This judgment text has undergone conversion so that it is mobile and web-friendly. This may have created formatting or alignment issues. Please refer to the PDF copy for a print-friendly version.

In the COURT OF APPEAL of the republic of singapore
[2020] SGCA(I) 02
Civil Appeal No 81 of 2019
Between
Quoine Pte Ltd
Appellant
And
B2C2 Ltd
Respondent
judgment
[Contract] — [Breach]
[Contract] — [Contractual terms] — [Express terms]
[Contract] — [Contractual terms] — [Implied terms]
[Contract] — [Mistake] — [Mistake of fact]
[Restitution] — [Unjust enrichment]
[Trusts] — [Breach of trust]
[Trusts] — [Express trusts] — [Certainties]

This judgment is subject to final editorial corrections approved by the court and/or redaction pursuant to the publisher’s duty in compliance with the law, for publication in LawNet and/or the Singapore Law Reports.
Quoine Pte Ltd

v

B2C2 Ltd
[2020] SGCA(I) 02
Court of Appeal — Civil Appeal No 81 of 2019
Sundaresh Menon CJ, Andrew Phang Boon Leong JA, Judith Prakash JA, Robert Shenton French IJ and Jonathan Mance IJ
24 February 2020 Judgment reserved.
Sundaresh Menon CJ (delivering the judgment of the majority):
Introduction
1 The world of cryptocurrency trading is not for the faint-hearted. It can involve computer-generated, high frequency transactions in digital quasi-currencies (otherwise known and referred to in this judgment as “cryptocurrencies”) which manifest on computer screens or printouts but are not otherwise in a physical form. The transactions which have led to this appeal were conducted by way of algorithms created by the appellant, Quoine Pte Ltd (“Quoine”), and by the respondent, B2C2 Ltd (“B2C2”). Quoine operated a cryptocurrency exchange platform known as QUOINExchange (“the Platform”), and B2C2 traded on the Platform at the material time. Both Quoine and B2C2 were also market-makers on the Platform, which meant that they created liquidity on the Platform by actively placing orders to buy and sell cryptocurrencies, and in so doing, helped to minimise volatility in the market on the Platform. As is typical of algorithmic trading, the buy and sell contracts on the Platform were concluded without any direct human involvement, save that involved in the creation of the algorithmic processes leading to their formation. Algorithmic trading has been described as follows (see Alain Chaboud et al, “Rise of the Machines: Algorithmic Trading in the Foreign Exchange Market”, International Finance Discussion Papers, 29 September 2009 at p 1):
In algorithmic trading … [traders’] computers directly interface with trading platforms, placing orders without immediate human intervention. The computers observe market data and possibly other information at very high frequency, and, based on a built-in algorithm, send back trading instructions, often within milliseconds. …
Sometimes things can go wrong, as they did in the present case.
2 It transpired that Quoine’s failure to make certain necessary changes to several critical operating systems on the Platform set off a chain of events that eventually led to the transactions which are at the heart of this appeal. On 19 April 2017, a total of 13 trades (“the Disputed Trades”) were concluded between B2C2 and two other users of the Platform, namely Pulsar Trading Capital and Mr Yu Tomita (“Pulsar” and “Mr Tomita” respectively, and “the Counterparties” collectively), where B2C2 sold one type of cryptocurrency, Ethereum (“ETH”), for another type, Bitcoin (“BTC”), at a rate of either 9.99999 BTC or 10 BTC for 1 ETH. The rates at which the Disputed Trades were concluded were approximately 250 times the then going rate in the market of around 0.04 BTC for 1 ETH. The Disputed Trades were automatically settled by the Platform, and 3092.517116 BTC was debited from the Counterparties’ accounts and credited into B2C2’s account, while 309.2518 ETH was debited from B2C2’s account and credited into the Counterparties’ accounts. As the Counterparties’ accounts did not have a sufficient BTC balance to meet the amount that was debited, this resulted in a negative BTC balance in the Counterparties’ accounts. When Quoine became aware of the Disputed Trades the next day, it considered the rates at which the trades were concluded to be highly abnormal and unilaterally proceeded to cancel the trades. The debit and credit transactions involving B2C2’s account and the Counterparties’ accounts were also reversed.
3 B2C2 subsequently commenced proceedings against Quoine on the basis that its unilateral cancellation of the Disputed Trades and reversal of the settlement transactions were in breach of contract and/or breach of trust. The International Judge who heard the matter (“the Judge”) rejected all of Quoine’s defences and allowed B2C2’s claims for both breach of contract and breach of trust. The Judge did not address the issue of damages given that the trial was bifurcated (see B2C2 Ltd v Quoine Pte Ltd [2019] 4 SLR 17 (“Judgment”) at [134]).
4 A central plank of Quoine’s defence both at trial and on appeal was the contention that the contracts underlying the Disputed Trades (“the Trading Contracts”) were void or voidable for unilateral mistake. This requires us to consider how the doctrine of unilateral mistake should operate where the contracts in question were entered into by way of the parties’ respective algorithms, as transpired here.
5 So far as the asserted breach of trust is concerned, this raises the complex question of whether the relevant cryptocurrency, BTC, may even be regarded as a species of property capable of attracting trust obligations.
6 Both these questions were the subject of extensive analysis by Prof Goh Yihan (“Prof Goh”), whom we appointed as amicus curiae. We are deeply grateful to Prof Goh for the extensive research he conducted and the excellent assistance he afforded us on both issues. However, the latter question was not explored in detail in the court below, where the parties appeared to have proceeded on the common ground that BTC was a species of property that was capable of being the subject of a trust. Despite Prof Goh’s able assistance, for reasons which we develop later, we think that the question as to whether BTC can be the subject of a trust should not be dealt with here but should be kept open for another day, in a case in which this issue is properly before the court.
7 In our judgment, for the reasons that follow, the Judge was correct to find that there were no terms in the various contractual documents, whether express or implied, which entitled Quoine unilaterally to cancel the Disputed Trades. We also agree with the Judge that there was no operative mistake on the part of the Counterparties that could be relied upon to vitiate the Trading Contracts. Additionally, given that the BTC was credited into B2C2’s account pursuant to valid contracts, B2C2 could not be said to have been unjustly enriched. We therefore dismiss Quoine’s appeal with respect to the breach of contract claim. However, we are satisfied that no trust could have arisen over the BTC in B2C2’s account, even assuming that the BTC could be the subject of a trust. Therefore, we allow Quoine’s appeal with respect to the breach of trust claim and reverse the decision of the Judge in that regard.
The factual background
8 The detailed facts are set out in the Judgment at [14]–[26] and [69]–[105]. It suffices for us to reproduce the salient facts which are relevant to understanding the arguments made in this appeal.
Quoine and the Quoter Program
9 We begin with a brief introduction of Quoine and the program it used for its trades as a market-maker. Quoine is a Singapore incorporated company which operated the Platform at all material times. The Platform allows users to trade cryptocurrencies, like BTC and ETH, for other cryptocurrencies or for fiat currencies. It uses an electronic ledger as an order book for all the orders that are placed by users wishing to buy and sell cryptocurrencies. Real time information on the available buy and sell orders are also displayed on the right panel of what was referred to as the “Trading Dashboard” located on the Platform’s website.
10 As mentioned, apart from being the operator of the Platform, Quoine also functions as a market-maker on the Platform. In actively placing buy and sell orders, Quoine adds depth to the order book and ensures that there is a continuous two-sided market on the Platform, thus creating liquidity on the Platform and helping to minimise volatility in the market (see Judgment at [18]). A market-maker also profits from what is known as the “bid-ask” spread, which is the difference between the price at which the market-maker is willing to buy or bid for a particular currency and the price at which it is willing to sell or ask for that currency. In the material period, Quoine was the principal market-maker on the Platform. Mr Mario Antonio Gomez Lozada (“Mr Lozada”), Quoine’s Chief Technical Officer, estimated that Quoine was responsible for around 98% of the market-making trades on the Platform (Judgment at [73]).
11 Quoine’s market-making trades on the Platform are conducted through its “Quoter Program”. The Quoter Program retrieves external market prices from other cryptocurrency exchanges and uses this data to determine the orders that Quoine will place on the Platform for market-making purposes. Importantly, the Quoter Program is proprietary to Quoine and the information generated by it is not available to other users of the Platform (Judgment at [18] and [72]).
The Counterparties and margin trading
12 We touch on some basic aspects of trading on the Platform as described in Quoine’s Trading Rules dated 17 March 2017. There are two types of trading offered on the Platform which are relevant to the present dispute. The first is spot trading, where trades are settled instantly with payment for a trade being effected as soon as the trade is completed. The second is margin trading, which is a variant where trades are entered into using borrowed funds (including borrowed cryptocurrencies). Margin traders may obtain loans directly from Quoine, or from other users of the Platform willing to offer them. For margin traders with loans from Quoine, the assets in their accounts serve as the collateral for the loans, which has a bearing on how the Platform’s operating system functions. The Platform is designed to close out a margin trader’s open positions when it detects that the margin trader may not be able to repay its loans. In the event that the collateral in the margin trader’s account falls below a pre-determined percentage of the loan, a margin call is triggered against the margin trader and the Platform automatically force-closes its margin positions by placing market orders on the Platform to close out its open positions. This is known as a “margin sell-out position”.
13 The Platform continually monitors a margin trader’s “live profit and loss” in respect of each open position (“live P&L”) for the purposes of determining how much collateral the margin trader has available in its account. The live P&L is calculated by multiplying the quantity of borrowed cryptocurrency by the difference between its open price and its theoretical close price. The theoretical close price is calculated by simulating the closing of the margin trader’s position against the current price ladder on the Platform’s order book. The price ladder refers to the available buy and sell orders with bid and ask prices that are presently on the Platform’s order book. Therefore, abnormally priced orders placed on the order book and/or an abnormally thin order book can affect the calculation of the margin trader’s live P&L, and cause the Platform to detect that the margin trader is in a margin sell-out position and take steps to force-close the margin trader’s positions. In such circumstances, the Platform’s operating system will automatically execute the force-closures as market orders to buy or sell the relevant currency at the best available price on the Platform. Further, the margin trader is not contacted in advance of the force-closures being executed; nor will it know the precise prices at which the force-closures will be executed (Judgment at [17]).
14 At and around the time of the Disputed Trades, the Counterparties were trading in the ETH/BTC market using ETH borrowed from Quoine (Judgment at [25]).
B2C2 and the Trading Software
15 Next, we introduce B2C2 and its trading software. B2C2 is incorporated in England and Wales and amongst its business interests is that of being a market-maker. As with other exchange platforms on which B2C2 conducts market-making, its entire trading process on the Platform is automated using its algorithmic trading software (“the Trading Software”) which was designed to function with minimal human intervention (Judgment at [13]). The Trading Software was designed almost exclusively by Mr Maxime Boonen (“Mr Boonen”), a director of B2C2 and its key witness at the trial. It should be noted that the Trading Software’s algorithm is deterministic (Judgment at [82]), which, as defined by both the Judge and Prof Goh, is one which will always produce precisely the same output given the same input. To put it another way, the Trading Software will do just what it was programmed to do and does not have the capacity to develop its own responses to varying conditions. Hence, faced with any given set of conditions, it will always respond to that in the same way. The fact that the Trading Software’s algorithm is deterministic is significant to our analysis below in relation to Quoine’s defence of unilateral mistake.
16 As explained in the report of Quoine’s expert witness, Mr Vikram Kapoor, the Trading Software’s algorithm for placing buy and sell orders on the Platform comprises different “layers” at which different algorithmic trading “strategies” are applied. The first layer contains 12 different algorithmic trading strategies that are programmed to work in sequence, and such a series of trading strategies is known as a “strategy chain”. The “PureQuote” strategy, which the Judge discussed at [83]–[84] of the Judgment, is the first strategy in the strategy chain of the First Layer. For the relevant sell (or buy) order B2C2 wishes to place on the Platform, the PureQuote strategy first constructs an order book that is internal to the Trading Software based on the 20 best sell (or buy) orders already placed on the Platform’s order book. This information is received from the Platform. In constructing the internal order book, the PureQuote strategy will also disregard any sell (or buy) order that has been placed for less than a certain quantity of the cryptocurrency. The PureQuote strategy then processes the information on the internal order book and produces an “output” price. In other words, based on the parameters that have been pre-programmed into the PureQuote strategy, the PureQuote strategy determines the optimal output price given the information it has received from the Platform. This output price that is produced by the PureQuote strategy, however, is not the price that the Trading Software will ultimately quote for the sell (or buy) order it eventually places on the Platform. The output price from the PureQuote strategy merely serves as an input variable for the next trading strategy in the strategy chain, which in turn produces another output price. This process continues through all the trading strategies in the strategy chain, until all the strategy chains in the layers of the Trading Software’s algorithm that are running at the material time have been applied. At the end of this process, the final output price produced is that which the Trading Software quotes for the sell (or buy) order it places on the Platform.
17 Where the Platform is functioning properly with a healthy order book, the PureQuote strategy can construct the Trading Software’s internal order book by drawing on the 20 best orders from the Platform’s order book. However, it was anticipated that there might be situations where the Platform’s order book would be either empty or populated by a large number of low volume orders which the PureQuote strategy would disregard, such that the PureQuote strategy would have no or insufficient input from the Platform’s order book. This was explained by Mr Boonen as follows:
… [The output prices from the PureQuote strategy form] the basis of what orders we could later on send into the market, but the prices themselves are, so to speak, the best prices that we would compute on the basis of the order book proposed to us, but then other strategies can worsen those prices for a variety of reasons. So they form a sort of building block … there must at all time[s] exist such a building block, otherwise the rest of the strategy stack fails. That’s why we use that method of adding virtual prices that are not necessarily present in the market, because in a completely empty order book, for instance, the strategy cannot run, as … it doesn’t have an anchor from which it could create its output. [emphasis added]
18 As alluded to in that extract from Mr Boonen’s evidence, when the PureQuote strategy has no or insufficient input from the Platform’s order book, it would not be able to “run” and so to produce an output price. Such a situation would be undesirable, given that the Trading Software was designed to function continuously with minimal human intervention. Mr Boonen therefore programmed the PureQuote strategy to always add a “virtual price” for the sell (or buy) orders of the Trading Software’s internal order book. The “virtual price” is also known as a “deep price”. The price is “virtual” in the sense that it is not obtained from the Platform, but is inserted into the Trading Software’s internal order book so that the PureQuote strategy always has a price input to work with so as to produce an output price, even if there happened to be no or insufficient input from the Platform’s order book. In this way, the Trading Software’s algorithm would continue functioning and placing orders on the Platform. After some changes, Mr Boonen settled on programming a deep price of 10 BTC to 1 ETH for the sell orders for ETH. This was done before the events with which we are concerned.
The terms of use of the Platform
19 We turn to the terms and conditions of the agreement governing the use of the Platform (“the Agreement”), which were set out on Quoine’s website. The Agreement recited that it was “effective upon the date of electronic acceptance” and that it was “entered into by and between [Quoine] and the user of [Quoine’s Platform]”. We highlight some of the relevant provisions of the Agreement.
20 Under the heading “General Terms”, the Agreement stated:
This Agreement sets forth the terms and conditions governing the access and use of the Platform. This Agreement may be changed at any time by the Company. It is the responsibility of the User to keep himself/herself updated with the current version of the Agreement. Users and Members waive any claim regarding this issue. This Agreement may only be amended with the express consent of the Company. …
[emphasis added]
The same text, which purported to allow Quoine unilaterally to vary the Agreement, also appeared under the heading “Membership And Users Of The Platform”.
21 Similarly, under the heading “Representations and Warranties”, the Agreement provided as follows in sub-para (h) (which we will refer to as “the Without Notice Clause”):
You agree that the Company reserves the right to change any of the terms, rights, obligations, privileges or institute new charges for access to or continued use of services at any time, with or without providing notice of such change. You are responsible for reviewing the information and terms of usage as may be posted from time to time. Continued use of the services or non-termination of your membership after changes are posted or emailed constitutes your acceptance or deemed acceptance of the terms as modified. [emphasis added]
We will refer to the clauses excerpted at [20]–[21], which purported to allow Quoine unilaterally to vary the terms of the Agreement without giving notice to the users of the Platform, collectively as “the Unilateral Variation Clauses”.
22 Under the heading “Trading & Order Execution”, the Agreement provided that:
Only registered users or Members are allowed to buy, sell and use the services provided by the Platform. The exchange functions of [t]he Platform will fill in orders at the best possible available market price. Note that as markets move continuously, the prices displayed on user interfaces, on our web app or on mobile apps are in no way guaranteed. The Platform, however, has been designed to allow members to fill at best possible prices and in a timely manner. Nevertheless the Company will not be liable under any circumstances for the consequences of any delay in order filling or failure to deliver or perform.
Furthermore, once an order is filled, you are notified via the Platform and such an action is irreversible.
[emphasis added]
B2C2 relied specifically on the italicised portion, which we will refer to as “the Irreversible Action Clause”, to argue that Quoine breached the Agreement by unilaterally cancelling the Disputed Trades.
23 As part of Quoine’s defence, it asserted that in addition to the Agreement, the services it provided to the users of the Platform were governed by all other terms and conditions posted on Quoine’s website, including those contained within the “‘Risks in Virtual Currency Transactions’ statement ... which was posted on [Quoine’s] website on 22 March 2017” (“the Risk Disclosure Statement”).
24 The Risk Disclosure Statement began with an explanatory paragraph:
There are many risks associated with virtual currency transactions. Please read the following to gain a sufficient understanding of the features, mechanisms, and risks in virtual currency transactions. Please execute your transaction with understanding such features, mechanisms and risks without objection and based on your own judgment and responsibility.
25 A class of risks designated “System Risks” was set out as follows in the Risk Disclosure Statement:
8. System Risks
Please be aware that in the event that a customer loses any opportunity (e.g., the Company is unable to receive a customer’s order and the customer therefore loses the opportunity to place the order, losing profits that he or she ordinarily would have earned) due to emergency system maintenance or a system failure, the Company will not be able to execute a process to fix the error because it will be unable to identify the order details that the customer intended to place (the original order). The system may produce an aberrant value for the buy or sell price of the virtual currency calculated by the system. Please be aware that if the Company finds that a transaction took effect based on an aberrant value, the Company may cancel the transaction. Your understanding is appreciated.
[emphasis added]
26 Quoine contended at trial, and on appeal, that when the Risk Disclosure Statement was posted on Quoine’s website in March 2017, it introduced a new term into the Agreement (referring to the italicised text in the preceding paragraph) which permitted Quoine to cancel a transaction if it had taken place at an “aberrant value”. We will refer to this as “the Aberrant Value Clause”.
The events leading to the Disputed Trades
27 Against that background, we outline the events that led to the Disputed Trades. On 13 April 2017, Quoine changed some login passwords for several critical operating systems on the Platform but, due to an oversight, certain necessary changes to the Quoter Program were not implemented (Judgment at [71]). The effect of this was that the Quoter Program could not access external market data from other cryptocurrency exchanges, which prevented it from generating new ETH/BTC orders on the Platform for market-making purposes (Judgment at [72]). Given that Quoine was the primary market-maker on the Platform at the material time, the fact that it stopped placing new orders resulted in the Platform’s order book gradually thinning out.
28 It was not until 19 April 2017 that the pre-existing ETH/BTC orders depleted to the point that Mr Lozada described the Platform’s order book as “abnormally thin”. This affected the Counterparties’ live P&L and caused the Platform to conclude that they were in margin sell-out positions (see [12]–[13] above). This, in turn, triggered margin calls against them and the Platform automatically force-closed their positions by placing market orders to buy ETH at the best available price on the Platform, in order to repay the Counterparties’ ETH loans. When the margin call was triggered against Pulsar, the market orders to buy ETH were first matched with the lowest priced sell orders available on the Platform’s order book at that time. Working its way through the sell orders, Pulsar, through the Platform’s algorithm, bought ETH at prices that were increasingly higher in order to fulfil the margin call (see Judgment at [78]–[79]). It became apparent that the loss of liquidity on the Platform also caused the trading systems of other users of the Platform to place sell orders at increasingly higher prices.
29 As for B2C2, the Platform’s thinning order book resulted in the PureQuote strategy of the Trading Software having no or insufficient input from the Platform’s order book (see [16]–[17] above). This caused the deep price of 10 BTC to 1 ETH for the sell orders for ETH, which had been programmed into the PureQuote strategy, to take effect in the Trading Software’s algorithm such that the Trading Software eventually placed sell orders to sell ETH at prices of 9.99999 BTC and 10 BTC to 1 ETH on the Platform (see [18] above). When B2C2’s orders became the lowest priced sell orders available on the Platform’s order book, they matched with Pulsar’s market orders to buy ETH. The force-closure of Mr Tomita’s positions was slightly different, but it was not suggested that anything turned on this (Judgment at [80]). Eventually, a total of 13 trades were concluded between B2C2 and the Counterparties, these being the Disputed Trades which were concluded at approximately 250 times what had been the prevailing market rate of around 0.04 BTC for 1 ETH. The relevant amount of BTC was accordingly debited from the Counterparties’ accounts and credited into B2C2’s account, while the corresponding amount of ETH was debited from B2C2’s account and credited into the Counterparties’ accounts (see [2] above).
30 Mr Lozada, upon becoming aware of the Disputed Trades, and with the strenuous encouragement of Pulsar, decided that these should be cancelled and the resulting debit and credit transactions reversed. The Disputed Trades were thus cancelled on 20 April 2017 by Quoine with the corresponding debit and credit transactions reversed.
The decision below
31 At the trial, B2C2 argued that Quoine’s unilateral cancellation of the Disputed Trades and reversal of the settlement transactions were in breach of contract and/or breach of trust. In response, Quoine raised the following defences to defend its unilateral cancellation of the Disputed Trades: (a) it was contractually entitled to cancel the trades by reason of two terms it sought to imply into the Agreement; (b) it was contractually entitled to cancel the trades by reason of the Aberrant Value Clause in the Risk Disclosure Statement; (c) the Trading Contracts were void on the basis of unilateral mistake at common law, or, in the alternative, voidable on the basis of unilateral mistake in equity; (d) the Trading Contracts were void on the basis of common mistake at common law; and (e) B2C2 would otherwise be unjustly enriched at the expense of the Counterparties. As mentioned, the Judge rejected all of Quoine’s defences and allowed B2C2’s claims for both breach of contract and breach of trust. We briefly set out the Judge’s findings in relation to B2C2’s claims and Quoine’s defences.
The contractual relationship
32 We first set out the Judge’s findings in relation to the contractual relationship between B2C2, Quoine and the Counterparties. This in particular shaped the Judge’s analysis of Quoine’s defence of unilateral mistake. B2C2 argued that Quoine was a common counterparty to all the trades made between the users of the Platform. On this basis, it was said that the concluded trades took the form of back-to-back contracts between the buyer and Quoine at one end, and the seller and Quoine at the other. Quoine, on the other hand, contended that the trades were concluded directly between the buyer and the seller, and that it only provided the Platform on which the trades would be conducted. The Judge agreed with Quoine and held that the contract in respect of each concluded trade was made directly between the buyer and the seller (see Judgment at [131]), though each of the parties was also contractually bound with Quoine under the Agreement which governed the terms of use of the Platform.
B2C2’s breach of contract and breach of trust claim
33 With respect to B2C2’s breach of contract claim, the Judge held that Quoine’s unilateral cancellation of the Disputed Trades was a breach of the Agreement, and in particular of the Irreversible Action Clause (see [22] above; Judgment at [136]–[137]).
