The Cold Case of QuadrigaCX: Did Gerald Cotten Fake His Death to Secure $190 Million?

 

In December 2018, Gerald "Gerry" Cotten, the thirty-year-old co-founder and CEO of QuadrigaCX, Canada’s largest cryptocurrency exchange, traveled to Jaipur, India, for his honeymoon. Just nine days into the trip, Cotten suddenly died from complications of Crohn's disease. One month later, his widow announced his passing, alongside a chilling revelation: Cotten was the sole keyholder to Quadriga’s offline "cold storage" wallets. Roughly $190 million in cryptocurrency belonging to 115,000 users was locked behind an encrypted laptop.

The news triggered widespread panic and fueled wild conspiracy theories. On Reddit and Telegram, angry investors accused Cotten of faking his death, escaping with a new face, and executing the ultimate digital exit scam. Suspicion escalated when it was revealed he had signed a detailed will just twelve days before his death, and his death certificate misspelled his name. Jaded creditors eventually demanded his body be exhumed to verify his identity.

However, a ten-month investigation by the Ontario Securities Commission (OSC) unmasked a much darker reality. The missing millions weren't trapped in cold wallets, because those wallets were empty. Gerry Cotten had been running an old-fashioned Ponzi scheme wrapped in modern technology.

Under various aliases, Cotten credited himself with fictitious balances and traded them against unsuspecting clients, gambling away $115 million of investor funds on rival exchanges. When the crypto market crashed in 2018, his house of cards collapsed. Cotten’s sudden death in India became a convenient cover for a massive fraud that had already consumed his clients' life savings. It remains the ultimate cautionary tale of digital trust, proving that sometimes, the keys to the vault never existed in the first place.

The LinkedIn Trap: How a Malicious Job Offer Stole $620 Million

 

In March 2022, a senior software engineer at Sky Mavis, the creator of the wildly popular blockchain game Axie Infinity, received a flattering message on LinkedIn. A recruiter representing an elite global firm was offering an incredibly lucrative job opportunity. Interested in the life-altering salary, the engineer entered a rigorous, multi-stage interview process, unaware that he was stepping into a meticulously crafted trap.

The "recruiter" was actually an operative of the Lazarus Group, a notorious state-sponsored hacking collective backed by the North Korean government. After multiple rounds of interviews, the engineer was sent a formal job offer packaged in a malicious PDF document. The moment he downloaded and opened the file on his work computer, spyware silently bypassed the network's security, initiating an infection chain that compromised the Ronin Network, the sidechain powering Axie Infinity.

The hackers hijacked five out of nine validator nodes on the Ronin network, gaining the private keys necessary to authorize transaction requests. In minutes, they drained 173,600 Ether and 25.5 million USDC, totaling a staggering $620 million in one of the largest cyber-heists in human history.

The Lazarus Group immediately moved the stolen assets through decentralized exchanges, chain-hopping across different blockchains, and utilizing Tornado Cash to wash their digital trail. The stolen funds were ultimately used to bankroll North Korea's ballistic missile programs. For Sky Mavis, the fallout was catastrophic, resulting in massive security restarts, the termination of the phished engineer, and a multimillion-dollar scramble to reimburse affected players. It remains a terrifying case study of how a single click on a fake job offer can dismantle a billion-dollar digital empire.

The Popcorn Tin Billionaire: How $3 Billion in Stolen Bitcoin fell to a 911 Call

 

In September 2012, a twenty-two-year-old student named James "Jimmy" Zhong discovered a tiny glitch on the Silk Road, the internet’s notorious dark web marketplace. When he double-clicked the withdraw button in rapid succession, the ungrounded database erroneously credited his accounts with more Bitcoin than he had deposited. By creating nine dummy vendor accounts and triggering rapid-fire withdrawals, Zhong walked away with over 50,000 Bitcoin. At the time, they were worth roughly $620,000. Within a decade, his stolen fortune would surge to an eye-watering $3.36 billion.

Rather than hiding in the shadows, Zhong lived like a modern digital Gatsby. He flew friends on private jets, hosted lavish Beverly Hills shopping sprees, and bought a lake house equipped with a stripper pole. To anyone who asked, he was simply an early-stage Bitcoin miner.

But Zhong’s billionaire dream collapsed because of a single phone call. In March 2019, after a break-in at his home resulted in the theft of $400,000 in cash, a desperate Zhong dialed 911. The local police investigation eventually drew the attention of IRS Criminal Investigation (IRS-CI) agents, who were already tracking the cold blockchain trail of the stolen Silk Road coins. Zhong’s fatal technical mistake came later that year when he moved a tiny $800 sum from his hacker wallet to a KYC-compliant exchange.

On November 9, 2021, federal agents raided Zhong’s Georgia home. Inside a bathroom closet, hidden beneath blankets at the bottom of a Cheetos popcorn tin, they discovered a single-board computer holding the private keys to the stolen billions. Zhong pled guilty to wire fraud and was sentenced to a year and a day in federal prison, he also surrendered all remaining stolen Bitcoin, valued at over $3.4 billion at the time, leaving behind one of the largest cryptocurrency seizures in history.