Skip to content
Education only · not financial, tax or legal adviceCanadian facts checked 2026-10-31 · a MITEY site
Menu
Risk explainer

Platform failure: when the company holding your crypto goes under

Custody and counterparty risk at centralized crypto platforms, what QuadrigaCX showed Canada, what registered platforms must now do, and where those rules stop.

Blue square · intermediate8 min readFacts checked 2026-10-31
Mitey the yeti seated on a rock, reading a ledger, with a shield
Mitey says: Check that a platform is registered before you sign up, and export your history often enough that you never depend on it alone.

Trail notes

  • Crypto left on a platform is a claim on that company, not an asset you control.
  • Commingling, hacks, key-person failures, insolvency, withdrawal freezes and fraud are the ways platforms fail.
  • Registered Canadian platforms face custody and segregation expectations from the CSA and CIRO.
  • Those rules have limits, and crypto on a platform has no CDIC coverage.

What platform failure risk is

When you buy crypto on a centralized platform and leave it there, you usually do not hold the keys. The platform does. What you have is a claim on the platform: a promise that it holds your assets and will hand them over when you ask. Platform failure risk is the chance that promise breaks because the company is hacked, mismanaged, insolvent or dishonest.

This is also called counterparty or custodial risk. It applies to crypto trading platforms, crypto-backed lending platforms and any service that holds assets for you. It is the mirror image of key loss: you hand the key problem to someone else and take on their risks instead.

About this danger rating

We rate platform failure 4 (high) on the Mitey risk scale, our editorial teaching scale inspired by avalanche danger ratings: 1 low, 2 moderate, 3 considerable, 4 high, 5 extreme. It is a general teaching guide, not a rating of any platform, and not advice. Canadian rules have lowered this risk for registered platforms, but failures can still be sudden and affect every client at once.

How it happens

  • Commingling and misuse. Client assets are mixed with the company’s own, or used for trading, lending or expenses. When clients ask for withdrawals, the assets are not all there.
  • Hot wallet hacks. Platforms keep some funds online to process withdrawals. Weak key management or a breach can drain those wallets.
  • Key-person and key-management failures. If access to cold storage depends on one person or a poorly documented process, an illness, death or departure can leave assets unreachable.
  • Insolvency. A platform that lends client assets, takes on debt or makes bad bets can run out of money. In an insolvency, clients may wait a long time and recover less than they are owed.
  • Withdrawal freezes. A platform under stress may pause withdrawals “temporarily”. Once paused, you cannot move your assets to safety.
  • Fraud. Sometimes the people running the platform are the problem. QuadrigaCX, a Canadian crypto exchange, collapsed in 2019; an Ontario Securities Commission staff review in 2020 found its founder had committed fraud.
Custody spectrum1Custodialplatform2Smart/ shared-key3Softwarewallet4Hardwarewallet5Multisig/ coldless control · less to managemore control · more responsibilityKeys = control. Recovery phrase = the keys.
Who holds the keys? The custody spectrum. Moving right gives you more control and more responsibility. There is no option with full control and no responsibility.

See the full infographic with notes.

A hypothetical example

Example: a freeze on a Friday
You hold $8,000 of crypto on a platform that is not registered in Canada and lends out client assets to fund the yields it advertises.
A borrower defaults. Rumours spread and many clients request withdrawals at once.
On Friday evening the platform pauses withdrawals, citing “market conditions.”
Your account still shows $8,000, but that number is now a claim, not an asset you control.
If the platform enters insolvency, you join a queue of creditors. What you get back, and when, depends on what assets remain and how they were held.

This is a hypothetical. Custody with a qualified custodian and segregation of client assets are meant to keep client crypto identifiable and apart from the platform’s own money, which is why Canadian regulators made them part of the expectations for platforms.