34 As for B2C2’s breach of trust claim, the Judge found that Quoine held the BTC in B2C2’s account, which had been credited following the Disputed Trades, on trust for B2C2, and so Quoine was in breach of trust when it reversed the relevant credit transaction (see Judgment at [146]). The Judge found that Quoine held the BTC on trust for B2C2 on the basis that the “three certainties” had been fulfilled, namely, certainty of subject matter, certainty of objects and certainty of intention to create a trust. First, the Judge held that there was certainty of subject matter because cryptocurrency should be treated as property that was capable of being held on trust, on the basis that it satisfied the definition of a property right in National Provincial Bank v Ainsworth [1965] 1 AC 1175 (“Ainsworth”) at 1248, in that it was definable, identifiable by third parties, capable in its nature of assumption by third parties, and had some degree of permanence or stability. In any case, the Judge noted, Quoine did not dispute this (Judgment at [142]). Second, the Judge found that there was certainty of objects, given that the beneficiaries were identifiable from the individual accounts of the users of the Platform (Judgment at [143]). Third, the Judge found that there was certainty of intention, based on the fact that the users’ assets were managed separately from Quoine’s own assets, thereby indicating that Quoine intended to hold the assets of an individual user on trust for that user (Judgment at [145]).
Quoine’s defences
35 Turning then to Quoine’s defences, Quoine first sought to contend that two terms ought to be implied into the Agreement (collectively, “the Proposed Implied Terms”), namely:
(a) Quoine may reverse any trades which had been executed at any abnormal rate or price as a result of any technical and/or system failure and/or error affecting the Platform; and
(b) Quoine may reverse any trades resulting from orders placed in breach of the terms of the Agreement, including any trade resulting from any orders which amounted to market manipulation and/or abuse and, therefore, entailed an “unauthorised use” of the Platform.
36 The Judge found that the Proposed Implied Terms, which would allow Quoine to reverse trades on the Platform under certain circumstances, contradicted the Irreversible Action Clause which was an express term of the Agreement (Judgment at [152]). The Judge also found that in any event, the Proposed Implied Terms were not necessary to give business efficacy to the Agreement. It was instead the Irreversible Action Clause, the express term, that brought certainty to the Platform and led to a clear apportionment of risk (Judgment at [153]–[154]).
37 Second, Quoine argued that the Aberrant Value Clause in the Risk Disclosure Statement (see [25]–[26] above) allowed it unilaterally to cancel the Disputed Trades. The Judge, however, disagreed that this had been incorporated into the Agreement.
38 Third, Quoine argued that it was entitled to cancel the Disputed Trades because the Trading Contracts were void on the basis of unilateral mistake at common law. Quoine submitted that the Counterparties had entered into the Trading Contracts under two mistaken beliefs: (a) that it was necessary to close out their positions in response to the margin calls which the Platform made on them (“the First Mistaken Belief”); and (b) that they were buying ETH for BTC under contracts at prices which accurately represented or did not deviate significantly from the true market value and/or price of ETH relative to BTC on 19 April 2017 (“the Second Mistaken Belief”). Quoine argued in the alternative that the Trading Contracts were voidable on the basis of unilateral mistake in equity. Quoine submitted that by deliberately including the deep prices in the Trading Software, B2C2’s conduct was unconscionable and amounted to sharp practice.
39 In considering the issue of unilateral mistake, the Judge held that where it was necessary to assess the state of mind of a party in situations where acts of deterministic computer programs were in issue, regard should be had to the state of mind of the programmer of the relevant program at the time it was written – which in the present case would be that of Mr Boonen (Judgment at [211]). The Judge rejected Quoine’s contention that the court should instead approach the matter on the basis of considering what the contracting parties were likely to have known and intended if, hypothetically, they had met on the “floor of the exchange” for the purpose of entering into the Disputed Trades on 19 April 2017 (Judgment at [200]). The Judge found this approach wholly artificial given that the contracting parties had chosen to use deterministic algorithms as the means of entering into the Trading Contracts (see Judgment at [204]).
40 The Judge held that the Trading Contracts were not void on the basis of unilateral mistake at common law. With regard to the First Mistaken Belief, the Judge found that Mr Tseung Wai Kit (“Mr Tseung”), a co-founder of Pulsar, did genuinely hold such a mistaken belief. But the Judge was of the view that this was not a mistaken belief as to a term of the Trading Contracts (see Judgment at [220] and [222]). As regards the Second Mistaken Belief, not only did the Judge find that Mr Tseung did in fact hold such a mistaken belief, the Judge also held that it was a mistake as to a term of the Trading Contracts (Judgment at [227]–[228]).
41 In considering whether Mr Boonen had actual knowledge of the First Mistaken Belief and the Second Mistaken Belief, contrary to Quoine’s assertions, the Judge did not think that there was any malicious motive on Mr Boonen’s part in designing the Trading Software and including the deep prices in the manner that he did. Mr Boonen had settled on programming a deep price of 10 BTC to 1 ETH for the sell orders for ETH (see [18] above) after reducing it twice, first from an initial price of “a very high number” of BTC to 1 ETH to 50 BTC to 1 ETH, and then to 10 BTC to 1 ETH, and the Judge accepted that these reductions were done for a variety of legitimate reasons (see Judgment at [96]–[97]). The Judge also accepted that although Mr Boonen knew, at the time he designed the Trading Software, that it would place sell orders at the deep price if the Platform’s order book became empty, Mr Boonen did not ever consider that there was a real possibility of the deep price orders being executed (see Judgment at [123]). The Judge found that Mr Boonen’s design of the Trading Software and choice of the deep price were chiefly directed to ensuring that the Trading Software remained operational rather than exploiting the existence of illiquidity on the Platform or a thinning order book (see Judgment at [121]). The Judge concluded that while Mr Boonen’s programming was opportunistic in the sense that B2C2 should be best placed to make a profit if the unlikely became a reality, it was in no respect sinister (Judgment at [125]).
42 The Judge also accepted Mr Boonen’s evidence that he was unaware of the glitches causing illiquidity on the Platform until after the events of 19 April 2017. While Mr Boonen had also made changes to the Trading Software’s code on 13 April 2017, the Judge accepted that he had done so independent of and without knowledge of Quoine’s failure, on the same day, to take certain necessary steps to secure the continued proper functioning of the Quoter Program (see Judgment at [100]–[102]). There was also no evidence to show that Mr Boonen had turned his mind to the relationship between the margin traders and those who had loaned them money, much less programmed the Trading Software to exploit this relationship by causing its deep prices to consummate force-closures of the positions of margin traders (see Judgment at [124] and [223]). The Judge found that Mr Boonen also did not turn his mind to the circumstances that might lead to trades being executed at the deep prices (Judgment at [230]). Therefore, the Judge concluded that Mr Boonen did not have actual knowledge of the First Mistaken Belief and the Second Mistaken Belief. He accordingly found that there was no basis for Quoine to rely on unilateral mistake at common law to void the Trading Contracts.
43 The Judge also held that the Trading Contracts were not voidable on the basis of unilateral mistake in equity, because he found Mr Boonen had no constructive knowledge of either the First Mistaken Belief or the Second Mistaken Belief (see Judgment at [233]). The Judge further held that there was no impropriety on B2C2’s part, and its conduct, even if opportunistic, was not sinister (Judgment at [236]).
44 Fourth, Quoine argued that it was entitled to cancel the Disputed Trades because the Trading Contracts were void on the basis of common mistake at common law. Quoine contended that at the time the Disputed Trades were concluded, both the Counterparties and B2C2 wrongly assumed that (a) the Platform was working correctly and (b) the trades were therefore being transacted under normal market conditions, meaning at prices which accurately reflected or did not deviate significantly from the true market value and/or price of ETH relative to BTC on 19 April 2017. The Judge held that this defence failed because even if Quoine held a mistaken belief as to the prices at which the Disputed Trades were to be concluded, Mr Boonen (and thus B2C2) did not (see Judgment at [237]–[239]).
45 Fifth, Quoine argued that it was necessary to cancel the Disputed Trades in order to prevent B2C2 from being unjustly enriched at the expense of the Counterparties. The Judge acknowledged that as a matter of legal formality, a cause of action in unjust enrichment would only accrue if B2C2 succeeded in its suit, and it would technically accrue to the Counterparties and not to Quoine. However, since B2C2 had not applied for this defence to be struck out, the Judge decided to treat it as a potential defence (Judgment at [242]–[244]). He found that the fact that the Trading Contracts were valid and enforceable operated as a bar to any action in unjust enrichment (Judgment at [247], [249] and [252]).
46 As for the relief sought by B2C2, the Judge declined to allow B2C2’s prayer for specific performance, on the basis that the price of BTC at the time of the Judge’s decision was significantly higher than that when the Disputed Trades were concluded, and this would therefore cause substantial hardship to Quoine (Judgment at [256]).
The issues on appeal
47 The issues that arise in this appeal and that we will address in this Judgment are the following:
(a) What were the contractual arrangements between B2C2, Quoine and the Counterparties?
(b) Was Quoine contractually entitled to cancel the Disputed Trades by reason of any express or implied terms of its contract with B2C2?
(c) In relation to Quoine’s defence of unilateral mistake, did the Judge err in finding that Mr Boonen did not have actual or constructive knowledge of a relevant mistaken belief on the part of the Counterparties in relation to the Disputed Trades?
(d) Were the Trading Contracts void on the basis of common mistake at common law?
(e) Was Quoine entitled to cancel the Disputed Trades on the basis that B2C2 would otherwise be unjustly enriched at the expense of the Counterparties?
(f) Did Quoine hold B2C2’s cryptocurrency assets on trust?
Our decision
Issue (a): The contractual relationships
48 We begin with the question of how the contractual relationships between B2C2, Quoine and the Counterparties should be characterised. As the Judge noted, the resolution of this question is relevant to the subsequent analysis on unilateral mistake, in so far as it is first necessary to identify which contract was affected by any asserted mistake and who the mistaken party was (Judgment at [129]).
49 B2C2 contended that the correct way to understand the contractual relationships was to see the Trading Contracts as part of a “spider’s web” of contracts, with Quoine as the central counterparty to both sides of each trade. In this way, the Platform would enable trading to be conducted on an anonymous basis as between the ultimate buyers and sellers. B2C2 argued on this basis that there could be no operative mistake as to the terms of the trading contracts made between Quoine and B2C2 in relation to the Disputed Trades. Any alleged unilateral mistake would be that of the Counterparties, and so Quoine’s defence of unilateral mistake would fail at the threshold. Quoine, on the other hand, argued that the Agreement made it plain that Quoine merely provided a service to the users of the Platform, and that the trading contracts were made directly between the buyers and the sellers.
50 We affirm the Judge’s analysis of the contractual arrangements between the various parties, in which he accepted Quoine’s characterisation of the contractual relationships. In essence, he held that the Trading Contracts were formed directly between B2C2 and the Counterparties (Judgment at [131]). The Trading Contracts constituted one of three categories of contracts the Judge identified, as follows (see Judgment at [126]):
(a) The first category was the “Platform contracts”, which governed the use of the services provided by the Platform, the parties to which were Quoine and the individual users of the Platform, and the terms of which were found in the Agreement.
(b) The second category was the “Margin contracts”, which concerned the arrangements based on which the margin traders would have their transactions financed. In the present case, the parties to these were Quoine and the Counterparties.
(c) The third category was the “Trading contracts”, which were the contracts that came into existence when trades were concluded and governed the relationship between the parties to those trades. For the avoidance of doubt, we refer to this category of contracts as “trading contracts”. As for the specific trading contracts that underlay the Disputed Trades, we refer to these as Trading Contracts, as noted at [4] above. The Judge held that B2C2 and the Counterparties were the parties to the Trading Contracts in question in this case.
51 In our judgment, this characterisation of the trading contracts best accords with the terms of the Agreement, which made clear that Quoine was merely providing a service to the users of the Platform which would transact with one another in the exchange of cryptocurrencies on the Platform.
52 First, the “General Terms” of the Agreement stated as follows:
Quoine is a platform that provides services that allow the exchange of virtual currencies such as [BTC] for fiat currencies. …
This Agreement sets forth the terms and conditions governing the access and use of the Platform. …
The same was repeated under the heading “Membership And Users Of The Platform”.
53 Second, under the heading “Fees, Funding & Withdrawals”, it was stated that “[a]s compensation for [t]he Platform services … [Quoine] charges a fee on each transaction initiated by [the users of the Platform]”. This lent support to the contention that Quoine was merely providing a service to the users of the Platform for which it charged a fee.
54 Third, under the heading “Trading & Order Execution”, it was stated that:
Only registered users or Members are allowed to buy, sell and use the services provided by the Platform. The exchange functions of [t]he Platform will fill in orders at the best possible available market price. …
This suggested that Quoine’s primary function was to operate the Platform which would fill orders placed by its users at the best available market price.
55 We therefore agree with the Judge that Quoine was only providing the services available on the Platform and that it was the parties to the trading contracts that were responsible for whether and on what terms they would place or fill orders. This, however, is not to say that there was no contractual relationship between Quoine and the users of the Platform. First, as we have noted at [50(a)] above, Quoine as the provider of the Platform’s services entered into Platform contracts with the users of the Platform. Second, as noted at [50(b)] above, Quoine could be and was party to Margin contracts. Third, given that Quoine also acted as a market-maker on the Platform, there would have been situations where Quoine was the counterparty to a concluded trade, in which case it would have been party to a trading contract with a user of the Platform. However, the trades that we are concerned with in the present case, specifically the Disputed Trades, did not involve that situation.
56 In addition, we do not accept B2C2’s other arguments as to why the contractual relationships ought to be seen as a “spider’s web” of contracts. B2C2 contended that Quoine must have interposed itself as a “middle-man” in any trade and was obliged to underwrite the risk of a counterparty not being able to fund a trade, given that trading on the Platform was conducted anonymously and the users of the Platform would not have visibility of the creditworthiness of potential counterparties. We do not accept this because the terms of the Agreement seem to us to say the very opposite:
Trading & Order Execution
[Quoine] and its affiliates assume no responsibility for any loss or damage incurred by members or users as a result of their use of [t]he Platform
Representations and Warranties
As a Member or User, you agree to the following:
d. You agree that use of the service is at your own risk and you are solely responsible for interactions … with any other Member or User of the service. [Quoine] … assume[s] no responsibility whatsoever for harm that may come to you as a result of your interactions with any other Member or User of the service
[emphasis added]
57 It is evident from these terms that Quoine had expressly sought to disclaim any liability for losses that users of the Platform might suffer arising from their use of the Platform. This would include the credit risk of a counterparty.
58 We also do not accept B2C2’s argument that the trading contracts could not have been formed directly between the buyers and sellers on the Platform because all trading was done anonymously. Even if the traders were unaware of who their potential counterparties might be before the conclusion of the trades, once a trade was completed, the identity of the parties to the trade became ascertainable by way of a unique user identification number (Judgment at Annex 3). Further, there is no difficulty in the fact that the traders would not know who their counterparties were until after the trades were concluded, given that they were agreeing in effect to enter into contracts with such other users of the Platform as accepted their bids or asks as the case might be. We will discuss this in greater detail when we examine the formation of contracts by algorithmic trading (at [94]–[96] below).
Issue (b): Express and implied terms of the Agreement
59 Quoine argued that there were terms in the Agreement, both express and implied, which allowed it to cancel the Disputed Trades. We do not accept these contentions for the following reasons.
The Aberrant Value Clause
60 Quoine argued on appeal (as it did at trial) that the Aberrant Value Clause in the Risk Disclosure Statement (see [25]–[26] above) entitled it to cancel the Disputed Trades. It also contended that the Unilateral Variation Clauses (see [20]–[21] above) allowed it unilaterally to vary the terms of the Agreement when it uploaded the Risk Disclosure Statement on its website without giving notice to the users of the Platform. On the other hand, B2C2 maintained that neither the Risk Disclosure Statement nor the Aberrant Value Clause had been incorporated into the Agreement. B2C2 further submitted that even if the Aberrant Value Clause had been incorporated into the Agreement, it did not assist Quoine because it would only have permitted Quoine to cancel transactions in which the prices of the trades had been incorrectly calculated by Quoine’s system due to a “system failure” or “malfunction”. “System failure” and “malfunction” were defined terms in the Risk Disclosure Statement, and required there to be a situation where customers could “no longer … place orders over the Internet”, or the orders “arrive[d] late or [could not] be placed” (see also [68] below). The Disputed Trades were not such transactions.
61 The Judge found that the Unilateral Variation Clauses, properly construed, did not allow Quoine to change the terms of the Agreement without its drawing this to the attention of the users of the Platform in some way. Quoine thus had to provide notice to the users in order to effect a change to the terms of the Agreement. The Judge also found that merely uploading the Risk Disclosure Statement on Quoine’s website without any indication that it was intended to have legal effect did not constitute such notice that changes had been made to the Agreement. This was because the Risk Disclosure Statement purported only to be a summary of risks with no indication that it was intended to have legal effect (see Judgment at [174]–[176]).
62 We affirm the Judge’s analysis on this point. Although it was not necessary for Quoine to obtain the consent of a user of the Platform before changing the terms of the Agreement, we are satisfied that a user had to have reasonable means of knowing that there had been a modification to the terms and what that modification was before any such change could have legal effect. Armed with such knowledge, the user could then decide whether or not it would continue to use the Platform. In this case, all Quoine did was to upload the Risk Disclosure Statement onto its website without more. This could not on any basis have sufficed to constitute the requisite notice.
63 Further, in determining whether notice of changes to the Agreement had to be given, we also have regard to the Unilateral Variation Clauses, which include the Without Notice Clause (see [21] above). We reproduce the Without Notice Clause here:
You agree that [Quoine] reserves the right to change any of the terms, rights, obligations, privileges or institute new charges for access to or continued use of services at any time, with or without providing notice of such change. You are responsible for reviewing the information and terms of usage as may be posted from time to time. Continued use of the services or non-termination of your membership after changes are posted or emailed constitutes your acceptance or deemed acceptance of the terms as modified. [emphasis added]
64 We note that the Without Notice Clause expressly stated that Quoine was permitted to effect changes to any of the terms, rights, obligations, privileges or to institute new charges for access to or continued use of services “without providing notice of such change”. However, the changes contemplated by this clause were restricted only to changes pertaining to “access to or continued use” of Quoine’s services. We assume, without finding, that incorporating the Aberrant Value Clause into the Agreement would be such a change. Even so, we think that it was implicit within the Without Notice Clause that a user of the Platform ought to be given the opportunity to consider the change in question, so that it could decide whether to continue using Quoine’s services. We say this for three reasons.
65 First, the Without Notice Clause stated that changes to the terms would be “posted or emailed”, which suggested that Quoine would take positive steps to bring the changes to the attention of the users of the Platform. Second, the clause stated that continued use of Quoine’s services after such changes had been posted or emailed would amount to an affirmation or deemed acceptance of the terms as modified. This part of the clause would not make sense if the users did not have an awareness of those modified terms to begin with. Third, the “General Terms” of the Agreement provided that the users of the Platform were responsible for reviewing the changes to the Agreement:
… This Agreement may be changed at any time by [Quoine]. It is the responsibility of the User to keep himself/herself updated with the current version of the Agreement. Users and Members waive any claim regarding this issue. … [emphasis added]
This contemplated that users would have the opportunity to review the changes in the first place, which in turn necessitated them being given notice of these changes.
66 For these reasons, we do not think that the requirement of notice was displaced by the Without Notice Clause. Sufficient notice of the incorporation of the Aberrant Value Clause as a term of the Agreement had to be given to users of the Platform before it could be regarded as having been incorporated into the Agreement. We acknowledge that pursuant to the “General Terms” of the Agreement, the onus was on the users of the Platform to keep themselves updated with the latest version of the Agreement. However, there must at least have been some indication on Quoine’s website to inform users about amendments to the Agreement. We therefore agree with the Judge that simply uploading the Risk Disclosure Statement onto Quoine’s website without alerting users to the fact that a new term had been introduced was insufficient to constitute the requisite notice (see Judgment at [176]).
67 Moreover, as the Judge pointed out, the Risk Disclosure Statement appeared to be nothing more than a summary of the various risks that users would expect to face when using the Platform (see [24] above), and there would have been no reason for a user reading it to think that amendments to the terms of the Agreement were embedded within it. We also find no reason to disturb the Judge’s finding that there was nothing on Quoine’s website, the Agreement, or the Risk Disclosure Statement to alert the user to the need to read these documents together.
68 In any case, even if the Aberrant Value Clause had been incorporated into the Agreement, we do not think that it had the effect that Quoine suggested it did of entitling it to cancel the Disputed Trades. The relevant portion of the Risk Disclosure Statement which contained the Aberrant Value Clause (the italicised text below) stated:
There is the risk that a system failure may occur due to changes to the external environment, etc., and this may disrupt a customer’s ability to execute transactions. A “system failure” is when [Quoine] finds that a malfunction (not including obstructed network lines or problems with a customer’s computer, etc.) has clearly arisen in the system required to provide [Quoine’s] services, and customers are no longer able to place orders over the Internet ([Quoine’s] website, mobile site, or applications) or customers’ orders arrive late or cannot be placed.
Please be aware that in the event that a customer loses any opportunity (e.g., [Quoine] is unable to receive a customer’s order and the customer therefore loses the opportunity to place the order, losing profits that he or she ordinarily would have earned) due to emergency system maintenance or a system failure, [Quoine] will not be able to execute a process to fix the error because it will be unable to identify the order details that the customer intended to place (the original order). The system may produce an aberrant value for the buy or sell price of the virtual currency calculated by the system. Please be aware that if [Quoine] finds that a transaction took effect based on an aberrant value, [Quoine] may cancel the transaction. Your understanding is appreciated.
[emphasis added]
69 In our judgment, having regard to these portions of the Risk Disclosure Statement, the Aberrant Value Clause was meant to apply in situations where there was a discrepancy between the value input by a user of the Platform and the value generated or calculated by the system “due to emergency system maintenance or a system failure”. In short, this would be the case where the value generated by the Platform was not the value intended by the user. We come to this conclusion because of the words “[Quoine] will not be able to execute a process to fix the error because it will be unable to identify the order details that the customer intended to place” [emphasis added]. It would be unsurprising in such circumstances that Quoine could cancel the transaction; this was simply never an intended transaction. In the present case, however, the only alleged “malfunction” in the Platform’s system was the Quoter Program not being able to access external price data and therefore not being able to generate new orders, which led to a gradual thinning out of the Platform’s order book. Apart from that, the market orders placed by the Platform on the Counterparties’ behalf were executed exactly as intended, which was to purchase ETH at the best available price on the Platform at the material time. The prices of B2C2’s sell orders for ETH, at prices of 9.99999 BTC and 10 BTC to 1 ETH, which orders were matched with the Counterparties’ market orders, were similarly not “aberrant” in the sense that they were exactly what B2C2 intended them to be; they were simply the result of the pre-programmed deep price of 10 BTC to 1 ETH in the PureQuote strategy taking effect (see [29] above). The Disputed Trades were concluded based on prices correctly quoted by the Trading Software for B2C2, and market orders that were correctly placed by the Platform for the Counterparties.
