CAVIRTEX announced an orderly shutdown on February 17, 2015, after saying an older database may have been compromised. The Calgary-based exchange said hashed passwords and two-factor-authentication secrets may have been exposed, but it had not lost customer funds and remained solvent. It stopped accepting deposits immediately, scheduled trading to end on March 20, 2015, and withdrawals on March 25. The suspected compromise and the resulting security and reputational concerns—not a reported theft of customer balances—were central to its decision to close.
What CAVIRTEX was
CAVIRTEX stood for Canadian Virtual Exchange. Founded in 2011 and based in Calgary, Alberta, it was an early Canadian cryptocurrency exchange. Contemporary accounts described it as one of the country’s largest exchanges; Canadian parliamentary evidence records that it offered bitcoin and litecoin trading as well as digital-wallet services. Kraken’s later account of the acquisition also gives the company’s history, while Canadian Senate committee evidence describes its services and closure.
What the suspected breach involved
In a notice dated February 15, 2015, CAVIRTEX said it had reason to believe that an older version of its database had been compromised. It could not be certain that the confidentiality of the credentials in that database had been preserved. The company identified hashed passwords and two-factor-authentication (2FA) secrets as potentially exposed. It said identification documents were not included in the affected database. CoinDesk’s contemporaneous report and SC Media’s account of the company notice cover those details.
That wording matters: a suspected compromise is not proof that attackers accessed every record, and a password hash is not a plaintext password. But hashes can still be attacked offline, depending on how they were generated and how strong the original passwords were. A 2FA secret can also matter: if exposed, it may help someone generate valid codes, particularly if they also obtain a password. The available reporting does not establish that customer bitcoin was taken through this incident.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →#1 Best Overall
- BITCOIN EXCLUSIVE, PHONE VERIFICATION: Bitkey is designed from the ground up exclusively for bitcoin — a dedicated hardware wallet for secure bitcoin storage. Approve transactions with a tap using your phone and NFC. No device screen is required.
- SELF-CUSTODY, NO EXCHANGE OR CUSTODIAN REQUIRED: You hold two of the three keys in the Bitkey system – one on your phone and one on your Bitkey device. The third is stored on Bitkey’s server and cannot move your bitcoin on its own.
- NO SEED PHRASE: Set up and use Bitkey without creating or storing a seed phrase.
- 2-of-3 MULTISIG: Three keys are stored separately across your phone, Bitkey device, and Bitkey’s server. Any two keys are required to move your bitcoin.
- BUILT-IN RECOVERY: Encrypted backup and recovery tools can help you regain access if you lose your phone or Bitkey device. You can also designate a Recovery Contact.
What customers were told to do
CAVIRTEX’s historical instructions were intended to reduce the risk of account takeover while users closed out their accounts. They are not a current recovery process; the exchange’s wind-down took place in 2015.
- Change the CAVIRTEX account password, and change it anywhere else it had been reused—especially on email, banking, or other financial accounts. A password change at the exchange would not protect another service using the same password.
- Check balances and re-enter or verify withdrawal addresses rather than relying on a saved or prefilled address.
- Clear CAVIRTEX site cookies. The company had reset browser-authentication tokens, which could invalidate trusted sessions, but that did not make reused passwords safe elsewhere.
- If a return address appeared prefilled incorrectly or looked suspicious, contact CAVIRTEX support before sending a withdrawal.
These steps were reported in CoinDesk’s account of the shutdown instructions and The Register’s contemporaneous report.
Rank #2
- Unparalleled Security: Protect your assets NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency
- Simple & Secure Interface: Manage your digital assets easily with a clear OLED screen for secure on-device confirmations
- Supports 1000s of Coins & Tokens: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet
- Effortless Asset Management: Monitor and transact seamlessly with Trezor Suite, our intuitive desktop and mobile app
- Enhanced Backup Solution: Rest assured with Multi-share Backup, eliminating single points of failure for secure cold wallet recovery
Shutdown timetable
| Date | What happened |
|---|---|
| February 15, 2015 | CAVIRTEX said it found reason to believe an older database may have been compromised. |
| February 17, 2015 | The exchange publicly announced its wind-down and stopped accepting new deposits. |
| March 20, 2015 | Trading was scheduled to halt. |
| March 25, 2015 | Withdrawal processing was scheduled to end. |
The dates and planned sequence were reported by CoinDesk and the Georgia Straight.
