrency project, attract investments from their users, and then abruptly withdraw funds, leaving these users/investors with worthless tokens. Social engineering scams, such as fake celebrity endorsements or urgent messages from supposed exchange representatives, also target unsuspecting investors.

There are varieties to these crypto scams. Another of such scams, is where these scammers make a post on cryptocurrency platforms or exchanges, posing as newbies who are either "looking for help in trading", or do not know their way around the crypto scene, by providing a well funded wallet with their seed phrases visible, making them look and sound clueless, whereas they in fact, know what they are on about. Unsuspecting, but greedy users who attempt to access these wallets are then asked to pay a transaction or gas fee before they can have access to the funds in those fake wallets. Once they pay, more payments are still demanded from them, until they realize they actually being scammed.

To avoid falling victim, it's essential to verify the legitimacy of any investment opportunity. Also, conduct thorough research on projects, teams, and platforms before investing. Never share your private keys or sensitive information, even with those claiming to represent official organizations. Double-check website URLs to ensure you're visiting the correct and secure site. Using hardware wallets can also enhance security by keeping your crypto offline.

Staying informed and cautious is the best defense against cryptocurrency scams. By recognizing red flags and practicing due diligence, investors can better protect their assets and enjoy the benefits of the digital currency landscape.