70 Aside from this, if we were to accept Quoine’s position, it would seem to lead to the conclusion that the Aberrant Value Clause enabled Quoine to undertake some sort of “reasonableness” check on transactions entered into by others and then to cancel whatever transactions it thought was beyond the bounds of reason. We do not think this can possibly be correct.
The Proposed Implied Terms
71 We turn then to Quoine’s contention that it was entitled to cancel the Disputed Trades on the basis of the Proposed Implied Terms (see [35] above). We agree with the Judge that the terms sought to be implied are incompatible with the Irreversible Action Clause (see [22] above). The Proposed Implied Terms would allow Quoine to reverse trades on the Platform which (a) had been executed at abnormal prices as a result of any error affecting the Platform, or (b) resulted from orders placed in breach of the terms of the Agreement. The Irreversible Action Clause, however, provided that “once an order is filled, [the user is] notified via the Platform and such an action is irreversible”.
72 In Sembcorp Marine Ltd v PPL Holdings Pte Ltd and another and another appeal [2013] 4 SLR 193 at [94]–[95], we held that a term may only be implied into a contract where the parties did not contemplate the issue at all and so left a gap in their contractual arrangements. If the question is whether the Agreement made provision for whether and when a concluded trade could be reversed, the answer to this was that the Irreversible Action Clause made it clear that once an order had been filled and the parties to the trade had been notified by the Platform, such an action was irreversible. In this regard, the Proposed Implied Terms are inherently incompatible with the Irreversible Action Clause given that they purport to allow Quoine to reverse trades which had been executed and had become irreversible.
73 Quoine sought to meet this by contending that the Irreversible Action Clause only applied to the users of the Platform and not to Quoine itself as the owner and operator of the Platform. We disagree. It is clear from the plain words of the Irreversible Action Clause and the adjacent terms that it was meant to apply to all orders that had been filled, regardless of whether it was a user of the Platform or Quoine itself that was seeking to reverse the trades. The Irreversible Action Clause (the italicised text below) was found under the heading “Trading & Order Execution”, which provided as follows:
Only registered users or Members are allowed to buy, sell and use the services provided by the Platform. The exchange functions of [t]he Platform will fill in orders at the best possible available market price. Note that as markets move continuously, the prices displayed on user interfaces, on our web app or on mobile apps are in no way guaranteed. The Platform, however, has been designed to allow members to fill at best possible prices and in a timely manner. Nevertheless [Quoine] will not be liable under any circumstances for the consequences of any delay in order filling or failure to deliver or perform.
Furthermore, once an order is filled, you are notified via the Platform and such an action is irreversible.
[Quoine] and its affiliates assume no responsibility for any loss or damage incurred by members or users as a result of their use of [t]he Platform …
[emphasis added]
74 As the Judge noted at [151] of the Judgment, the Agreement governed the contractual relationship between Quoine and all the users of the Platform. Therefore, the terms of the Agreement would presumptively be equally applicable to Quoine. This view is supported by the sentence immediately preceding the Irreversible Action Clause, which sought to limit Quoine’s liability for the consequences of any delay in the filling of an order or any failure to deliver or perform. Similarly, the sentence that immediately followed the Irreversible Action Clause limited Quoine’s liability for any loss incurred by a user as a result of its use of the Platform. These sentences would have been unnecessary if the provisions under the heading “Trading & Order Execution” did not apply to Quoine. Furthermore, the Irreversible Action Clause itself provided that once an order had been filled, and the users of the Platform had been notified through the Platform, “such an action”, which in this context could only mean the filling of the order, was irreversible. As the Judge noted at [152] of the Judgment, the word “irreversible” was plainly not qualified in any way and drew no distinction between the users of the Platform and Quoine as the operator of the Platform.
75 Subsequent to the hearing of this appeal, Quoine drew our attention to an article which commented on several aspects of the Judgment: see Kelvin Low & Eliza Mik, “Unpicking a Fin(e)tech Mess: Can Old Doctrines Cope in the 21st Century?”, Oxford Business Law Blog, 8 November 2019 (accessed 14 November 2019) (“Low & Mik”). The authors argued that if Quoine itself was not a counterparty to the Disputed Trades, then it must have been acting as agent for B2C2 and the Counterparties, and the users of the Platform in general, for the purposes of matching trades. On that basis, the authors contended that the Irreversible Action Clause should be construed to mean that only the instructions given by the users to Quoine as agent were irreversible, and not the trades themselves. We respectfully disagree.
76 First, it appears that the authors’ underlying premise was that the relationship between Quoine and the users of the Platform was binary – either Quoine was the central counterparty to all trades on the Platform, or it acted as agent for the users. However, we have held that the trading contracts were formed directly between the parties to the respective trades (see [50(c)] above) and this did not require a finding that Quoine acted as agent for the parties. We consider the function of the Platform to be somewhat similar to that of an Internet messaging application, which allows users of the application to communicate with one another. If a contract is formed between two users on this messaging application, it would be artificial to suggest that the owner or operator of the Platform acted as an agent for these users. There was no suggestion that trading instructions were first passed to Quoine as a third party before they were uploaded on the Platform. Second, and more fundamentally, we consider the authors’ interpretation of the Irreversible Action Clause to be contrary to the plain words of the clause. The irreversibility applies to the action of filling an order, as we have held at [74] above.
77 For these reasons, we do not think that it is permissible to imply the terms that Quoine was contending for.
Issue (c): Unilateral mistake
78 We turn to the central feature of Quoine’s defence, and one which the Judge acknowledged was “the most troubling and difficult in this case” (Judgment at [183]). Quoine relied on both unilateral mistake at common law and in equity to argue that the Trading Contracts should be vitiated, and therefore that its cancellation of the Disputed Trades was warranted. There is a threshold question whether Quoine, which was not a party to the Trading Contracts, could invoke the doctrine by way of defence to the claim that it breached its contract with B2C2 (meaning, the Irreversible Action Clause in the Agreement). In other words, the question is whether Quoine would necessarily be excused of its breach even if the Trading Contracts were vitiated. We assume, without deciding, that the defence of unilateral mistake was available to Quoine in the indirect way argued. The parties did not dispute this specific point. As noted at [45] above and [132] below, a broadly similar approach was taken by the Judge and by us in the context of the claim in unjust enrichment. Leaving this to the side, the complexity arose because the defence of unilateral mistake was being raised for the first time, as far as we are aware, in the context of algorithmic trading and the formation of contracts by such means. B2C2 and the Counterparties had entered into the Trading Contracts by means of B2C2’s and Quoine’s deterministic algorithms. B2C2 and the Counterparties therefore did not know until after the Trading Contracts had been entered into, whether an offer would be made or accepted, or the terms on which a contract would be concluded. How then could the doctrine of unilateral mistake apply in this situation, where the contracting parties did not know the specific terms on which the Trading Contracts would be entered into? It is therefore necessary to consider the principles behind the doctrine before considering its application to this novel situation.
79 We state at the outset that we approach this issue of unilateral mistake on the footing that as a court applying the common law, our task is to apply the existing law on the doctrine subject to incremental adjustments being made in order to suit the particular context. Algorithmic trading is an area of dynamic change, and it might be more appropriate for legislative intervention in due course, if it were thought that a more fundamental redesign of the applicable legal framework is called for. That is certainly not our view at this time and we consider that the existing body of law can be meaningfully adapted to deal with the situation at hand.
Doctrine of unilateral mistake at common law and in equity
80 We begin by setting out the requirements for unilateral mistake at common law and in equity, and in so doing, we highlight their differences in requirements and consequences. This was the subject of our decision in Chwee Kin Keong and others v Digilandmall.com Pte Ltd [2005] 1 SLR(R) 502 (“Digilandmall.com”). In essence, one party must have transacted while operating under a mistake as to a fundamental term of the contract (see Digilandmall.com at [34] and [80]). As we note below, there is a question as to whether this also applies in the context of the doctrine in equity. But beyond this:
(a) for unilateral mistake at common law, the non-mistaken party must have had actual knowledge of the mistaken party’s mistake, and if this is established, the contract will be rendered void; but
(b) for unilateral mistake in equity, the non-mistaken party must have had at least constructive knowledge of the mistaken party’s mistake and must have engaged in some unconscionable conduct in relation to that mistake, and if this is established, the contract will be voidable.
81 We begin with the rationale underlying the doctrine of unilateral mistake at common law. As we alluded to in Digilandmall.com, the reason for the doctrine is that “a party who is aware of the error made by the other party cannot claim that there is consensus ad idem” (at [31]). It follows that the doctrine is best understood by having regard to the principles governing offer and acceptance. A contract cannot be formed unless the contracting parties agree as to the terms of the contract. Unilateral mistake at common law voids a contract because the contracting parties have not in fact reached an agreement when one party is mistaken as to the terms put forward by the other party, and that other party knows this to be the case. In such circumstances, there is no correspondence between offer and acceptance. To explain this, it is helpful to set out what has been explained in The Law of Contract in Singapore (Andrew Phang Boon Leong gen ed) (Academy Publishing, 2012) at para 10.144:
… By [the theory of “promisee objectivity”], there is no contract where the non-mistaken party knows … that the mistaken party does not intend to contract on the intended terms. There is no departure from an “objective” view of agreement because the law, in looking at the non-mistaken party’s knowledge of the mistaken party’s intention is not asking what the mistaken party intended. Instead, it is looking at what the non-mistaken party had reason to believe for the purpose of interpreting the communication made by the mistaken party to the non-mistaken party. …
In short, where the non-mistaken party knows that the mistaken party made a mistake in communicating a term, the non-mistaken party cannot treat the mistaken party as having agreed to the term. Absent such knowledge, however, the position is otherwise because it would give rise to intolerable uncertainty in contractual arrangements if a party could be permitted to assert its own subjective view that it had operated under a mistake, even though there appeared objectively to be a concluded contract and the non-mistaken party was fairly operating on that basis.
82 Significantly, for the relevant mistake to void the contract, it must be about a term of the contract, and cannot merely be a mistaken assumption about the circumstances under which the contract was or would be concluded. A contract can be concluded as long as the contracting parties agree as to its terms, regardless of their beliefs and assumptions about the contract. This proposition was alluded to in the decision of Smith v Hughes (1871) LR 6 QB 597 (“Smith v Hughes”).
83 In Smith v Hughes, the plaintiff farmer sued the defendant racehorse trainer for breach of a contract for the sale of oats. The plaintiff had given the defendant’s manager a sample of the new oats that he intended to sell and the defendant agreed to purchase those oats of which he received a sample. The defendant subsequently refused to complete the contract on the ground that the contract had been for the sale and purchase of old oats. At the trial, it was disputed whether the plaintiff and the defendant’s manager discussed the subject of the oats being old oats. At the end of the trial, the judge put two questions to the jury: (a) whether the word “old” had been used with reference to the oats in the conversation between the plaintiff and the defendant’s manager; and (b) whether the plaintiff had believed that the defendant believed that he was contracting for old oats. The judge directed the jury to find for the defendant if either question was answered in the affirmative. The jury found for the defendant but did not give specific answers to the two questions.
84 On appeal, the court held that the judge’s direction in respect of the first question was correct. However, it found that the judge’s direction in respect of the second question was either wrong or likely to be misunderstood by the jury, and a new trial was therefore necessary. In the words of Hannen J, for the jury to find for the defendant pursuant to the second direction, “the jury should find not merely that the plaintiff believed the defendant to believe that he was buying old oats, but that he believed the defendant to believe that he, the plaintiff, was contracting to sell old oats” [emphasis added] (Smith v Hughes at 611).
85 The decisions of Cockburn CJ and Blackburn J too illustrate the point that the relevant mistake to void a contract, on the basis of unilateral mistake, had to be about a term of the contract, and not merely about the circumstances under which the contract was or would be concluded.
86 Blackburn J put it in these terms at 606–607:
… on the sale of a specific article, unless there be a warranty making it part of the bargain that it possesses some particular quality, the purchaser must take the article he has bought though it does not possess that quality. … even if the vendor was aware that the purchaser thought that the article possessed that quality, and would not have entered into the contract unless he had so thought, still the purchaser is bound, unless the vendor was guilty of some fraud or deceit upon him, and that a mere abstinence from disabusing the purchaser of that impression is not fraud or deceit … [emphasis added]
87 Cockburn CJ identified “the fallacy of confounding what was merely a motive operating on the buyer to induce him to buy with one of the essential conditions of the contract” [emphasis added] (at 606). If a contracting party made a mistake about the circumstances under which the contract was or would be concluded, caveat emptor would apply, and the contract would not be vitiated so long as the parties did reach an agreement on the terms of the contract. In emphasising this point, Cockburn CJ also observed that “the passive acquiescence of the seller in the self-deception of the buyer [in thinking that the oats were old oats]” would not entitle the buyer to avoid the contract (Smith v Hughes at 602–603).
88 The requirement that the relevant mistake to void a contract on the basis of unilateral mistake must concern a term of the contract was also applied more recently in the decision of the English High Court in Statoil ASA v Louis Dreyfus Energy Services LP (The “Harriette N”) [2008] 2 Lloyd’s Rep 685 (“Statoil”). In Statoil, the relevant question was whether a contract of compromise between the parties was binding on the claimant when its employee had made an error in calculating the amount of demurrage due from the defendant, because the claimant’s employee thought that the vessel in question had completed discharging her cargo on 13 October 2006 when in fact she only completed discharging on 24 October 2006. Prior to concluding the contract of compromise, the defendant’s employee realised that the claimant’s employee made this error but opted to say nothing about it. Aikens J held that it was not a term of the contract that the compromise was reached on the premise that the discharge had been completed on 13 October 2006 (at [91]). He accordingly held that there was no operative unilateral mistake as to a term of the contract, which therefore remained binding. Citing Smith v Hughes in coming to his decision, Aikens J framed the relevant proposition of law as follows (Statoil at [88]):
… if one party has made a mistake about a fact on which he bases his decision to enter into the contract, but that fact does not form a term of the contract itself, then, even if the other party knows that the first is mistaken as to this fact, the contract will be binding. … [emphasis added]
89 We turn next to the rationale behind the doctrine of unilateral mistake in equity. We held in Digilandmall.com that we have an equitable jurisdiction with regard to unilateral mistake and that this jurisdiction exists to assist us in achieving the ends of justice in appropriate cases (see Digilandmall.com at [74] and [77]). To invoke this jurisdiction, it must be shown that the non-mistaken party had constructive knowledge of the mistaken party’s mistake and further, that it was unconscionable for the non-mistaken party to insist on the performance of the contract because it had engaged in some unconscionable conduct or sharp practice in relation to that mistake (see Digilandmall.com at [80] and [83]).
90 There is a question as to whether unilateral mistake in equity can extend beyond a mistake as to a term of the contract, and related to this, whether a mistaken assumption about the circumstances under which the contract was or would be concluded can itself be an operative mistake. The English authorities seem to suggest, on balance, that there is no equitable jurisdiction to vitiate a contract for unilateral mistake and if there were, they appear to doubt whether it extends beyond a mistake as to a term of the contract: see Chitty on Contracts (H G Beale gen ed) (Sweet & Maxwell, 33rd Ed, 2018) (“Chitty”) at para 3-027; Edwin Peel, The Law of Contract (Sweet & Maxwell, 14th Ed, 2015) at para 8–058; Jack Beatson, Andrew Burrows & John Cartwright, Anson’s Law of Contract (Oxford University Press, 29th Ed, 2010) at p 278; see also Clarion Ltd and Others v National Provident Institution [2000] WLR 1888 at 1905C–1905H; Great Peace Shipping Ltd v Tsavliris Salvage (International) Ltd [2003] QB 679; Huyton SA v Distribuidora Internacional de Productos Agricolas SA de CV [2003] 2 Lloyd’s Rep 780; Statoil. The High Court of Australia in Taylor v Johnson (1983) 151 CLR 422 treated relief for unilateral mistake as to a fundamental term as equitable in character; see also N C Seddon & R A Bigwood, Cheshire and Fifoot Law of Contract (LexisNexis Butterworths, 11th Australian Ed, 2017) at para 12.44 in which it is said that an equitable principle of mistake has probably displaced any possible common law doctrine of mistake.
91 As for the position in Singapore, although there is a recognised equitable jurisdiction for dealing with unilateral mistake, the question as to whether this extends beyond a mistake as to a term of the contract remains open. In Digilandmall.com, the mistake in question was undoubtedly one as to a fundamental term of the contract, namely the price, and there was no detailed discussion about whether any other type of mistake could be relied upon to invoke the defence (see Digilandmall.com at [34] and [80]). It is true that in Digilandmall.com, the court did go on to observe that “[o]ne suggested way” to differentiate between unilateral mistake at common law and in equity would be to hold that the former was “limited to mistakes with regard to the subject matter of the contract”, while the latter “[could] have regard to a wider and perhaps open-ended category of ‘fundamental’ mistake” (at [75]). This, however, was not explored or developed in detail.
92 The issue of whether unilateral mistake in equity can extend beyond a mistake as to a term of the contract was not fully argued before us. In addition, we are satisfied that it is not necessary for us to determine this question in this case. Even on the Judge’s view of the relevant belief (the Second Mistaken Belief) being treated as a mistake for the purposes of the equitable jurisdiction, there are the further requirements of constructive knowledge of the mistake and unconscionability and those simply did not exist in this case.
93 If the doctrine of unilateral mistake is to be understood in terms of the principles governing offer and acceptance, or in other words, the formation of the contract, then, as Prof Goh suggested, the question of how the doctrine should apply to contracts made by computerised trading systems should be answered by first considering the more fundamental issue of how such contracts are formed. We therefore turn to consider this.
94 The decision of the English High Court in R (on the application of Software Solutions Partners Ltd) v Her Majesty’s Commissioners for Customs and Excise [2007] EWHC 971 (Admin) (“Software Solutions Partners”) is of some assistance. There, the court considered an automated electronic process of contracting involving the software of the applicant, Software Solutions Partners Ltd (“SSP”). Insurance brokers who used SSP’s software could enter into insurance contracts on behalf of their customers with insurers who were using the same software. A broker would input the details for the required insurance product into the software, which would calculate quotes available from those insurers based on pre-determined qualification criteria as agreed between the insurers and SSP, and also electronically determine whether the risk was acceptable to the insurers without referring it back to them. Once the customer accepted the price and terms of an insurance cover, the software would process the customer’s data automatically and generate the relevant policy contract and the relevant insurer would be bound by it. All the information necessary for contract formation was pre-programmed in the software according to parameters laid down by the insurer. The court concluded in these circumstances that the insurer using the software had, expressly or impliedly, invited the insurance broker to use the software as the medium for contract formation and undertook to be bound by the automatically generated policy contract even if the insurer was temporarily unaware of it (see Software Solutions Partners at [65] and [67]). Put another way, the insurer made a binding offer to provide insurance and the broker, on the customer’s behalf, could accept it and that would be effective when received by SSP’s information system (see Software Solutions Partners at [19]).
95 The court in Software Solutions Partners analogised that case to Thornton v Shoe Lane Parking Ltd [1971] 2 QB 163 where Lord Denning MR discussed the situation of a customer putting money into an automatic machine and being issued with a ticket. There, Lord Denning MR held that the offer was made when the proprietor of the machine held it out as being ready to receive money and the customer accepted the offer by inserting money into the machine (at 169).
96 What is clear in our case is that the Trading Contracts had been entered into pursuant to the parties’ respective deterministic algorithms. As was the case in Software Solutions Partners for the insurers using SSP’s software, the contracting parties and Quoine did not know beforehand that the Trading Contracts would be entered into; and they were also unaware of the specific terms on which the contracts would be concluded. These factors did not prevent the formation of the policy contracts in Software Solutions Partners, and, in our judgment, did not here prevent the formation of a contract at the point of time when an offer made by one algorithm was accepted by the other.
97 This was also the view of the Judge and it drove him, in our judgment, inevitably, to adopt a certain analytical model when considering the issue of unilateral mistake. Specifically, he refused to consider the matter by reference to what the position would have been and what the contracting parties were likely to have known, intended and agreed had they had face-to-face negotiations at a hypothetical meeting on the “floor of the exchange” to enter into the Trading Contracts, at the time these were entered into, because this was simply not how they had agreed to form their contracts. Instead, they had decided to form contracts using the relevant deterministic algorithms (see Judgment at [200] and [204]). We agree with this characterisation of the parties’ method of contracting and we think it would be wholly artificial to recast the relevant matrix of fact, which was one where the contracting parties did not in fact know beforehand that they were going to enter into the Trading Contracts or their terms, and were content to abide by what the relevant algorithms did at least as long as this was within the ambit of their programmed parameters. We also agree with the Judge that it follows from this that in cases where contracts are made by way of deterministic algorithms, any analysis concerning knowledge of a mistake or unconscionably taking advantage of one must be done by reference to the state of mind of the programmers of the algorithms at the time of the programming (see Judgment at [211]).
98 As we have noted at [15] above, a deterministic computer program or algorithm is bound by the parameters set by the programmer, and can (and generally will) only do what the programmer has programmed it to do. Given a particular input, it will produce a particular output; on each occasion, the output should and will be the same if the former does not change. Therefore, when it comes to assessing the state of knowledge that is to be attributed to the parties at the time of a contract made by way of deterministic algorithms, the relevant inquiry cannot be directed at the parties themselves, who had no knowledge of or direct personal involvement in the formation of the contract. Rather, working backwards from the output that emanated from the programs, we are driven to assess the relevant state of knowledge by examining that of the programmers. This approach is consistent with that which was advocated by Prof Goh.
99 Apart from determining whose knowledge is relevant, it is also important to consider the relevant time for assessing that person’s knowledge. In our judgment, the relevant time frame within which we should assess the knowledge of a programmer or the person running the algorithm would be from the point of programming up to the point that the relevant contract is formed. As Prof Goh noted, the point of programming is when the programmer’s knowledge is the most concretised. The question can first be framed in this way: if the algorithm was programmed to produce a particular output, why was this done? But the inquiry cannot end there and must extend past that point of time because there may be situations where a programmer or the person running the algorithm who did not contemplate the relevant mistake at the point of programming came to learn of it subsequently before the contract had been formed, and yet allowed the algorithm to continue running, intending thereby to take advantage of the mistake. In such a case, it would be wrong to ignore the subsequent acquisition of knowledge. This is why it is appropriate to have regard to the state of knowledge up to the time of the contract.
100 Prof Goh cited Nik Yeo & Joseph Farmer, “Mapping the Landscape: Cryptocurrency Disputes under English Law (Part 2)” (2019) 5 JIBFL 290 at p 291. This was a commentary on the Judge’s decision in which the authors note as follows:
An issue to which the case gives rise is an apparent timing mismatch: the traders’ mistakes must necessarily have arisen, or at least have been continuing, at the point of the original trades, whereas the last human input into the programming must by practical necessity have occurred before those trades. How then could the state of mind of the programmer when originally programming B2C2’s “deep price” methodology ever include knowledge of the relevant mistake? … the law might need to recognise that so long as the knowledge or intention of the original programmer was that there ought not to be the sort of mistake which subsequently arose, then it does not matter for the rules of unilateral mistake if the particular instantiation of that mistake post-dates the last act of a human being, so long as the programmer’s state of mind could be said still to be extant at the time the mistake is made (in other words, that the code has not changed by then in a way which would be inconsistent with that state of mind). [emphasis added]
101 We also note that Low & Mik ([75] supra) made some similar points in commenting on the Judge’s decision as follows:
… Being unaware of the conclusion of a contract, a contracting party utilising automated contracting is ipso facto incapable of having any actual knowledge of any mistake on the part of its counterparty at the time of contracting, however egregious the mistake. But this would have the effect of immunising any contracting party employing algorithmic contracting from the doctrine of unilateral mistake entirely, which cannot be correct. …
… it is unrealistic to attempt to attribute knowledge of a future mistake to a past programmer a la Nostradamus. …
102 We have two observations on these extracts. The first relates to the level of knowledge of the mistake while the second relates to the time when the knowledge is assessed. Turning to the first point, it is true that it may be artificial, even unrealistic, to conduct the analysis on the basis of an expectation that the non-mistaken party must have knowledge of the specific and precise details of the mistake that has arisen. Programmers are not expected to be prophets and mistakes can take a wide range of forms. But the law on unilateral mistake is concerned:
(a) with a type or class of mistake, that is one concerning the fundamental terms of the contract (at least at common law); and
(b) with the mental state of the non-mistaken party – whether it knew (or ought to have known) of the (type of) mistake and was acting to take advantage of it.
103 In our judgment, keeping the focus on these considerations enables us to address the authors’ concern that the state of mind of the programmer when originally programming the algorithm could never have included knowledge of the particular manifestation of the relevant mistake. That is not and should not be the inquiry and we do not think it was the inquiry that the Judge pursued. Rather, the relevant inquiry might be framed thus: when programming the algorithm, was the programmer doing so with actual or constructive knowledge of the fact that the relevant offer would only ever be accepted by a party operating under a mistake and was the programmer acting to take advantage of such a mistake? In our judgment, this was the essential methodology applied by the Judge at [229]–[230] of the Judgment, which we set out at [124] below.
104 The second point which pertains to timing is resolved by the approach that we have set out at [99] above. If at the point of programming, the programmer contemplated or ought to have contemplated that a mistake might arise on the part of a counterparty to a future contract and designed the algorithm to exploit such a mistake, then it does not matter for the purposes of establishing the requisite knowledge that the relevant mistake had occurred after the algorithm had been programmed. Further, as we have noted, the framework we have developed also enables the court to examine and consider the knowledge actually acquired after the point of programming and the actual conduct of the parties up to the time of the contract. However, we emphasise that this is directed at actual conduct. This is to be contrasted with the approach that Quoine urged upon us, which we have rejected (see [97] above), which was to analyse the matter by reference to a “hypothetical meeting on the trading floor that notionally took place just before the contract was concluded in the light of the information available at that time”. On that approach, the question posed is whether the parties would have agreed to the contract with knowledge of the mistake. With respect, this is, as we have mentioned, a wholly artificial analysis that has no relation to the reality of the situation, which is that the trades were conducted by way of algorithmic trading and not by way of an imagined meeting on some trading floor. The consequence of this is that the parties had committed to transact with each other in a certain way which entailed that they would not even know whether a contract would be formed, and if it were, on what terms that would be, and they chose in these circumstances not to bargain for a right to review, confirm or invalidate any ensuing contract that might emerge out of the arrangements that they had committed to. This simply did not accommodate the court artificially (or “equitably”) interposing another last look at the proposed terms immediately prior to the algorithms concluding the contract and, for that matter, still less after. Having committed to transact in this way, and in the absence of any basis upon which equity’s intervention could be justified up to the time the relevant offer was accepted and the contract formed, we cannot see a principled basis for such intervention premised on a review of the reasonableness of the ensuing contract after it had been formed without any mistake as to its terms.
105 We turn to the type of knowledge required on the part of the non-mistaken party of the mistaken party’s mistake, which, as stated at [80] above, differs depending on whether a party is seeking to invoke the doctrine of unilateral mistake at common law or in equity. The former requires proof that the non-mistaken party had actual knowledge of the mistake at the time of the contract, while the latter requires constructive knowledge (coupled with an element of unconscionability). The distinguishing line between actual knowledge and constructive knowledge can be difficult to draw, if not in theory then in practice. This is not least because both forms of knowledge require the court to adopt an objective inquiry (see Digilandmall.com at [44]; Wellmix Organics (International) Pte Ltd v Lau Yu Man [2006] 2 SLR(R) 117 at [66]).
106 The test for establishing actual knowledge is set out in Digilandmall.com at [41]–[42] as follows:
41 As is so often alluded to in the cases, in the absence of an express admission or incontrovertible evidence, the fact of knowledge would invariably have to be inferred from all the surrounding circumstances, including the experiences and idiosyncrasies of the person and what a reasonable person would have known in a similar situation. If a court, upon weighing all the circumstances, thinks that the non-mistaken party is probably aware of the error made by the mistaken party, it is entitled to find, as a fact, that the former party has actual knowledge of the error. Following from that holding, the court should declare the contract so formed as void on the ground of unilateral mistake.
42 In order to enable the court to come to the conclusion that the non-mistaken party had actual knowledge of the mistake, the court would go through a process of reasoning where it may consider what a reasonable person, placed in the similar situation, would have known. In this connection, we would refer to what is called “Nelsonian knowledge”, namely, wilful blindness or shutting one’s eyes to the obvious. Clearly, if the court finds that the non-mistaken party is guilty of wilful blindness, it will be in line with logic and reason to hold that that party had actual knowledge.
[emphasis added]
107 Actual knowledge is concerned with the subjective knowledge of the non-mistaken party. In other words, for actual knowledge to be made out, it must be shown that the non-mistaken party actually knew of the relevant fact. However, the means by which the subjective knowledge of the non-mistaken party is ascertained may include considerations of the matter from an objective perspective. This was consistent with the approach that Prof Goh urged upon us at para 137 of his submissions on the mistake issue:
What is the criterion to be applied in so far as the ascertainment of the presence of knowledge … is concerned? The answer would appear, by the very nature of the doctrine itself, to hinge upon the subjective knowledge of the party concerned. However, it is submitted that such “subjective knowledge” must be objectively ascertained, and, indeed, the case of Hartog v Colin & Shields [[1939] 3 All ER 566] supports this proposition. In that case, the reference to verbal and written negotiations prior to the sale concerned as well as expert evidence as to the prevalent trade practice … tilted the decision in favour of the defendant sellers who, Singleton J decided, had obviously made a mistake which was equally clear to the plaintiff buyer, having regard to the objective facts just mentioned. As Singleton J observed:
“[T]here was an accident. The offer [by the defendant sellers] was wrongly expressed, and the defendants by their evidence, and by their correspondence, have satisfied me that the plaintiff could not reasonably have supposed that that offer contained the [defendants’] real intention.”
[emphasis in original in italics; emphasis added in bold; footnotes omitted]
108 In contrast to actual knowledge, constructive knowledge involves imputing knowledge to the non-mistaken party. The inquiry is not directed at whether the non-mistaken party actually knew of the mistaken party’s mistake, but whether a reasonable person in the position of the non-mistaken party would have known of the mistake. If the answer to that is yes, then the non-mistaken party is deemed to have constructive knowledge of the mistake, notwithstanding that it could not be proved that it did indeed have that knowledge. Here the inquiry that is adopted by the court is necessarily an objective one.
109 The final requirement to establish unilateral mistake in equity is that the non-mistaken party must also be found to have engaged in some unconscionable conduct in relation to the relevant mistake. In Digilandmall.com, this was also referred to as “sharp practice” and “impropriety” (see Digilandmall.com at [77] and [80]). Much more recently, in BOM v BOK and another appeal [2019] 1 SLR 349 (“BOM”), we elaborated on what constitutes “unconscionable conduct” although this was not in the context of unilateral mistake in equity. In BOM, we were required to consider the circumstances in which a deed of trust might be set aside on the basis of unconscionability, and in that context held that “the narrow doctrine of unconscionability” [original emphasis omitted] applies in Singapore (at [142]):
… To invoke the doctrine, the plaintiff has to show that he was suffering from an infirmity that the other party exploited in procuring the transaction. Upon the satisfaction of this requirement, the burden is on the defendant to demonstrate that the transaction was fair, just and reasonable. In this regard, while the successful invocation of the doctrine does not require a transaction at an undervalue or the lack of independent advice to the plaintiff, these are factors that the court will invariably consider in assessing whether the transaction was improvident.
In relation to the requirement for the plaintiff to be suffering from an infirmity, this refers to the plaintiff being poor and ignorant or suffering from other forms of infirmities of sufficient gravity, whether physical, mental and/or emotional in nature, as to have acutely affected his ability to “conserve his own interests” (BOM at [141]). Admittedly there is a potential tension between requiring, on the one hand, that unconscionability be shown, this necessarily being a subjective inquiry premised on what the non-mistaken party actually knew – see Digilandmall.com at [78] – and, on the other, that the non-mistaken party have at least constructive knowledge of the mistake, this being, as we have already noted, an objective inquiry.
110 Aside from this, a narrow conception of unconscionability limits excessive subjectivity in determining what amounts to unconscionable conduct, and instead promotes certainty and predictability for contracting parties (see BOM at [176]). Given the circumstances of this case, and for reasons we will shortly develop, we consider that we would not on any footing have been able to find that there was unconscionable conduct on the part of B2C2 or Mr Boonen, and thus it is not necessary for present purposes either to resolve the tension we have alluded to or to decide the question as to whether the same narrow conception of unconscionability should apply in the context of unilateral mistake in equity. We therefore leave this open for the present.
111 Further, it is also relevant when considering unilateral mistake in equity to have regard to the degree of carelessness or negligence on the part of the mistaken party to determine where the equities fall, even if a mistaken party’s carelessness would not in and of itself disentitle it from relief (Digilandmall.com at [79]).
Application to the facts of this case
112 On appeal, Quoine focused on the Second Mistaken Belief as the operative mistake held by the Counterparties, which was that they believed they were buying ETH for BTC under contracts at prices which accurately represented or did not deviate significantly from the true market value and/or price of ETH relative to BTC on 19 April 2017 (see [38] above). Quoine argued that Mr Boonen had actual or at least constructive knowledge of the Second Mistaken Belief, because his main objective in programming the Trading Software to place sell orders for ETH at the deep price of 10 BTC to 1 ETH when the Platform’s order book became empty or abnormally thin was to unconscionably profit from potential errors of the other market participants. Against this, B2C2 submitted that there was no mistake as to the prices quoted and accepted for the Disputed Trades, and that Mr Boonen had not engaged in any unconscionable conduct when programming the Trading Software.
113 To recapitulate, B2C2 had through its algorithm placed sell orders for ETH on the Platform at prices of 9.99999 BTC and 10 BTC to 1 ETH. On the other side of the transactions, orders had been placed on behalf of the Counterparties to buy ETH at the best available price on the Platform. These orders had been placed by the Platform’s operating system, which had done just as it had been programmed to do in the light of the conditions presented on the Platform. These were the two sides of the trades that were matched and resulted in the Trading Contracts.
114 It is helpful to pause here and examine the position a little more closely. Because the Trading Contracts had been entered into pursuant to deterministic algorithmic programs that had acted exactly as they had been programmed to act, it is not clear what mistake can be said to have affected the formation of the contracts. The mistake, if anything, was in the way the Platform had operated as a result of Quoine’s failure to make certain necessary changes to several critical operating systems, which led to a series of steps that force-closed the Counterparties’ positions and triggered buy orders for ETH being placed on their behalf. This might conceivably be seen as a mistake as to the premise on which the buy orders were placed, but it can in no way be said to be a mistake as to the terms on which the contracts could or would be formed. If a party A is told a falsehood by B which causes A to accept C’s offer to transact at a price A would not otherwise have transacted at, in circumstances where C was neither aware of nor involved in B’s falsehood, we are unable to see how that falsehood can be said to be a mistake that vitiates the contract. Here, the problems with the Quoter Program and the subsequent force-closure of the Counterparties’ positions are akin to a “falsehood” told by Quoine to the Counterparties. This cannot be a mistake that vitiates the Trading Contracts between B2C2 and the Counterparties.
115 Accordingly, although we find no reason to disagree with the Judge’s finding that the Counterparties held the Second Mistaken Belief that they were buying ETH for BTC at prices which did not deviate significantly from the market price on 19 April 2017 (see Judgment at [228]), we respectfully disagree that this mistake was as to a term of the Trading Contracts. The Second Mistaken Belief was characterised as a mistake as to the prices at which the Trading Contracts were entered into. In our judgment, this was incorrect. The prices that the Disputed Trades were concluded at were arrived at by operation of the parties’ respective algorithms, and it was common ground that these had operated as they were meant to. In fact, the precise mistake in this case was a mistaken assumption on the part of the Counterparties as to how the Platform would operate. In other words, their real belief was that the Platform would not fail; and as the Judge found, the premise for the Second Mistaken Belief was that the Platform would either always operate as intended or, alternatively, there would be adequate error identification and protection systems to prevent trading from continuing if the Platform operations deviated from this assumed state of affairs (Judgment at [227]). However, we do not see how this can assist Quoine because the Second Mistaken Belief was not a mistake as to the terms of the Trading Contracts, but instead was a mistaken assumption as to the circumstances under which the Trading Contracts would be concluded. This is not an operative mistake at least in the context of unilateral mistake at common law. In this regard, the position of the Counterparties (with their mistaken assumption) is analogous to the position of the claimant in Statoil, where the court found that there was no operative unilateral mistake as to a contract term and the contract of compromise in question thus remained binding (see [88] above). In fact, the claimant in Statoil would, on the face of things, seem to have been in a better position than the Counterparties in the present case, because the defendant in Statoil was actually aware that the claimant had entered into the contract on a mistaken assumption; in contrast, as we discuss below, Mr Boonen did not have actual or constructive knowledge of the Second Mistaken Belief (see [126] below).
116 In a sense, this might be sufficient to dispose of the case on unilateral mistake (at least at common law). However, since we have left open the issue identified at [92] above, we proceed on the assumption that there was an operative mistake, and examine whether the non-mistaken party, B2C2, had the requisite knowledge of this mistake.
117 In relation to B2C2, the Judge made the following findings:
(a) There was plainly no mistake on B2C2’s part in designing its algorithm to place the sell orders on the Platform at the deep price.
(b) There was no sinister motive behind Mr Boonen programming the Trading Software with the deep prices. Specifically, at the time the Trading Software was designed, the deep prices had not been programmed with either the awareness or the intention to take advantage of a mistaken bid by a counterparty or to enter into a contract on that basis.
118 Quoine did not (and plainly could not) challenge the first finding and although it mounted a challenge of sorts against the second finding, we consider that this challenge was bound to fail. The Judge gave detailed reasons for his findings and there is neither reason nor basis for us to overturn those findings. In this regard, we are cognisant of our position as an appellate court. We did not have the benefit of hearing the parties’ evidence at trial or grappling with the minutiae of that evidence as the Judge did, and thus appropriate caution demands that we should be slow to overturn primary findings of fact made by the Judge. In any event, we accept the Judge’s findings for the following reasons.
119 First, there were no grounds for concluding that Mr Boonen had ever turned his mind to the relationship between the margin traders and those who loaned them money (Judgment at [124] and [223]). It is difficult to see how Quoine could even begin to mount a challenge against this finding. It was not suggested that the deep prices were programmed with margin trades in mind. If Mr Boonen did not programme the deep prices with awareness or consideration of the terms on which margin trading was done, he could not have programmed the Trading Software with the knowledge that in situations of illiquidity on the Platform when the order book was abnormally thin, margin calls would be triggered and market orders would be placed to purchase ETH at the best available price, thereby creating an opportunity for exploitation.
120 Second, the Judge accepted that the programming of the deep prices was in part to ensure that the PureQuote strategy would always have price inputs so that the Trading Software would function continuously (see [18] above), and in part to ensure that in the unlikely event that a trade were to occur at a deep price, it would adequately protect B2C2 against any adverse consequences of such a trade (see Judgment at [83] and [85]). The Judge acknowledged that Mr Boonen’s strategy might not have been wholly defensive, but nevertheless held that the overriding reason for programming the deep prices was to protect B2C2 in the event of the unexpected happening (see Judgment at [119] and [230]).
121 Third, the Judge accepted that when Mr Boonen designed the Trading Software, he knew of the possibility that the Platform’s order book might become empty and that in that event the deep prices would be inserted into the Trading Software’s internal order book. However, the Judge also stated that Mr Boonen had never considered that there was a real possibility of orders placed on the Platform at the deep prices being filled. Mr Boonen in fact considered that this was unlikely and the Judge found that he did not turn his mind in any detail to the circumstances in which this might happen (Judgment at [121] and [123]).
122 The first finding at [117(a)] above is fatal to any argument resting on common mistake since it is plain that B2C2 was never acting under a mistake (see [129] below).
123 The second finding at [117(b)] above, in our judgment, is fatal to any argument resting on unilateral mistake. This is because it excludes any notion of the Trading Contracts having been concluded in circumstances where B2C2 either actually knew or must be taken to have known that these had been or must have been the result of a mistake having been made by either of the Counterparties. This follows from the analysis of the law that we have set out above. Further, as we have observed at [42] above, the Judge also accepted that Mr Boonen had no knowledge of the glitches causing the illiquidity on the Platform until after the Disputed Trades had been transacted.
124 Following from our analysis of the law at [103] above, the relevant inquiry in this case could be framed thus: when programming the Trading Software with the deep prices, was the programmer doing so with actual or constructive knowledge of the fact that sell orders at those prices would only ever be accepted by a party operating under a mistake and was the programmer acting to take advantage of that mistake? In our judgment, this was the essential methodology applied by the Judge at [229]–[230] of the Judgment and which led him to conclude that Mr Boonen neither had such knowledge nor programmed the Trading Software to take advantage of any such mistake:
229 It is next necessary to determine whether Mr Boonen had actual knowledge of the mistaken belief at the time he inserted the deep prices … Can it be said that Mr Boonen knew that “it was never contemplated by [any trader] that any trades would be transacted on the Platform at prices which deviated so substantially from the actual market prices”? This amounts to a belief held by Mr Boonen at that date that the price was so abnormal that no trader would trade at that price otherwise by way of a mistake.
230 … I have concluded on the basis of those findings of fact that Mr Boonen did not insert the deep prices with that belief. He foresaw that a number of factors might arise which would cause the deep prices to be inserted and the overriding reasons for them being inserted was to protect B2C2 in the event of the unexpected happening. He did not exclude the possibility of trades at those prices being executed. Whilst he was aware that one possible cause was that it could be the result, wholly or in part, of some error or omission on the part of someone, including himself, he did not turn his mind in any detail to the circumstances that might lead to such trades being executed. He knew that the Platform was an automated system and that therefore no opportunity would arise for any particular trade to be reviewed by the parties in advance. In the circumstances of this case, in order for him to have actual knowledge that other traders believed that in no circumstances would a trade be transacted on the Platform at prices which deviated so substantially from the actual market prices, I consider that it would be necessary for it to be demonstrated that he held that belief himself, which he did not …
[emphasis added]
125 We have also observed above at [99] that the programmer’s knowledge, or indeed the knowledge of anyone running the algorithm, is relevant past the point of programming, and up till the Disputed Trades occurred. Examining the state of B2C2’s knowledge at this later point in time, however, we consider that Quoine could not establish or adduce any evidence to show that B2C2 and/or Mr Boonen had become aware of the problems with the Quoter Program or the fact that the Platform’s order book had gradually thinned out in the period after the Trading Software had been programmed and prior to the Disputed Trades (which was when the Trading Contracts were entered into). Quoine did seek to rely on the email that was sent by Mr Boonen on 20 April 2017, the morning after the Disputed Trades had occurred but in our view, this does not help its case at all. That email simply stated in the subject line “Major Quoine database breakdown, please call us urgently”. Quoine argued that Mr Boonen’s reaction showed that he knew that there must have been some mistake. However, this, at its highest, showed Mr Boonen’s state of mind after he became aware of the Disputed Trades, which is not part of the relevant time frame. Further, the email, if anything, supports the Judge’s finding that Mr Boonen did not programme the Trading Software with the deep prices with any sinister intent, because his reaction was simply inconsistent with that of a man who had anticipated the possibility of such a mistake occurring and designed his algorithm to exploit it.
126 Taking the evidence above together, it is apparent to us that Mr Boonen did not have actual or constructive knowledge of the Second Mistaken Belief. Mr Boonen would have had to foresee a perfect storm of events that began with the problems with the Quoter Program and ended with the Disputed Trades being concluded at the deep price for him to have had, or be taken to have had, the Second Mistaken Belief. Despite Quoine’s considerable efforts to mount a case suggesting even a hint of this, there was simply no evidence to suggest that Mr Boonen had ever contemplated anything of the sort. We therefore reject Quoine’s case on this aspect of the appeal.
127 We add for completeness that the second finding of the Judge described at [117(b)] above, that there was no sinister motive behind programming the Trading Software with the deep prices, also excludes any notion of the Trading Contracts having been entered into in circumstances where B2C2 had acted unconscionably. We find no reason to disagree with the Judge’s finding that although Mr Boonen’s inclusion of the deep prices was an opportunistic business decision, it was not motivated by sinister intent (Judgment at [236]).
128 For all these reasons, we are satisfied that Quoine’s defences of unilateral mistake at common law and in equity fail.
Issue (d): Common mistake
129 Quoine also argued that the Trading Contracts were void for common mistake, since B2C2 and the Counterparties had entered into the Disputed Trades under a shared mistaken assumption that they were transacting at or around the going market rate for ETH. However, B2C2 could not have been labouring under such an assumption, given that it had placed its sell orders for ETH at prices of 9.99999 BTC and 10 BTC to 1 ETH on the Platform because the intentionally pre-programmed deep price of 10 BTC to 1 ETH in the PureQuote strategy took effect (see [117(a)] above). Therefore, Quoine’s defence of common mistake at common law fails.
Issue (e): Unjust enrichment