Were customer funds stolen?
CAVIRTEX said it had not lost client funds in the incident, remained solvent, and would accommodate withdrawal requests made before the deadline. Those are company statements, not an independently audited reconciliation of every account. The contemporaneous reporting cited here does not establish that customer balances were stolen, nor does it establish that every customer successfully withdrew before processing ended. “Funds at risk” and “funds stolen” are different claims; the available evidence supports the former as a concern, not the latter as a reported outcome.
Rank #3
- Unparalleled Security: Protect your assets with EAL 6+ Secure Element, offering robust defense and complete transparency
- Simple & Secure Interface: Manage your digital assets easily with a clear OLED screen for secure on-device confirmations
- Supports 1000s of Coins & Tokens: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet
- Effortless Asset Management: Monitor and transact seamlessly with Trezor Suite, our intuitive desktop and mobile app
- Enhanced Backup Solution: Multi-share Backup eliminates single points of failure for secure cold wallet recovery
Why close if the company said it was solvent?
Solvency meant CAVIRTEX said it could meet its obligations; it did not mean the business could continue safely or retain customers’ trust. The company said the suspected compromise had damaged its reputation and could significantly impair its ability to operate successfully. Vice president Kyle Kemper told CoinDesk that the exchange had faced repeated hacking attempts and that continuing to operate could eventually put customer balances at risk. In that context, closing was presented as a preventive business decision rather than a response to a reported depletion of customer funds.
Banking access and regulatory uncertainty formed part of the operating environment. CoinDesk reported banking concerns alongside the security announcement, and contemporary coverage noted regulatory developments in Quebec. They help explain the pressures facing Canadian exchanges at the time, but CAVIRTEX’s immediate public explanation centered on the possible compromise, customer safety, and reputational harm; the evidence does not establish Quebec regulation as the sole cause.
Rank #4
- Dual-chip architecture for maximum protection: The next-gen, fully auditable TROPIC01 chip works alongside a certified EAL6+ Secure Element—completely NDA-free—to deliver radically transparent, industry-leading defense against physical attacks.
- Quantum-ready security: Get protection against future threats with the first-ever hardware wallet designed with quantum-ready architecture.
- See every detail with confidence: Our largest high-resolution color touchscreen makes it easy to navigate your assets, review transactions and manage your coins with clarity.
- Wireless freedom with encrypted Bluetooth control: Manage, buy, swap and stake securely using Trezor Suite on desktop or mobile. Qi2-compatible wireless charging keeps your Trezor powered up. No cables required—security meets convenience.
- Works seamlessly with Android, iOS and desktop: Connect wirelessly or via USB-C to your phone or computer. Manage your crypto anywhere with our companion Trezor Suite app.
What happened to CAVIRTEX afterward?
The March 2015 wind-down was not the final appearance of the CAVIRTEX name. Coinsetter acquired the Canadian platform in April 2015 and planned to resume operations under the CAVIRTEX brand. Reuters, reporting via Yahoo Canada, said the deal was an all-stock transaction and cited an estimate near $2 million; the parties did not disclose a definitive purchase price. See Reuters’ acquisition report and Fortune’s account of the deal.
In January 2016, Kraken announced that it was acquiring both Coinsetter and CAVIRTEX, with the intention of absorbing both brands. Kraken said client accounts were scheduled to transfer to Kraken on January 26, 2016. That consolidation was a separate event from the 2015 suspected database compromise. Kraken’s announcement describes the acquisition and planned transfer.
Best Value
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
Why the distinction still matters
CAVIRTEX’s episode illustrates how an exchange can face a business-ending security crisis without a publicly established theft of customer balances. Credential data can create account-takeover risk even when it is not a record of funds moving, and a company may decide that the risk of continuing operations is unacceptable before customers’ balances are known to be missing. It is also a reminder that an exchange account is not the same as a bank deposit: customers depend on the platform’s security, operational continuity, and ability to process withdrawals. The CAVIRTEX chronology should not be confused with a confirmed loss of customer bitcoin, or with the later transfer of the brand and accounts to new owners.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
