Within the crypto asset industry, security incidents are frequently attributable not to hackers, but to systemic risks arising from the interplay of human frailties and institutional shortcomings.
The collapse of Canadian exchange QuadrigaCX serves as a textbook case.
In 2018, QuadrigaCX founder Gerald Cotten passed away unexpectedly. As the sole custodian of the platform’s primary private keys, over US$190 million (£135 million) in client assets became permanently frozen on-chain, irretrievable.

This was no accident, but rather a long-overlooked reality within the crypto industry:
Many assets vanish not due to attacks, but because they were placed upon a ‘single point of trust’ from the outset.
Yet, when we reflect on this incident, a more pressing question demands attention:
If your assets are held on an exchange with single points of failure, could history repeat itself?
This is no alarmist rhetoric. If your assets are currently entrusted to:
- Hot/cold wallets managed by a single custodian
- Operational wallets with exclusive access by a single technician
- Platforms failing to separate ownership from management
- Unaudited custodial frameworks operating outside regulatory frameworks
Then the only difference between you and Quadriga’s users lies in sheer luck.
Furthermore, should misfortune strike you unexpectedly—your private keys, assets, passwords…would your family possess the means to recover them?
The harsh reality of the crypto world is this: public blockchains make no exceptions for accidents, life events, emotions, or family circumstances. Once private keys are compromised, on-chain assets are lost forever. Have you truly prepared for these questions:
- If you pass away, can your family legally retrieve your assets without you?
- Do your keys carry the risk of shifting from ‘sole control → sole loss of control’?
- Are you relying on an exchange whose inner workings you barely understand?
- Have your assets been naturally locked into an auditable black box?
The reality of our era is this: your personal lifespan does not align with the lifespan of your on-chain assets. Without advance planning, your family will bear irreparable losses.
Consider the simplest example: if you lose your bank card PIN, you can retrieve it at a bank counter using your personal details. But if you lose the private key to a non-custodial wallet without a backup, who can help you recover it?
The QuadrigaCX incident exposed not an accident, but a structural flaw.
Many platforms remain trapped in an extremely fragile architecture:
- Centralised private keys
- Unauditable permissions
- Assets not segregated from the operating entity
- Risk reliance on individuals, not systems
Should any node fail, assets instantly enter an irreversible state. This is not a black swan event, but an inevitable grey rhino occurrence. Consequently, seven years after QuadrigaCX in 2025, Bybit suffered the largest theft in crypto history. The essence of the theft remained hackers exploiting weaknesses in human systems, not sophisticated technical attacks.
At this point, some may question: does introducing third-party intervention or oversight not reintroduce dependence on centralised institutions?
Not necessarily. This reflects a common misconception among many Web3 users: decentralisation does not equate to the absence of institutions, and custody arrangements do not inherently imply centralisation.
Technologically, blockchain delivers transparency and immutability, while peer-to-peer mechanisms accelerate capital flow efficiency. Custody services address precisely the technical blind spots of ‘human fallibility,’ ‘regulatory continuity,’ and ‘institutional governance.’
Quadriga is not a past tense; it remains a latent future tense.
When reflecting on the Quadriga incident, what we truly confront is not merely the unexpected death of a founder, but an entire fragile system built upon human single points of failure.
Today’s Web3 landscape remains rife with similar ‘individual centralisation’ risks: single-point custody by exchanges, project teams’ sole control of keys, and irreversible losses from users holding private keys themselves.
Only when immutable technology merges with uncompromised governance do personal assets achieve genuine long-term security – enabling self-control while ensuring proper recovery in unforeseen circumstances.
Technology ensures transparency and freedom; systems ensure stability and continuity.
In this rapidly changing era, one need not place absolute trust in any individual, nor risk relying solely on oneself.
All that is required is a structure free from single points of failure, enabling assets to be sustainable, inheritable, verifiable, and recoverable.
Only upon this foundation does decentralisation truly have a future.
The establishment of GDC specifically addresses the core pain points faced by Web3 and digital asset users. Leveraging the extensive resources, global network, and professional team of licensed trust institutions, it provides clients with highly secure digital asset custody services under stringent regulatory oversight.