130 We turn to Quoine’s argument that it was entitled to cancel the Disputed Trades on the basis that B2C2 would otherwise be unjustly enriched at the expense of the Counterparties and/or Quoine. Quoine’s and B2C2’s arguments on unjust enrichment hinged on whether we accepted that the Trading Contracts were vitiated for mistake. If the Trading Contracts remained valid and enforceable, that would seem to bar any action in unjust enrichment.
131 In his discussion of the unjust enrichment point below, the Judge applied our decision in Singapore Swimming Club v Koh Sin Chong Freddie [2016] 3 SLR 845 at [90], which sets out the three requirements for an action in unjust enrichment to succeed: (a) a benefit has been received or an enrichment has accrued to the defendant; (b) the benefit or enrichment is at the claimant’s expense; and (c) the defendant’s enrichment is unjust.
132 As a preliminary point, we agree with the Judge’s conclusion that if the Disputed Trades were not cancelled, B2C2 would stand to receive a substantial benefit in terms of the considerable value of BTC that had been credited into its account. However, as the Judge noted, this benefit would have been at the expense of the Counterparties, which would have had to make up the shortfall between the BTC actually in their accounts and the amount that had been debited from their accounts pursuant to the Disputed Trades. Therefore, the cause of action in unjust enrichment should if at all vest in the Counterparties, and not Quoine. However, B2C2 did not attempt to strike out this aspect of Quoine’s defence, and the Judge therefore proceeded with the trial on the basis that it was properly raised as a defence. We therefore proceed on the same basis.
133 As to the first element, there is no doubt that B2C2 was enriched or derived a benefit from having the proceeds of the Disputed Trades credited into its account. Assuming that the Counterparties are able to bring a claim against Quoine for the losses they might suffer as a result of the Disputed Trades if the Trading Contracts remain valid and enforceable, it might then be said that B2C2’s enrichment was at least indirectly at the expense of Quoine. On this basis, the first two requirements of unjust enrichment would be made out. We turn then to the last requirement, which is that there must be an unjust factor.
134 The unjust factors that were pleaded by Quoine were first, that the benefit was conferred upon B2C2 pursuant to a mistake, and second, that there was a lack of consent in the formation of the Trading Contracts by which B2C2 was enriched. In truth, these were the same points raised in relation to the case on unilateral mistake, which we have rejected.
135 Further, given our conclusion that the Trading Contracts are not vitiated, B2C2’s enrichment would have been pursuant to valid contracts and it is difficult to see how this could be said to be unjust. As stated in Goff & Jones: The Law of Unjust Enrichment (Charles Mitchell, Paul Mitchell & Stephen Watterson eds) (Sweet & Maxwell, 9th Ed, 2016) at para 9–94 (see Judgment at [249]):
Where a benefit is mistakenly conferred by one party on another under a contract, a claim in unjust enrichment will commonly fail even if the mistake would otherwise support such a claim. … the contract will bar the claim, to the extent that it entitles the defendant to receive the relevant benefit. For the claim to succeed, the claimant will need to show that the contract is invalid, being either non-existent, void or voidable. … [emphasis added]
136 Therefore, we are satisfied that Quoine’s defence of unjust enrichment cannot succeed.
Issue (f): The trust question
137 Finally, we turn to B2C2’s contention that Quoine was holding the BTC which was credited into B2C2’s account pursuant to the Disputed Trades on trust and that Quoine breached that trust when it reversed that credit transaction. This raises the threshold issue of whether cryptocurrency, specifically BTC, is a species of property that is capable of being held on trust.
138 This point was not disputed by the parties when they were before the Judge and was only raised belatedly by Quoine on appeal. Nevertheless, the Judge briefly considered the question, and concluded that cryptocurrency satisfied all the requirements in the classic definition of a property right set out in the decision of the UK House of Lords in Ainsworth at 1248 (see [34] above). However, he left open the question of what the precise nature of the property right was, having been satisfied that cryptocurrency could be treated as property in a generic sense.
139 There have been some other cases in the Commonwealth that have implicitly accepted that cryptocurrency may be regarded as property, although we are not aware of any court that has attempted to identify the precise nature of the property right if any. In Elena Vorotyntseva v Money-4 limited and others [2018] EWHC 2596 (Ch), the English High Court issued a proprietary injunction preventing the removal of specific ETH and BTC holdings. In coming to his decision, Birss J observed that there had been no suggestion that cryptocurrencies could not be a form of property.
140 In Copytrack Pte Ltd v Wall [2018] BCSC 1709, the Supreme Court of British Columbia ordered that some C$400,000 worth of ETH be traced, which suggests that ETH was recognised as a species of property susceptible to tracing. The action was brought by Copytrack Pte Ltd (“Copytrack”), a company engaged in the business of digital content management and automated copyright enforcement. Copytrack created its own cryptocurrency, Copytrack tokens, and mistakenly transferred a more valuable cryptocurrency, ETH, to the defendant investor instead of Copytrack tokens. The ETH was then transferred by the defendant to third parties. Copytrack sought to trace and recover the ETH. The court characterised the issue of whether the property law doctrines of conversion and wrongful detention could apply to cryptocurrencies as a “critical issue” and the “real issue on this application”. While the court did not go so far as to rule on whether cryptocurrencies could, in fact, be subject to specific property law claims, the court held that it would be unreasonable and unjust in the circumstances to deny Copytrack a remedy, and so allowed Copytrack to trace and recover the wrongfully transferred ETH.
141 Academic commentators broadly agree that BTC may be regarded as a property right, although they disagree as to the precise nature of this right. In Jean Bacon et al, “Blockchain Demystified: A Technical and Legal Introduction to Distributed and Centralised Ledgers” (2018) 25(1) Rich J L & Tech 1, the authors suggest (at para 182) that holders of digital tokens such as BTC should be regarded as having a property interest at common law, because they hold a bundle of rights that include the right to control the token. This interest is identifiable through entries on the blockchain, can be transferred by entries of the blockchain, and has a high degree of permanence and stability.
142 To similar effect is Kelvin FK Low & Ernie GS Teo, “Bitcoins & Other Cryptocurrencies as Property?” (2017) (21) Singapore Management University School of Law Research Paper, where the authors argue that the property right relating to BTC is the right to have one’s public BTC address appear as the last entry in the blockchain in relation to a particular BTC. Such a right provides exclusive control to the holder in the form of universal exigibility and can be seen as involving a true property transfer when one transfers BTC from one’s public BTC address to another’s BTC address.
143 Most recently, the UK Jurisdiction Taskforce (“UKJT”) chaired by Sir Geoffrey Vos released its Legal Statement on Cryptoassets and Smart Contracts (November 2019), where it considered the question of whether English law would treat a particular cryptoasset as property. The UKJT defined cryptoassets as generally having the following characteristics (at para 31): (a) intangibility; (b) cryptographic authentication; (c) use of a distributed transaction ledger; (d) decentralisation; and (e) rule by consensus. The UKJT stated (at para 85) that cryptoassets have all the indicia of property, and that their novel or distinctive features as aforementioned do not disqualify them from being property. The UKJT also stated that cryptoassets are not disqualified from being property simply because they might not be classifiable either as things in possession or as things in action. The UKJT therefore concluded that cryptoassets could be treated, in principle, as property.
144 There may be much to commend the view that cryptocurrencies should be capable of assimilation into the general concepts of property. There are, however, difficult questions as to the type of property that is involved. It is not necessary for us to come to a final position on this question in the present case. This is because even if BTC were to be regarded as a species of property which is capable of being the subject of a trust, we are satisfied that B2C2’s breach of trust claim would fail because, contrary to what the Judge found, we consider that there was no certainty of intention to create a trust. In this regard, we agree with the observations made by French CJ in the High Court of Australia decision of Korda v Australian Executor Trustees (SA) Ltd (2015) 255 CLR 62 (“Korda”). French CJ stated that the process of ascertaining whether the necessary intention to create a trust should be imputed is “one of construction of the relevant text or oral dealings in their context” (Korda at [11]). He clarified that an intention is not to be imputed and a trust inferred “simply because a court thinks it is an appropriate means of protecting or creating an interest”.
145 The Judge held that the “decisive factor” which led him to find that a trust had arisen over the BTC that had been credited into B2C2’s account was that B2C2’s assets were held separately as assets of an individual user of the Platform rather than as part of Quoine’s trading assets. He regarded this as a “clear indication” that Quoine claimed no title to the user’s assets and acknowledged that it was holding them to the order of the user who could demand withdrawal at any time (see Judgment at [145]). In our respectful view, the mere fact that Quoine’s assets were segregated from its customer’s cannot in and of itself lead to the conclusion that there was a trust. In Vintage Bullion DMCC (in its own capacity and as representative of the customers of MF Global Singapore Pte Ltd (in creditors’ voluntary liquidation)) v Chay Fook Yuen (in his capacity as joint and several liquidator of MF Global Singapore Pte Ltd (in creditors’ voluntary liquidation)) and others and other appeals [2016] 4 SLR 1248, we stated as follows at [61]:
Counsel for Vintage … submitted at the hearing before us that the Company had in effect by its conduct made a declaration of trust over the sum representing the Unrealised Profits by computing the gains and losses in relation to the Unrealised Profits daily, and thereafter setting aside and segregating the funds. In our view, however, the concepts of segregation and trust need to be clearly distinguished. The mere segregation of money into separate bank accounts does not equate to the creation of a trust and is not sufficient to establish a proprietary interest in those funds in anyone other than the account holder … Put simply, segregation is a necessary but not a sufficient condition to give rise to an express trust over the Sums in favour of the Customers. What is further required is to establish that the Company had the requisite certainty of intention for the funds to be held on trust … [original emphasis omitted; emphasis added in italics]
146 In any event, the manner in which BTC was actually stored by Quoine in the cold storage wallet suggests that there was in fact, no segregation, which militates against the inference that it was being held on trust. The manner in which BTC was set aside for users of the Platform was explained by Mr Lozada as follows at the trial:
Q. … even though the asset in the wallet is not specifically identifiable to each customer, Quoine has an internal book which identifies the amount of assets that are held to the credit of each customer; correct?
A. Yeah, the database has each customer account has the balance. It’s like – think of it as a bank. You have your US dollar and how much US dollar you hold in your account. That is in … Quoine’s database.
Q. Let’s assume there were only 100 ETH in a cold storage wallet of Quoine, and you have 100 customers with a credit of 1 ETH each. Then, in a sense, you would be able to identify that 1 ETH belongs to each customer in the cold storage wallet; correct?
A. We don’t normally do that. We base our accounting on what we have in the database. As I said before, what’s in the cold storage doesn’t necessarily have to match what the customer balance has. As I explained, if we sell a [BTC] to a customer and the database gets updated, we will have to go and procure it. The database will say they own 1 [BTC] or 1 ETH. The wallet may have a different amount.
[emphasis added]
147 Given that the amount that was reflected in the account balance of a user of the Platform as it appeared on Quoine’s database did not necessarily match the amount in the cold storage wallet, it could not be said that Quoine was holding the amount stated in the user’s account balance on trust. From Mr Lozada’s explanation, it appears that the only amount which a user was concerned with was what was reflected on Quoine’s database. The actual amount in the cold storage wallet did not matter because if there were insufficient assets to meet the account balance reflected in the database, Quoine would simply purchase the required amount from other sources to make up the shortfall. We find this arrangement to be more akin to deposits being made with a bank (as Mr Lozada suggested at the trial). The account balance that was stated in Quoine’s database was the amount Quoine owed a user, and it was up to Quoine to take steps to ensure that it could repay that debt as and when the user called on it.
148 Further, cl 9 of the Risk Disclosure Statement seem to us to contradict the suggestion that there was an intention to create a trust. Clause 9 provided that:
… [Quoine] does not, however, take client fund safety measures such as depositing [the assets deposited by customers] in an account with a trust bank, etc. regarding these assets, so if [Quoine] goes bankrupt, [Quoine] will not be able to return customer assets, and customers may suffer losses.
Assets held on trust would generally not be subject to the trustee’s insolvency creditors.
149 For these reasons, we are satisfied that no express trust arose over the BTC in B2C2’s account. We therefore allow Quoine’s appeal in this regard. That said, given our decision above that the Trading Contracts are valid and enforceable, B2C2 is nevertheless contractually entitled to the proceeds of the Disputed Trades from Quoine.
Conclusion
150 In the circumstances, we dismiss Quoine’s appeal on the breach of contract claim, and allow its appeal on the breach of trust claim. Unless the parties are able to come to an agreement on costs, they are to furnish written submissions limited to six pages each, within three weeks of the date of this judgment, as to the appropriate costs orders.
151 Finally, we would like to record our deep gratitude to Prof Goh for his submissions, which were characteristically thorough, meticulously researched and extremely clear and greatly assisted us in coming to our decision.
Sundaresh Menon Andrew Phang Boon Leong Judith Prakash
Chief Justice Judge of Appeal   Judge of Appeal
Robert Shenton French 
International Judge 
Jonathan Mance IJ (dissenting):
Introduction
152 Do conventional legal principles work, or may they need to adapt, when traders hand their affairs to computers operating by algorithm? These questions are raised by this appeal. The computers in issue were “deterministic”, meaning that they operated according to pre-determined algorithmic programs, set by humans. This is therefore a case about the legal rules applicable when machines contract in mechanistic fashion by reference to their data input, and by mistake the data input is interrupted and so the outcome becomes fundamentally distorted. The contracts here, made in the middle of the night, were for the supply of BTC by or through Quoine in exchange for the supply of ETH by B2C2 – I adopt throughout the abbreviations used by the majority (“the Majority”) in their judgment (“the Majority Judgment”). In the event, the BTC were undervalued or the ETH over-valued by some 250 times, compared to any “normal” price. This occurred because Quoine’s computer had, by accident, been cut off from outside world information. But it takes two to contract, and the programming of B2C2’s computer to bid or offer at “deep” prices played an important role which will require further examination.
153 B2C2 maintains that, whatever went wrong, a contract so made must stand. For reasons which will appear, I consider that it is correct to approach the case on the basis that it would have been obvious to any human that a wholly untoward breakdown or error had occurred. Since the contracts were made around midnight on 19 April 2017, no human was around to make this observation, but at 6.15am next morning B2C2 did make it, by sending to Quoine the simple message: “Major Quoine database breakdown” and asking Quoine to call B2C2 urgently. The question is whether the contracts were and are, nonetheless, binding.
The facts
154 The facts have been set out in the Majority Judgment. In brief outline:
(a) The Platform operated by Quoine in Singapore provided (i) a facility for trading virtual currencies against each other, together with (ii) a real-time price chart of completed trades for each currency pair executed on the Platform and several other major cryptocurrency exchanges. The real-time prices so displayed were “calculated, consolidated and published” to the trading dashboard through a software program used by the Platform known as the “Quoter Program”: Judgment at [14] and Mr Lozada’s affidavit at [9(f)].
(b) Quoine also acted as a market maker on the Platform, using the external price information obtained by its Quoter Program to generate buy and sell orders, thereby generating liquidity and depth, minimising volatility and ensuring a continuous two-sided market on the Platform: Judgment at [18] and [72].
(c) Quoine extended credit to certain margin traders on the Platform, which monitored such trades and was programmed, in the event of any margin shortfall, to close them out automatically, selling at the best available price the assets in the relevant trader’s account serving as collateral: Judgment at [16]–[17].
155 The Platform and the Quoter Program were therefore designed and expected to operate integrally. However, on 13 April 2017 the login passwords for several critical systems on the Platform were changed for security reasons, and, by oversight, the corresponding necessary changes to the Quoter Program were not implemented. As a result, the Quoter Program ceased to be able to access data from external exchanges and stopped creating new ETH/BTC orders on the Platform. This did not generate an exception message, because the notification flag for such messages had itself been disabled (see the Judgment at [71]–[72]).
156  The volume of trades shown on the Platform gradually diminished, as outstanding orders were filled, with the effect that in the middle of the night of 19 April 2017 the Platform concluded that two margin traders, Pulsar and Mr Tomita, who had borrowed ETH from Quoine in order to speculate in BTC, were in a “margin sell-out position”. The Platform therefore triggered calls to force-sell their BTC assets in exchange for ETH at the best available market price. Adding to the chapter of misfortunes, though not centrally relevant to the issues before this Court, the Platform, by design oversight, lacked a facility to check that there were sufficient assets available as security to cover any perceived margin shortfall, and so purportedly sold considerably more BTC than the margin traders had – 3000 BTC were sold in the case of Pulsar, which in fact only had some 13.5 BTC: Judgment at [73]–[74].
157 B2C2 is a trader on the Platform. Its software program operated primarily by examining to the first 20 price levels on both the bid and the offer side, and calculating by a series of steps appropriate order levels. But, against the possibility that the available price levels might be too few or too low in value, the program included “deep prices” on the bid and ask side to prevent the program “erroring out”. As at 19 April 2017 these deep prices were 10 BTC/ETH on the ask side and 0.00001 BTC/ETH on the bid side. On the bid side (B2C2 buying ETH in return for BTC) an artificial limit would in practice prevent quotes reaching the Platform, on the ground that the bid quantity was too small. On the ask side (B2C2 buying BTC), the only limit was by reference to a threshold based on a notional exchange rate, regardless of the actual sale value.
158 Bid and ask orders at deep prices were, it appears, regularly sent out into the market on the Platform by B2C2’s program, but under normal conditions they were ignored, as they would be entirely out of line with available market prices. In evidence which the Judge accepted (Judgment at [113]), Mr Boonen, the proprietor of B2C2, explained that the purpose of the deep prices was “to cover the risk to B2C2 of uncertain liquidity and market conditions” (Judgment at [112]), so catering for very remote market circumstances. Mr Boonen also stated:
Now, this check or this feature that we’re talking about, that price of 10, it’s not the sort of day-to-day measure, right. It is a circuit breaker. It is when something very unusual happens. It’s when the unfathomable actually crystallises. I think it’s important to add that clarification.
The Judge accepted that Mr Boonen was not thereby referring to the possibility of errors of which the programme might take advantage. He was “affronted at the suggestion” that he had designed the software with this in mind (Judgment at [117]). On the contrary, the Judgment recites that:
118 … [H]is primary concern when writing the program was to protect the integrity of the B2C2 trading system so as to minimise the risk of any unwarranted exposure.
121 … [H]e would have appreciated that the deep prices would only be likely to be executed when there was illiquidity in the order book for that was one of the reasons underlying the addition of the deep prices in the software in the first place. His reasoning was however directed to ensuring the B2C2 system remained operational in such circumstances rather than exploiting the existence of illiquidity.
122 … He might have appreciated that one contributing factor to illiquidity could be due to an oversight or error on the part of someone but there are no grounds for concluding that he considered that these would be the only circumstances that would lead to illiquidity. …
159 What in the event happened was that, in the absence of any other market liquidity, the force-close orders put out by Quoine’s Platform, following Pulsar’s and Mr Tomita’s perceived defaults, were matched with seven of B2C2’s deep price bids for BTC at or around 10 BTC/ETH. This “was at a rate approximately 250 times the rate of about 0.04 BTC for 1 ETH which had been the previous going rate” (Judgment at [4]). Next morning, when human eyes spotted what had happened overnight, Quoine purported to reverse the trades. The present case is about whether it had valid grounds to do so.
Issues
160 The trial and the appeal have raised a large number of issues, on most of which I am in full agreement with the Majority. In particular, and for the reasons given at [48]–[58] of the Majority Judgment, I agree that the force-out sales which the Platform brought about were between Pulsar and Mr Tomita (the “Counterparties” on whose behalf Quoine was acting) and B2C2. I also consider, if there was any basis for their reversal, that Quoine was acting on behalf of Pulsar and Mr Tomita and was entitled to act on their behalf in taking advantage of it. A security holder is bound to have regard to the interests of a margin trader in executing against margin, and here that clearly required the reversal of the trades, if legally possible.
161 Further, for the reasons given at [60]–[67] of the Majority Judgment, I agree that the contracts brought about by the computers did not incorporate the Aberrant Value Clause, on which Quoine relied. I prefer to reserve my position in relation to the construction and ambit of that clause had it been incorporated, addressed at [68]–[70] of the Majority Judgment, it being unnecessary to determine this. I also agree, for the reasons provided at [71]–[77] of the Majority Judgment, that it is not possible to identify any relevant implied term, unless (I would add) it were one simply mirroring the principles, as I analyse them below, governing mistake; those principles in my view reflect precisely what honourable and reasonable traders would also regard as axiomatic in the present context, whatever the other contractual terms. Finally, I agree with the Majority’s reasons at [129]–[149] for concluding that there was here no common mistake of the nature there identified, and no unjust enrichment or trust.
Unilateral mistake – Digilandmall.com
162 The central issue, in my opinion, addressed at [78]–[128] of the Majority Judgment, is whether the doctrine of unilateral mistake applies in these circumstances to enable the reversal of the trades. The law regarding unilateral mistake has been considered in Singapore in Digilandmall.com. The actual decision in Digilandmall.com was based on findings of actual knowledge in relation to each appellant: see Digilandmall.com at [88] et seq. The Court’s discussion of the potential role of equity in the context of unilateral mistake was therefore obiter, though it is of great assistance in the analysis and merits close attention. The Court was clear that, outside the sphere of common law mistake, there was room for equity to operate. The contrary simple approach (that unilateral mistake only exists at common law) would not, it thought, always lead to a just result.
163 There are two particular respects in which equity may supplement the common law relating to unilateral mistake. One is to give the court jurisdiction in cases of fundamental mistake of a nature not covered by the common law. The other is to give it jurisdiction in cases where the non-mistaken person lacks whatever is the requisite mental state for common law relief. The Court in Digilandmall.com alluded to both these aspects. It focused in the main on the latter aspect, and, as the Majority Judgment notes at [91], did not explore the former aspect in detail. But it came down in favour of a “flexible” doctrine of mistake in equity (further explored at [166] below), in terms which could countenance a wider and perhaps open-ended category of “fundamental” mistake. The Court in Digilandmall.com stated at [75] that one possible approach to equity’s role would be:
75 … [T]o hold that the former [ie, common law mistake] is limited to mistake with regard to the subject matter of the contract (like that in Bell v Lever Bros), while the latter [ie, mistake in equity] can have regard to a wider and perhaps open-ended category of “fundamental” mistake: see William Sindall Plc v Cambridgeshire County Council [1994] 1 WLR 1016, per Hoffmann LJ at 1042.
It went on at [76] to note that another possibility would be:
76 … [T]o take a clear simplistic approach, namely, where there is actual knowledge, the contract would be void at common law. But where there is no actual knowledge, the contract ought to be performed. There would then be no room for equity to operate. But we believe that simplicity may not always lead to a just result, especially where innocent third parties are involved.
164 The Court concluded therefore that there is a role for equity. However, it did not endorse the precise distinction suggested at [75] of that case. That is because it saw common law mistake as extending beyond mistake with regard to the “subject matter” of the contract. Denning LJ had, in its view, erred in Solle v Butcher [1950] 1 KB 671 at 692 in suggesting (in relation to both common and unilateral mistake) that, following Bell v Lever Bros [1932] AC 161, “only mistake relating to identity or subject matter would come within the common law doctrine of common mistake”, whereas any other “common mistake, even on a most fundamental matter”, such as a mistake “about the terms of an offer, or the identity of the person by whom it was made”, would not render a contract void at law. So thought the Court in Digilandmall.com at [58], and I respectfully agree.