Warning signs

  • The platform is not on the CSA’s authorized list and is not operating under a pre-registration undertaking.
  • High yields on deposits, with no clear explanation of where they come from.
  • Withdrawal delays, new withdrawal limits or sudden increases in withdrawal fees.
  • Vague answers about where client assets are held, and by whom.
  • Margin or leverage offered to Canadian retail clients, which the CSA’s enhanced undertakings do not permit.
  • Pressure to keep assets on the platform through lock-ups or loyalty rewards.
  • Sudden leadership departures, or published reports and attestations that stop appearing.

How to reduce it

  • Check registration first. Search the platform on the CSA’s list of authorized platforms and in the National Registration Search. Our platform check tool walks through it.
  • Keep platform balances purposeful. Hold on a platform what you actively use there. If you move longer-term holdings to self-custody, be ready for the key-loss responsibilities that come with it.
  • Spread across institutions. Then a failure at one platform reaches only part of your holdings.
  • Export your history often. Download trade and transfer ledgers regularly so you have records if the platform closes.
  • Read the custody disclosures. Look for who holds client assets, whether they are segregated and what happens in an insolvency.
  • Treat yield as a risk signal. Earning yield on a platform usually means your assets are being put to work somewhere, which adds risk.

The platform due diligence checklist turns these into questions you can work through before you deposit.

The Canadian angle

Canada has tightened platform rules in recent years. Here is what the sources show as of 2026-10-30.

  • Registration. The CSA says crypto platforms that serve Canadians, including those based outside Canada, must register with provincial or territorial securities regulators, and platforms still under review operate under a pre-registration undertaking (CSA page last updated 2025-10-22). On 2024-08-06, the CSA and CIRO said platforms are expected to register as investment dealers and become CIRO members.
  • Custody and segregation. CSA Staff Notice 21-332 (2023-02-22) set enhanced undertakings for platforms, including holding Canadian clients’ assets with qualified custodians, keeping them segregated and offering no margin or leverage.
  • CIRO custody framework. On 2026-02-03, CIRO issued Guidance Note 26-0033, a tiered, risk-based digital asset custody framework for dealer members operating crypto platforms, effective immediately. It is an interim framework imposed through membership terms, because CIRO does not yet have a permanent rule for digital asset custody.
What these rules do not do

They apply to registered platforms and those under undertakings, not to unregistered sites or DeFi protocols. They lower the chance of commingling and loss, but they cannot promise that nothing goes wrong, and they do not protect you from market losses. CDIC says fintechs are not CDIC members, and its “What’s covered” page lists cryptocurrencies, including stablecoins, as not covered (both checked 2026-10-30).

CRA’s advice doubles as failure planning

CRA’s records page (modified 2025-11-10) advises exporting your platform activity history regularly in case the platform closes, stops serving Canada or you lose access. Those exports are also your evidence if you ever need to make a claim.

Your checklist

Questions people ask

Is crypto on a Canadian platform insured by CDIC?

No. CDIC lists cryptocurrencies, including stablecoins, as not covered, and says fintechs are not CDIC members. Cash is protected only if it is placed as an eligible deposit with a CDIC member institution.

How do I check if a crypto platform is registered in Canada?

Search the CSA’s list of crypto platforms authorized to do business with Canadians and the CSA National Registration Search. A platform serving Canadians should appear as registered or as operating under a pre-registration undertaking.

What happened with QuadrigaCX?

QuadrigaCX, a Canadian crypto exchange, collapsed in 2019; an Ontario Securities Commission staff review in 2020 found its founder had committed fraud. It is often cited as a reason custody rules matter.

Do custody rules mean my assets on a platform are safe?

No. Custody and segregation requirements lower some risks, such as commingling, but they do not remove hacks, operational failures or market losses, and they do not apply to unregistered platforms.

Sources and dates

Education only. Nothing on this page is financial, investment, tax or legal advice, or a recommendation to buy, sell, stake, lend or borrow any crypto-asset. Crypto-assets can lose some or all of their value and are not covered by CDIC. Canadian rules change: check the dated sources above and talk to a qualified professional about your situation. Full disclaimer.