165 The limitation suggested by Denning MR would restrict common law mistake radically (although he would have counter-balanced this with a correspondingly wider role for equity). However, the English authorities, considered in the Majority Judgment at [83]–[90], indicate that, contrary to what Denning LJ thought in Solle v Butcher, mistake under English common law extends to all situations involving a sufficiently fundamental mistake as to the subject matter or a term, though no further. That being the scope of common law mistake under the English law, it is, as the Majority indicates at [90], unresolved to what, if any, extent there is, under English law, a further equitable jurisdiction to relieve against other situations of fundamental mistake. In contrast with English common law, the High Court of Australia has, I note, endorsed the limited role given to common law mistake by Denning LJ, but again counterbalanced this with a recognition of equitable relief in other cases: Taylor v Johnson at [9]–[11]. I note in this connection that the High Court spoke of the nature of mistake “in relation to a fundamental term” as capable of leading to the grant of equitable relief where one party was aware that the other was “entering [into] the contract under some serious mistake or misapprehension about either the content or subject matter of that term” (Taylor v Johnson at [14]). Further, it granted such equitable relief on the facts when all that could be said was that the non-mistaken party (Mr Taylor) “believed that [Mrs Johnson] was under some serious mistake or misapprehension about either the terms (the price) or the subject matter (its value) of the relevant transaction” (at [15]).
166 The Court in Digilandmall.com went on to consider and disagree with Canadian authority which also suggested a composite analysis, whereby mistake in equity would subsume the common law. It went on at [55] to hold that there was a role for both common law and equitable mistake, along lines indicated in Associated Japanese Bank (International) Ltd v Crédit du Nord SA [1989] 1 WLR 255, where Steyn J (as he then was) said this:
No one could fairly suggest that in this difficult area of the law there is only one correct approach or solution. But a narrow doctrine of common law mistake (as enunciated in Bell v Lever Brothers [1932] AC 161), supplemented by the more flexible doctrine of mistake in equity (as developed in Solle v Butcher [1950] 1 KB 671 and later cases) seems to me to be an entirely sensible and satisfactory state of the law …
Subject to the qualification, which the Court in Digilandmall.com had already made at [58], that common law mistake should not be understood as narrowly as Denning LJ had suggested in Solle v Butcher, Singapore law therefore recognises both the common law and equity as having relevant roles in cases of unilateral mistake. The recognition of a clear role of equity comes with the advantage that Steyn J pointed out, which the Court in Digilandmall.com echoed at [77], namely that “[a] great attribute … of equity[] is its flexibility to achieve the ends of justice”.
167 The Court specifically identified in this connection the ability of equity to address situations of constructive notice. By this, it made clear that it was referring to situations falling short of actual knowledge: see eg, Digilandmall.com at [76], [77], [83] and [88]. Of such situations, the Court said:
77 … Constructive notice is a concept of equity and whether constructive notice should lead the court to intervene must necessarily depend on the presence of other factors which could invoke the conscience of the court, such as “sharp practice” or “unconscionable conduct. Negligence per se, on the other hand, should not be sufficient to invoke equity. Parties to a contract do not owe a duty of care to each other.
One important consideration that may, of course, arise is that the exercise of any equitable jurisdiction can and will always take care to protect legitimate third party interests. Here, however, it was not suggested that any such interests which arose in the very short period before the mistake came to light precluded the avoidance by Quoine of the transactions. (Paragraph 256 of the Judge’s first instance judgment mentions – but only as a reason for not ordering specific performance against Quoine – that, “[b]efore the trades were reversed”, B2C2’s software generated sales of slightly under one-third of the BTC “on nine different exchanges”. Since any such sales were not relied on as a bar to avoidance, no consideration was, it seems, given to their terms or prices, though these may of course become material to damages.)
168 The Court in Digilandmall.com developed its reference to unconscionability in the following dicta:
78 However, “unconscionability” cannot be imputed based on what a reasonable person would have known. It must be based on matters the non-mistaken party knows: see Can-Dive Services v Pacific Coast Energy Corp (2000) 74 BCLR (3d) 30 (“Can-Dive”) per Southin JA at [142]. One cannot act unconscionably if one does not know of facts which could render an act so. Thus, we do not think we can accept the views of Shaw J, the lower court judge in Can-Dive, that constructive knowledge alone would suffice to invoke equity’s conscience. However, as we have indicated earlier, Canadian jurisprudence has moved in that direction.
169  The judgment in Digilandmall.com, therefore, indicates that unilateral mistake in equity can exist where there is a combination of factors: (i) constructive notice of a mistake which would, if actual knowledge existed, render the contract void; (ii)(a) behaviour by the non-mistaken party which is unconscionable (b) based on knowledge by the non-mistaken party of the facts involved in the unconscionability. It is also consistent with the further proposition, which I would endorse, that the flexible equitable doctrine is capable of covering situations of unilateral mistake, where the mistake, although not strictly as to subject matter or a term, is sufficiently “fundamental” to justify equitable intervention – subject again, if the analysis in Digilandmall.com is followed through, to the presence of factors (ii)(a) and (b).
170 The analysis in Digilandmall.com does, however, give rise to two points, which I mention although their resolution is not in my opinion necessary for the determination of this appeal. First, if unconscionable behaviour based on knowledge by the non-mistaken party is understood as behaviour conducing to the mistaken party remaining mistaken, then it is difficult to see how there could ever be constructive notice. As the Court in Digilandmall.com recognised at [76], [77], [83] and [88], constructive notice comes into consideration where there is no actual knowledge of the mistake. Second, the primary basis for equitable relief on the ground of unilateral mistake is the mistake of which the non-mistaken party has constructive notice. Where unconscionability operates, it is as an additional element (see Digilandmall.com at [77], [80] and [83]) – in effect a control mechanism. Authorities such as, most recently, BOM deal with the situation, materially different therefore from the present, where unconscionability is all that is relied on to justify the setting aside in equity of an otherwise valid transaction. The limited view of unconscionability taken in BOM (linking it closely with what was called “class 1 undue influence”) must be seen in that context. Where the primary basis for relief is a mistake of which the non-mistaken party has constructive notice, no reason appears why unconscionability should not operate on a flexible basis to meet the equity of the particular case.
171 Consistently with the first point, unconscionable behaviour conducing to the mistaken party remaining mistaken is a typical – though not essential – hallmark of unilateral mistake at common law based on actual knowledge of a mistake as to a term which the non-mistaken party “snaps up”. Thus, in common law cases such as Tamplin v James (1880) 15 Ch D 215, quoted in Hartog v Colin & Shields [1939] 3 All ER 566, courts spoke in terms of a party “snapping up the offer”, which, as also in Digilandmall.com, the non-mistaken party actually realised to be mistaken. (The position is different in Australia, where, for reasons explained at [164] above, the role of equity is much greater and embraces situations of “snapping up” with actual knowledge, like that in Taylor v Johnson itself, which would under English and Singapore law fall within common law mistake.) But “snapping up” or unconscionable behaviour conducing to the mistake is not an essential feature of unilateral mistake at common law, because this can occur where there is simply knowing and silent “standing by”.
172 There can be marginal situations where a non-mistaken party suspects a mistake by the other party and “proceeds on a course of wilful ignorance designed to inhibit his own actual knowledge of the other’s mistake” (in the words of McLachlin CJBC, as she then was, in First City Capital Ltd v British Colombia Building Corp (1989) 43 BLR 29 (“First City Capital”) at [30]). But, just as shutting a blind eye may be equated with actual knowledge or recklessness with intention, such situations are best equated with actual knowledge, rather than treated as cases of constructive notice. That is in my opinion correctly stated by the Court in Digilandmall.com at [42], where it referred to ‘what is called “Nelsonian knowledge”’, namely wilful blindness or shutting one’s eyes to the obvious”, and went on to state:
… Clearly, if the court finds that the non-mistaken party is guilty of wilful knowledge, it will be in line with logic and reason to find that that party had actual knowledge.
However such situations may be analysed, it is clear that the Court in Digilandmall.com understood the concept of constructive notice to extend to a different, broader range of situations.
173 It follows that if constructive notice is to have the relevant role in relation to unilateral mistake in Singapore law, which the Court in Digilandmall.com in my view correctly assigned to it, unconscionability cannot relate to behaviour with knowledge of the mistake conducing to the mistaken party remaining mistaken. Equity’s conscience must be capable of being affected by behaviour in seeking to retain the benefit of the mistake, once it is discovered. Taking words which were used by the Court in Digilandmall.com itself at [80], the court is then:
… [E]ntitled to intervene and grant relief when it is unconscionable for the non-mistaken party to insist that the contract be performed. …
174 Two passages from prior Canadian authority cited by the Court in Digilandmall.com at [49] and [51] need to be read with caution and in context, in so far as they may at first reading appear to link unconscionability and “snapping up” to equitable relief in circumstances of constructive notice. The two passages come from the first instance decision in First City Capital Ltd at [34] and the British Colombia Court of Appeal decision in 256593 BC Ltd v 456795 BC Ltd (1999) 171 DLR (4th) 470 (“256593 BC Ltd”) at [25]. In the first passage, McLachlin CJBC said that, on a hypothesis of no actual knowledge:
... [T]his is most certainly a case where [the defendant] ought to have known that [the owner] had no right to sell the building to it. Nevertheless, [the defendant], in its negotiations with [the owner], pursued a course designed to inhibit discovery of the mistake, moving with uncharacteristic haste to snap at [the owner’s] mistaken offer.
On its facts, First City Capital falls fairly clearly into the category of Nelsonian knowledge: see in particular at [18]–[20] of First City Capital, where McLachlin CJBC concluded that BCBC “at very least suspected” a mistake and checked with a superior the authority of the junior with whom it was dealing “without, significantly, asking … about the substance of the transaction, a course which might have disclosed the error”.
175 The second passage is attributed in Digilandmall.com to Donald JA, giving the judgment of the Court of Appeal in 256593 BC Ltd. But it was actually a quotation by Donald JA, from (once again) the judgment of McLachlin CJBC in First City Capital, about which Donald JA went on to make this reservation:
[26] Counsel for Ace submits there is no evidence of snapping up the offer in the present case. Assuming that to be so, I do not think that conduct so characterized is necessary for rescission on mistake. I respectfully agree with the reasoning of Shaw J. in Can-Dive where he said at 69-70 that:
While I agree with what Madam Justice McLachlin said so far as it goes, I do not believe she intended to imply that there must be a conscious taking advantage by one party of the other in all cases. The element of constructive knowledge based upon what a reasonable person “ought to know” is premised upon that person not being conscious of the error. Thus, while the idea of “snapping up” may well apply in cases where one side is aware of the other side's error, I do not think it can be applied literally in the constructive knowledge cases. Rather, in my opinion, constructive knowledge alone will suffice to invoke equity's conscience. [Emphasis added].
[27] Baker J. in Craig Estate v. Higgins (1993), 86 B.C.L.R. (2d) 64, put in summary form at 72 a statement of the law with which I respectfully agree:
The court may grant relief from a contract entered into on the basis of unilateral mistake where the plaintiff has established, and has met the high burden imposed upon it of doing so, that a mistake has been made and that it would be unjust or inequitable for the court to allow the other party to uphold the bargain. One of the grounds on which a court may find that it would be unfair or inequitable is if the party seeking to enforce it had actual knowledge or constructive knowledge that a mistake had been made prior to acceptance of the offer.
[28] All the elements for rescission on unilateral mistake are present here: (1) a mistake; (2) on a material term; (3) known actually or constructively by the non-mistaken party; and (4) an unconscionable result if the settlement agreement is enforced. It is my opinion that the mistake gives Ace a huge windfall that it had never bargained for and leaves Earl’s with an outstanding debt while simultaneously transferring Earl’s’ interest in the very asset underlying that debt.
176 Other passages in McLachlin CJBC’s judgment in First City Capital in my opinion actually support the analysis adopted in British Colombia by the Court of Appeal as well as by Shaw J and Baker J. Thus, referring to McMaster University v Wilchar Construction Ltd [1971] 3 OR 801, 22 DLR (3d) 9 (HC) at p 18, McLachlin CJBC said:
[26] In McMaster, the Court held that the offeror was to be relieved from a contract involving a mistake known to the offeree because “it would be unconscionable, unfair and unjust to permit the plaintiff to maintain the contract” (p. 22). This test was applied by Gould, J. of this Court in Beverly Motel (1972) Ltd. v. Klyne Properties Ltd. (1981), 30 B.C.L.R. 282 … :
Provided there is mistake as to the promise or as to some material term of the contract, if the court finds that there has been honest, even though inadvertent, mistake, it will afford relief in any case where it considers that it would be unfair, unjust or unconscionable not to correct it
[27] … Fraud in this wider sense refers to transactions falling short of deceit but where the Court is of the opinion that it is unconscientious for a person to avail himself of the advantage obtained
[emphasis added]
177 At [78] of Digilandmall.com, quoted at [167] above, the Court cited Southin JA who said at [142] of Can-Dive Services v Pacific Coast Energy Corp (2000) 74 BCLR (3d) 30 that “questions of unconscionability are not matters to be determined on what someone ought to have known, but what he did know”. The context was a claim to rectify a sub-contract to give a right to claim extra remuneration for working in difficult soil conditions, in circumstances where it was thought (as it turned out mistakenly) that such a right anyway followed from the back-to-back terms of the head contract. The claim failed on the basis that ‘[t]he critical “fact” - the true meaning of the head contract - was unknown to both parties to the sub-contract until the learned trial judge handed down his judgment”: Can-Dive at [143]. Both parties had “agreed to be bound by the head contract, whatever it meant”, and the claim amounted to an attempt to rectify the bargain, rather than the sub-contract (Can-Dive at [141] and [144]). But what is of current interest is that Southin JA, with whose judgment Ryan JA agreed, gave at [141], as an example of a situation where equitable relief against mistake could be given, a scenario where a mistake occurred in the course of “mechanical” transcription and was only subsequently discovered. She said:
In the case at bar, if, when the subcontract had been typed up, the typist had omitted to put in the weather clause upon which the parties had struck a bargain, it would, in my opinion, be equitable fraud for the head contractor to say, in effect: “Well, too bad, see the words of the contract.” But that is not what happened here. …
178 The Court at [78] of Digilandmall.com also expressed some disagreement with the views of Shaw J at first instance in Can-Dive, while going on to recognise that Canadian jurisprudence “has moved in that direction” - quite possibly a reference to the British Colombia Court of Appeal’s reasoning in 256593 BC Ltd. But the problem is not just one of preference, it goes to the heart of any significant doctrine of constructive notice as a basis for equitable relief. It is not however critical, as I see it, to resolve the problem in this case, which is concerned with a different issue: how, if at all, a doctrine based on a need for either actual or constructive notice can operate in circumstances where neither party was or could have been aware of the mistake as and when it occurred. As will appear, I consider that this conundrum can be resolved in this case by considering what B2C2’s actual state of mind would have been, given knowledge of the circumstances of the transactions as and when they occurred. To that extent, the case parallels situations of actual knowledge, rather than constructive notice.
Conceptual basis of unilateral mistake
179 Before considering further how the law of unilateral mistake may apply in the present case, I should say something about its conceptual basis. The Court at [31] of Digilandmall.com, in a phrase quoted in the Majority Judgment at [81], suggested that it is “self-evident” that “a party who is aware of the error made by the other party cannot claim that there is consensus ad idem”. There is a long-standing academic debate about the foundational principle underpinning the law of contract at common law. Is contract based on objective evaluation of the parties’ communications against the background of all the circumstances which were or are to be taken to have been within their knowledge? Or is it based on subjective consensus, modified in almost every case by the consideration that each party will be effectively precluded from relying on any interpretation different from that which they objectively agreed between them (an approach similar to that which I understand the French Civil Code to adopt: see eg, Dallah Real Estate and Tourism Holding Company v The Ministry of Religious Affairs, Government of Pakistan [2011] 1 AC 763, at [19])? If the former, then unilateral mistake operates as a limited exception to the objective approach, which is how it is explained in Chitty at para 3-022; see also Treitel on The Law of Contract (Sweet & Maxwell, 14th ed, 2015) at paras 1-002, 2-002 and 8-047; and John Cartwright, Misrepresentation, Mistake and Non-Disclosure (Sweet & Maxwell, 3rd ed, 2012) at para 13-02. If the latter, then unilateral mistake is one, limited situation where estoppel cannot and does not operate, because there is no reliance.
180 In Taylor v Johnson, the High Court of Australia concluded at [9] that “[w]hile the sounds of conflict have not been completely stilled, the clear trend in decided cases and academic writings has been to leave the objective theory in command of the field”. I agree with this, and it corresponds with the terms in which other common law courts have described the principles governing contract: see eg, Reardon Smith Line Ltd v Yngvar Hansen-Tangen [1976] 1 WLR 989 at 997; Investors Compensation Scheme Ltd v West Bromwich Building Society [1998] 1 WLR 896 at 912; Charter Reinsurance Co Ltd v Fagan [1997] AC 313 at 384; and Wood v Capita Insurance Services Ltd [2017] AC 1173 at [10] (“The court’s task is to ascertain the objective meaning of the language which the parties have chosen to express their agreement”). On that basis, unilateral mistake is an exception, recognised by the law to further the ends of justice, of a similar character to the principles underlying the law of misrepresentation, undue influence or mistake. The Court in Digilandmall.com effectively recognised this at [31] when it said:
… The law should not go to the aid of a party who knows that the objective appearance does not correspond with reality. It would go against the grain of justice if the law were to deem the mistaken party bound by such a contract.
This analysis also has the further consequential advantage of explaining why and how the law can establish, as the Court recognised that it should in Digilandmall.com, different rules for common law mistake in circumstances where a fundamental mistake as to a term is involved (the contract is void), and for equitable mistake (the contract is potentially voidable). The logic of the theory of subjective consensus is that there is no contract at all in any case of unilateral mistake, whether common law or equitable. The High Court of Australia pointed this out in Taylor v Johnson at [8].
181 The value of a differentiated analysis of unilateral mistake, operating both at common law and in equity, is that it enables the court to address in a circumstance-specific way situations where, for one reason or another, parties objectively reach agreement on a contract which, as one party knows or ought to know, differs in some fundamental respect from what the other party thinks it is or means. The mistake may, I add, come to the former party’s knowledge quite independently of and outside the contractual discussions. Take for example, a contract made for oats or even for new oats, where the seller, unknown to the buyer, is told by a third party with no authority to act for the buyer (or discovers by reading without permission a piece of paper on the buyer’s desk while the buyer is out of the room), that the buyer believes it to be a term of the contract that the oats will be old. The offer and acceptance and the contract made all objectively permit or call for the delivery of new oats, but the seller’s knowledge of the buyer’s actual misapprehension prevents the seller from insisting on performance. The underlying rationale is not a lack of correspondence between offer and acceptance, but a principle of justice.
The application or adaption of the above principles
182 I turn to the application, or adaption, of the above principles in the present circumstances. For the reasons given by the Majority at [114], I agree that the present case cannot readily be analysed as involving an actual mistake as to a term of the transactions as executed. That is because of the very fact that the transactions were effected by computers operating mechanistically according to algorithms, leading inexorably, although blindly, to such transactions. The case does not therefore fit within the principles governing unilateral mistake at common law, and it would not be right to extend these to cover such a situation, since the operation of the algorithms might also have led (though it did not do so here) to relevant third party interests arising before any human discovery of the mistake. What can however be stated with confidence is that the mistake and its outcome in the form of the transactions was in human terms just as fundamental as the sort of mistake at issue in Digilandmall.com. The reaction of any human trader viewing the transactions as executed would have been that they were fundamentally misconceived – the result of some fundamental mistake leading to terms for the sale of BTC to which no seller of BTC would, in prevailing market conditions, agree.
183 In these circumstances, the enquiry therefore moves to the more flexible area of unilateral mistake in equity. For that purpose, the Judge’s findings, in particular at [227] were and are, to my mind, clear. There was a fundamental mistake, in that Quoine’s system operated (and led to the sale of BTC on terms) in a way that was not conceived as possible and would never have been accepted by Quoine or the counterparties in the prevailing circumstances. Further, although B2C2 had no knowledge of the mistake as and when it occurred, the position is that, as soon as it inspected the computer print-outs next morning, it knew at once that there had been such a mistake, and emailed its message to Quoine: “Major Quoine database breakdown”, to which I referred at the outset of this judgment and to which I shall return at [203]. The question is whether, where two parties well know that there has been a fundamental mistake as soon as a computerised transaction comes to their attention, where no detriment has occurred and no relevant third party interests intervened, and where the mistake could readily be rectified, the law will enforce the contract regardless. For the reasons I will give, in my opinion, the law should and can in such circumstances hold that the contract is voidable, as Quoine claims.
184 Certainty in contract is of course important, but it is not everything: see eg, Golden Strait Corporation v Nippon Yusen Kubishiki Kaisha (The “Golden Victory”) [2007] 2 AC 353; Bunge SA v Nidera BV [2015] 3 All ER 1082. Like all great judges, Lord Mansfield could see the force of both considerations. In Vallejo v Wheeler (1774) 1 Cowp 143 at 153 he said that:
In all mercantile transactions the great object should be certainty: and therefore, it is of more consequence that a rule should be certain, than whether the rule is established one way or the other. Because speculators in trade then know which ground to go upon.
But in another famous decision, Alderson v Temple (1768) 4 Burr 2235 at 2239, he showed a different concern:
… [T]he most desirable object in all judicial determinations, especially in mercantile ones, (which ought to be determined upon natural justice, and not upon the niceties of the law,) is, to do substantial justice. …
There are cases where justice outweighs in the balance the interests of legal certainty. The Court in Digilandmall.com recognised this in the present context, endorsing at [81] a statement of Assoc Prof Yeo Tiong Min that ‘[t]he fear that the use of “elastic” equitable principles will lead to uncertainty and encourage litigation is arguably exaggerated’ and adding it ‘is not more difficult to determine what is “equitable” than what is “reasonable” at common law’.
185 The critical problem which Quoine faces in this case is that, in conventional cases of unilateral mistake, the relevant knowledge or constructive knowledge either exists or not, as a matter of fact, as and when the contract is made. The focus of the enquiry is then on the actual state of mind and conduct of human beings involved in the making of the contract. That approach is by definition impossible in the different context of a contract made between computers programmed by humans. But the right approach is less obvious. The Judge dealt with the issue as follows:
200 Quoine submits that the Court should consider what the parties are likely to have known and intended if, hypothetically, they had met on the “floor of the exchange” for the purpose of reaching an agreement on the trades on 19 April 2017. On this basis, as I understand it, it is contended that mistakes can be identified by comparing theoretically what would have happened in face-to-face negotiations with what actually happened at the computer interface.
202 B2C2 contends that there must be a mistake as to a term of the contract and that the party placing the order, albeit by a computer, must be the person mistaken. It was not sufficient if there was a mistake as to facts surrounding that term. In this respect therefore B2C2’s position was that the assessment of a relevant mistake was no different in the case of computer transactions than in face-to-face transactions.
203 Further, relying on Chwee [ie, Digilandmall.com], B2C2 contends that the only relevant knowledge is knowledge at the time of contracting and suggests that it is wrong to assess knowledge or constructive knowledge at the time the deep price mechanism was programmed.
204 So far as concerns the nature of the mistake, I cannot accept Quoine’s hypothetical meeting contention. The question is not what would have happened if the computer element was absent. The parties have chosen to use computers as the means of entering the Trading contracts. They have entered Platform contracts with Quoine so as to be able to enter Trading contracts and, in the case of margin traders, they have entered the Margin trading contracts to regulate their position vis-à-vis the lender, in this case Quoine. All parties were therefore aware that there was to be no human element in the trades and it is wholly artificial to work on the basis of what might have happened if a human element was involved. Equally whilst B2C2’s position identifies what the nature of the mistake must be, it does not assist in determining how and when to identify it.
205 In the circumstances of this case, I have concluded that the relevant mistake must be a mistake by the person on whose behalf the computer placed the order in question as to the terms on which the computer was programmed to form a Trading contract in relation to that order. This mistake will have to be in existence at the date of the contract in question but may have been formed at an earlier date. The existence of a relevant mistake will be a question of fact in each case.
206 Turning to knowledge of the mistake, the law in relation to the way in which ascertainment of knowledge in cases where computers have replaced human actions is to be determined will, no doubt, develop as legal disputes arise as a result of such actions. This will particularly be the case where the computer in question is creating artificial intelligence and could therefore be said to have a mind of its own.
210 Where it is relevant to determine what the intention or knowledge was underlying the mode of operation of a particular machine, it is logical to have regard to the knowledge or intention of the operator or controller of the machine. In the case of the kitchen blender, this will be the person who put the ingredients in and caused it to work. His or her knowledge or intention will be contemporaneous with the operation of the machine. But in the case of robots or trading software in computers this will not be the case. The knowledge or intention cannot be that of the person who turns it on, it must be that of the person who was responsible for causing it to work in the way it did, in other words, the programmer. Necessarily this will have been done at a date earlier than the date on which the computer or robot carried out the acts in question. To this extent I reject B2C2’s contention that that the only relevant knowledge is knowledge at the time of contracting. I agree with Quoine that regard should be had to the knowledge and intention of the programmer of the program in issue when that program (or the relevant part of it) was written.
211 Accordingly, in my judgment, in circumstances where it is necessary to assess the state of mind of a person in a case where acts of deterministic computer programs are in issue, regard should be had to the state of mind of the programmer of the software of that program at the time the relevant part of the program was written. In the present case that person is Mr Boonen.
186 The Judge then gave effect to this approach, by examining first the state of mind of Pulsar and Mr Tomita operating as margin traders on the market and then that of Mr Boonen when he programmed the B2C2 computer and set it into operation to trade on the market. As to the former, the Judge focused on the state of mind of the margin traders, and, on the basis of the evidence given by Mr Tseung of Pulsar, accepted that both Pulsar and Mr Tomata held a mistaken belief which was fundamental to the trades. The Judge explained this conclusion as follows:
227 Mr Tseung, however, gives evidence that because the trades were carried out at the highly abnormal price, they were clearly invalid and that Pulsar did not consider them to be valid. He went on to state “[i]t was never contemplated by Pulsar that any trades may be transacted on the Platform at prices which deviated so substantially from the actual market prices”. Although he gave no reasons for holding this belief, he was not cross-examined on this statement and I therefore accept that this was a genuinely held belief. Indeed, having heard all the evidence, I can well understand that a trader on the Platform who was not a market maker might well have formed such a belief even having read the Agreement and the Risk Disclosure Statement. It is a belief which is founded on the premise that the Platform would either always operate as intended or, alternatively, if for some reason it did not, there would be adequate error identification and protection systems in place to prevent trading continuing in such circumstances.
228 I therefore accept that the Counterparties held this mistaken belief and that it is a belief which is fundamental to the Trading contracts.
187 The evidence was, in substance, that Pulsar never contemplated that trading could occur at such deviant prices other than as a result of some egregious error. The Judge said he could well understand that a trader on the Platform who was not a market maker might well have formed such a belief. The reservation “who was not a market maker” deserves a word. 98% of the relevant market making on the Platform was done by Quoine, as the Majority Judgment recites at [10], and there is every reason to think that it would and did view the relevant trades in exactly the same way as Mr Tseung of Pulsar, and sought to set them aside on that basis. The Judge’s reservation presumably arises because B2C2 did some market making, and at the same time also issued its “deep” bids and offers which it contemplated might be accepted for some reason other than a mistake (though the suggested unfathomable market event had never in fact arisen). The reservation therefore takes one back to the core of the issue – whether B2C2’s accepted intention to cater for wholly unfathomable events (which in fact never occurred) is the answer to the claim of unilateral mistake.
188 A collateral observation which it is convenient to interpose at this point is that it is, to my mind, odd that attention at trial should have been so focused on the margin traders, and not on Quoine. It was Quoine whose computer was programmed to instruct the trades. Moreover, most of the BTC sold did not exist as assets of Pulsar, and there must at least be a question whether Quoine could have had ostensible authority to bind Pulsar by a sale of non-existent assets which Quoine can have had no actual authority to sell on Pulsar’s behalf. These points were not explored before us, and I need say no more about them, save to repeat that, if attention had been focused on Quoine’s state of mind, rather than that of the margin traders, I feel confident that the Judge would have made the same finding with regard to Quoine that he made with regard to the margin traders.
189 Having found a fundamental mistake on the side of the suppliers of BTC, the Judge turned to consider the other side of the issue, whether the mistake was sufficiently known to B2C2 as the supplier in exchange of ETH. As to this, he said:
229 It is next necessary to determine whether Mr Boonen had actual knowledge of the mistaken belief at the time he inserted the deep prices and I thus return to the findings of fact in [118]–[125] above. Can it be said that Mr Boonen knew that “it was never contemplated by [any trader] that any trades would be transacted on the Platform at prices which deviated so substantially from the actual market prices”? This amounts to a belief held by Mr Boonen at that date that the price was so abnormal that no trader would trade at that price otherwise by way of a mistake.
230 This is the aspect of this case that I have found to be most troubling but I have concluded on the basis of those findings of fact that Mr Boonen did not insert the deep prices with that belief. He foresaw that a number of factors might arise which would cause the deep prices to be inserted and the overriding reasons for them being inserted was to protect B2C2 in the event of the unexpected happening. He did not exclude the possibility of trades at those prices being executed. Whilst he was aware that one possible cause was that it could be the result, wholly or in part, of some error or omission on the part of someone, including himself, he did not turn his mind in any detail to the circumstances that might lead to such trades being executed. He knew that the Platform was an automated system and that therefore no opportunity would arise for any particular trade to be reviewed by the parties in advance. In the circumstances of this case, in order for him to have actual knowledge that other traders believed that in no circumstances would a trade be transacted on the Platform at prices which deviated so substantially from the actual market prices, I consider that it would be necessary for it to be demonstrated that he held that belief himself, which he did not: see [123] above.
231 Accordingly, whilst I accept that the Counterparties held the second mistaken belief relied upon by Quoine, I do not accept that Mr Boonen had actual knowledge of that belief. The defence of unilateral mistake at common law therefore fails.”
190 The paragraph numbered [123], to which the Judge referred at the end of [230] read as follows:
123 I therefore accept that when Mr Boonen configured the code he knew of the possibility that the order book might become empty and that in that event the deep prices would be placed on the order book but I do not accept that he ever considered that there was a real possibility of the deep price orders being executed. He considered that this was unlikely and I do not believe that he turned his mind in any detail to the circumstances in which this might happen. That was not the motivation for designing the software as he did. He did not consider that the deep prices were irrational. Indeed he gave cogent reasons for the selection of the prices which were directed to protecting the integrity of his system but at a level which he felt would not be so high as to cause a circuit break on the Platform: see [86] above. This last factor is inconsistent with any assertion that Mr Boonen understood that trades would only be matched by the Platform at prices at or near the previously existing prevailing market price: see [230] below.
The Judge went on at [124]:
124 The evidence does not support the conclusion that when designing the code Mr Boonen perceived that no trader would ever agree to buy ETH at such a price unless he had made a mistake and included the deep prices with this in mind. …
191 In relation to Mr Boonen the Judge therefore thought that the relevant enquiry was whether he knew or believed when he programmed B2C2’s computer, prior to and in June 2016, that no trade would ever take place at the deep prices which he had programmed his computer to output to the Platform at apparently random times other than as a result of some fundamental error. Since the Judge had held that Mr Boonen had a rational motive for inserting the deep prices (which Mr Boonen had explained as being to cover very unusual or unfathomable market conditions: see the Judgment at [113], quoted at [158] above), he could not be said to know or believe when programming his computer or at any time in advance of the actual transactions that, if a transaction took place at the deep prices, it must involve a mistake and nothing else.
192 On such an approach, before any relief could be granted, it would have to be shown (a) that Mr Boonen knew by prophetic foresight that the particular transactions would occur at the deep prices over the night of 13 April 2017 due to some fundamental error (which is obviously impossible) or (b) that each and every transaction which might ever occur at the deep prices he offered would be the result of some mistake, ie, that any transaction at his deep prices could only arise from some fundamental mistake. The latter approach, which the Judge adopted, therefore looks at the position in the abstract and in advance, without any regard for the actual transactions or the market circumstances surrounding them. This is a different approach to that which applies when considering mistake in the context of a transaction completed by human intervention, when the first question is the actual state of mind of each party in the light of the surrounding circumstances. If one of them by mistake refers to a price per “pound”, rather than per “piece”, the other, if aware of the state of the market, will know in that light when a wholly mistaken word has been used. The Judge’s approach involves omitting a usually important element in any appraisal of such a situation, namely (here) whether there was anything drastically unusual about the surrounding circumstances or the state of the market to explain on a rational basis why such abnormal prices could occur, or whether the only possible conclusion was that some fundamental error had taken place, giving rise to transactions which the other party could never rationally have contemplated or intended.
193 The key question is, therefore, whether the law of unilateral mistake falls to be applied in a manner which leaves out of consideration circumstances which are normally central to its application, simply because the parties entrusted their dealings to computers which can have no such consciousness. In my opinion, it does not and should not. The law must be adapted to the new world of algorithmic programmes and artificial intelligence, in a way which gives rise to the results that reason and justice would lead one to expect. The introduction of computers no doubt carries risks, but I do not consider that these include the risk of being bound by an algorithmic contract, which anyone learning of would at once see could only be the result of some fundamental error in the normal operation of the computers involved. Computers are outworkers, not overlords to whose operations parties can be taken to have submitted unconditionally in circumstances as out of ordinary as the present. I do not think that the obvious malfunctioning of a computer-based system should be given the dominance that B2C2’s case implies.
194 In my opinion, it is necessary to revisit the Judge’s refusal to take as the relevant test what Mr Boonen or anyone in his position could or would have known or believed, if he or they had known of the circumstances which have actually occurred. That is a test which relates what actually occurred to natural human reactions, given knowledge of what occurred. It matters not whether one assumes such knowledge at the time of the transactions, or prophetically in advance. The answer is the same. If it would at once have been perceived that some fundamental error had occurred, relief should be available. There is no difficulty here about identifying the circumstances to which, given such knowledge, the objective test would and should be applied.
195 For the reasons indicated at [182] and [183] above, any relief should be equitable, rather than at common law. The fact that computers were involved makes this appropriate. B2C2’s computer might have on-sold the BTC by algorithm at a normal price to a bona fide purchaser for value. Equity could then refuse to set aside the transaction whereby B2C2 acquired the BTC. The fact that Quoine was at fault should not however point decisively away from relief. There was here certainly a series of avoidable errors, which some might suggest should preclude relief. But the question is whether the errors were so egregious as to justify imposing (on whichever of Pulsar and Mr Tomita or Quoine might end up holding the parcel) a loss of perhaps millions of dollars, and benefitting B2C2 to the tune of perhaps millions of dollars by way of what some would call an uncovenanted windfall. In circumstances where B2C2 would and did know at once that some fundamental error had occurred, which error could be rectified without any detriment being suggested to B2C2 or any third party, I have no doubt about the answer. Unilateral mistake commonly involves fault, even if the fault only consists in failure by the mistaken party to appreciate what impression they have, objectively, given to the other party. Where the error is known, the fact that it is or may be attributable to fault cannot axiomatically outweigh the considerations of fair dealing that lead to relief both at common law or, a fortiori as here, in equity. The High Court of Australia cited in this connection, with apparent approval, at [13] of Taylor v Johnson, the position in the United States that “it matters not that the mistake is, or may be, due to negligence or want of care on the part of the party who is mistaken when the other party has not materially changed his position and third party rights are not in question (De Paola v. City of New York (1977) 394 NYS (2d) 525, at pp 527–528)”. But it is unnecessary to go that far. There is on any view a balance. In the present case, where any reasonable trader would at once have identified, as B2C2 did identify, a fundamental computer system breakdown as the cause of the transactions, the considerations weighing in favour of reversal of the transactions outweigh in the balance any errors or faults which led to that breakdown.
196 It should also be remembered that fundamental errors of the present nature can and do occur in computerised exchanges without any fault. Suppose in the present case that a mouse had eaten, or a third party using a mechanical digger had cut, a cable linking the Platform to the Quoter Program. Or suppose someone had hacked into Quoine’s computer and disconnected the link. The same question, whether relief could be granted, would arise, without there being necessarily any background of fault. The law must be capable of addressing such a situation in a manner which corresponds with what I would regard as the clear justice of the case, as well as with the natural expectations of reasonable traders.
197 It was suggested that all such problems, including the present, could have been dealt with by appropriately framed conditions of business. No doubt that is so. But the same could said in many of the situations in which the common law has developed principles of relief, to achieve just results. The law governing mistake is itself a classic example, as is the law of misrepresentation, duress, undue influence, etc. The question is not whether the parties might have regulated such situations generally, or the present situation in particular, by specific agreement, but whether in the circumstances they should be taken to have accepted the risk of their occurrence so as to preclude application of such common law principles, adapted as necessary to the age of algorithms.
198 There is nothing surprising about the law applying a test which asks what an honest and reasonable trader would have understood, given knowledge of the particular circumstances. The law of contract itself is, as I have indicated at [179]–[181], based generally not on what the parties actually thought or knew was the effect of particular words or conduct, but upon what they must reasonably be taken to have understood or known in all the relevant circumstances.
199 A similar objective approach is also found in tort and criminal law. Take the tort of knowing or dishonest assistance. This is committed where a breach of fiduciary duty has been committed by A, and B is said to have assisted it dishonestly. But dishonesty is judged objectively in the light of the circumstances known to the alleged assister. In other words, there are two stages: the first is to ascertain what the alleged assister knew; but, once that is ascertained, the honesty or dishonesty of their conduct falls to be judged by an objective standard of honesty to be expected and applied in the light of such knowledge: see Barlow Clowes International Ltd & Ors v Eurotrust International Ltd & Ors [2006] 1 WLR 1476; see also two recent judgments of the Court of Appeal of England and Wales applying this test: Group Seven Ltd v Notable Services LLP [2019] EWCA Civ 614 and Simetra Global Assets Ltd v Ikon Finance Ltd [2019] EWCA Civ 1413. This objective approach also applies in the criminal law: see Ivey v Genting Casinos (UK) Ltd [2018] AC 391, indicating that the decision in R v Ghosh [1982] QB 1043 should no longer be followed in so far as it stated that a defendant must be conscious subjectively that his conduct was dishonest.
200 There is nothing surprising, impermissible or unworkable therefore about a test which asks what any reasonable trader would have thought, given knowledge of the particular circumstances. That is the proper approach, in my opinion, in the present situation. Whether the unknown activities of two computers in the middle of the night should bind the parties should be judged by asking whether any reasonable trader, on the relevant exchange, knowing what was happening (or what had happened) could or would have thought, in the otherwise prevailing circumstances, that this was anything other than the consequence of a gross and unintended “major database breakdown” or error with equivalent effect. Since this is how B2C2 actually categorised it, the answer is doubly obvious. Of course, this test involves a hypothetical, as the Judge said at [204]. But it does not work on the basis of speculation as to what “might” have happened if a human element had been involved. On the contrary, it provides relief in equity in the present case because any reasonable person, knowing of the relevant market circumstances, would have known that there was a fundamental mistake. It is the Judge’s approach which seems to me, to use his word, “artificial” in assessing whether the contract can stand, not by reference to the circumstances and time when it was made, but on the basis that Mr Boonen would have to be shown to be aware in advance that the only circumstances in which a contract could come into existence at his deep prices would be if some fundamental mistake occurred. That prevents any assessment of the validity of computer-made contracts as and when made, and potentially enables traders to make what an honourable and reasonable trader would, I believe, identify as an unjustified windfall – and would expect to forego because it was such.
201 In the present case, there can only be one answer to the question of what any reasonable trader with knowledge of the market circumstances would have thought. There was not and never has been any suggestion that Mr Boonen’s very unusual or unfathomable market developments occurred. The only explanation of the transactions, whether hypothesised in advance, observed concurrently or considered early next morning, was and is major error – as B2C2 at once saw.
202 Mr Boonen was very well informed about actual world and market circumstances. The Judge recorded (at [102]):
… He explained that B2C2 was connected to 15 exchanges at the time, on some of which up to ten pairs were traded. The market for BTC/ETH on the Platform was relatively small …
As to Mr Boonen’s state of mind when next morning he observed the overnight trades, the Judge recorded (at [114]):
… Mr Boonen gave evidence that he was surprised when he first saw that the orders had been filled and that he considered the possibility that there was an error on the Platform or an error in the B2C2 system. Having checked that there were no apparent errors in either system he thought “Wow, there must have been something incredible happened [sic] in the market overnight”.
Mr Boone’s reaction that something incredible must have happened in the market overnight cannot have lasted more than a second, since his connection to fifteen world exchanges would have informed him that no such thing had happened.
203 Curiously, but very relevantly on this appeal, the Judge also omitted from the Judgment reference to one key document which above all others gives a key to Mr Boonen’s actual state of mind, on learning of the transactions next morning. He sent the email at 6.15am to Quoine’s support team requesting that it call B2C2 urgently as he had detected a “Major Quoine database breakdown”. That is what the Judge said he could well understand might be the reaction of an ordinary trader on the Platform, and it was evidently what Mr Boonen thought. The present case is one, in my judgment, where any reasonable trader would expect the general law to afford relief, as it does in more conventional cases of mistake.
Unconscionability
204 In so far as it is suggested that unconscionability is a pre-requisite to equitable relief, I would repeat what is indicated at [178] above. First, the present situation is one where the primary vitiating factor relied on is mistake, and, second, it is not one where relief is being sought on the basis of constructive notice. The question in the present case is not whether B2C2 had constructive notice, because constructive notice depends, like actual knowledge, on human involvement during the relevant transaction. The present case is one where the law needs to fashion an appropriate principle to cater for a situation where it is clear that there would have been actual knowledge of mistake had the actual transactions been foreseen in advance or had there been human involvement at the time (and where it is also the fact that there was such knowledge as soon as they were discovered). Unconscionability in bringing about the transactions cannot and should not have a role in relation to this novel situation, which is, as I have indicated at [178], closer to one of actual knowledge than of constructive notice. I add that is unnecessary on the facts to consider in this case whether equitable relief would extend to the (probably unlikely) situation in which all that could be affirmed was that the party in B2C2’s position, knowing of the transaction against the relevant market background, should have realised that it had only come about as a result of some fundamental error. In this case, it can unhesitatingly be affirmed that B2C2 would actually have realised this, and did do so as soon as it knew of the transaction.
205 To the extent that unconscionability may be relevant, it is in my view clearly unconscionable in the present context of unilateral mistake for a trader to retain the benefit of transactions which he would – and did – at once recognise as due to some major error as soon as he came to learn of them. This parallels the analysis taken, in my view appropriately, by the Court of Appeal of British Colombia took in 256593 BC Ltd at [26]–[28], and is consistent with other statements of principle: see [172]–[175] above. I may also be forgiven for quoting here from a judgment of my own in the area of unjust enrichment – McDonald v Coys of Kensington [2004] EWCA Civ 47. In that case, a purchaser insisted on holding onto a valuable registration number plate or mark (with the initials TAC 1) for which he had not contracted and which had remained on the vehicle as transferred to him by a mistake on the part of the vendor. The issue was whether the purchaser had been unjustly enriched. His defence was that he had done nothing wrong and had simply acquired the number plate as part of the car which was now his. Giving the sole reasoned judgment of the Court of Appeal of England and Wales and holding that he had been unjustly enriched, I said this at [37]:
Looking at the matter generally, I have no doubt that justice requires that a person, who (as a result of some mistake which it becomes evident has been made in the execution of an agreed bargain) has a benefit or the right to a benefit for which he knows that he has not bargained or paid, should reimburse the value of that benefit to the other party if it is readily returnable without substantial difficulty or detriment and he chooses to retain it (or give it away to a third party) rather than to re-transfer it on request. Even if realisable benefit alone is not generally sufficient, the law should recognise, as a distinct category of enrichment, cases where a benefit is readily returnable. A person who receives another’s chattel must either return it or pay damages, commonly measured by reference to its value. The mark is not a chattel, and it was not suggested before us that its return could at any stage (even before the gift to the partner) have been enforced, or that its non-return could sound in damages. (There were allegations below of implied duties to co-operate in the return of the mark, but the judge did not accept them, and there is no appeal in that respect.) However, Mr McDonald’s insistence on keeping the mark and the absence of any obvious means of compelling its re-transfer are reasons for analysing this case in terms of unjust enrichment. Mr McDonald knew that he had not bargained or paid for the mark. The mark or its benefit was in practice easily returnable. If Mr McDonald chose to keep it, then I see every reason for treating him as benefited.
206 In my opinion, a parallel analysis applies here. Equity will look at all aspects of a transaction. If it is immediately obvious that a mistaken transfer has occurred, a failure to do the honourable thing and return the benefit can be as unconscionable as the conduct of someone who plays some positive part in bringing the transaction about.
Conclusion
207 In these circumstances, and on the basis that the test in law is that which I have suggested it should be, the claim that the transactions were voidable for unilateral mistake should have succeeded. I would have allowed this appeal accordingly.
Jonathan Mance  
International Judge
Stanley Lai SC, Ong Min-Tse Paul, Lim Jun Rui Ivan and
Marrissa Miralini Karuna (Allen & Gledhill LLP) for the appellant;
amicus curiae.

SUPREME COURT OF SINGAPORE

24 February 2020

Case summary

Quoine Pte Ltd v B2C2 Ltd [2020] SGCA(I) 02
Civil Appeal No 81 of 2019

-----------------------------------------------------------------------------------------------------

Decision of the Court of Appeal (delivered by Chief Justice Sundaresh Menon) (Mance IJ dissenting):

Outcome: Majority of the Court of Appeal (comprising Chief Justice Sundaresh Menon, Andrew Phang Boon Leong JA, Judith Prakash JA and Robert Shenton French IJ) dismisses cryptocurrency exchange operator’s appeal on breach of contract claim arising from unilateral cancellation of cryptocurrency trades, but allows appeal on breach of trust claim.

Pertinent and significant points of the judgment

Introduction 

1 The appellant (“Quoine”) was the operator of a cryptocurrency exchange platform (“the Platform”). Quoine also functioned as a market-maker on the Platform by placing buy and sell orders to create liquidity. Quoine conducted its market-making trades through its “Quoter Program”.

2 The respondent (“B2C2”) was a trader on the Platform at the material time. B2C2 traded using algorithmic trading software (“the Trading Software”) designed by its director (“Mr Boonen”). The Trading Software was designed to function with minimal human intervention, and was deterministic in the sense of always producing the same output given the same input. The inputs to the Trading Software, which would be used to generate quotes for sale and purchase orders on the Platform, were to be the best 20 orders from the Platform. Built into the algorithm was a fail-safe “deep price” of 10 Bitcoin (“BTC”) to 1 Ethereum (“ETH”), which would be invoked should input data from the Platform be unavailable.

3 In 2017, Quoine’s oversight in making certain necessary changes to the Platform’s critical operating systems led to the Quoter Program’s failure to generate new orders. This led to the deep price in the Trading Software taking effect. B2C2’s sell orders were eventually matched with the buy orders of two other traders (“the Counterparties”). Eventually, 13 trades (“the Disputed Trades”) were concluded between B2C2 and the Counterparties at a rate of either 9.99999 BTC or 10 BTC for 1 ETH. These rates were approximately 250 times the then going rate in the market of around 0.04 BTC for 1 ETH.

 4 The Disputed Trades were automatically settled by the Platform, with BTC debited from the Counterparties’ accounts and credited into B2C2’s account, and ETH debited from B2C2’s account and credited into the Counterparties’ accounts. When Quoine became aware of the Disputed Trades the next day, it unilaterally cancelled the Disputed Trades and reversed the settlement transactions on the basis that the trades were concluded at highly abnormal rates.

5 B2C2 commenced proceedings against Quoine alleging that its unilateral cancellation of the Disputed Trades and reversal of the settlement transactions were in breach of contract or breach of trust. The International Judge who heard the matter (“the Judge”) rejected all of Quoine’s defences and allowed both of B2C2’s claims. Quoine appealed against the whole of the Judge’s decision.

The Judge's decision

6 The Judge held that the contract in respect of each concluded trade was made directly between the buyer and the seller. The users of the Platform were also contractually bound with Quoine under the terms and conditions of the agreement governing the use of the Platform (“the Agreement”).

7 As for B2C2’s breach of contract claim, the Judge held that Quoine’s unilateral cancellation of the Disputed Trades was a breach of the Agreement, and in particular of the clause which provided that once an order was filled, the trader was notified via the Platform and such an action was irreversible (“the Irreversible Action Clause”).

 8 As for B2C2’s breach of trust claim, the Judge found that Quoine held the BTC in B2C2’s account, which had been credited following the Disputed Trades, on trust for B2C2, and so Quoine was in breach of trust when it reversed the relevant credit transaction.

9 The Judge rejected Quoine’s defences for the following reasons:

(a)        The clause that purportedly allowed Quoine to cancel a transaction if this had occurred at an aberrant value (“the Aberrant Value Clause”) had not been incorporated into the Agreement.

(b)        Quoine’s proposed implied terms (“the Proposed Implied Terms”), which would allow it to reverse trades on the Platform under certain circumstances, contradicted the Irreversible Action Clause, and were, in any event, not necessary to give business efficacy to the Agreement.

(c)        The Trading Contracts were not vitiated on the basis of unilateral mistake at common law or in equity because Mr Boonen did not have actual or constructive knowledge of the alleged mistaken beliefs held by the Counterparties, and there was no impropriety on B2C2’s part.

(d)        The defence of common mistake at common law failed because even if Quoine held a mistaken belief as to the prices at which the Disputed Trades were to be concluded, B2C2 did not.

(e)        The fact that the Trading Contracts were valid and enforceable operated as a bar to any action in unjust enrichment.

The CA's decision

10 The Court of Appeal (“CA”) affirmed the Judge’s holding that the Trading Contracts were formed directly between B2C2 and the Counterparties. This characterisation best accorded with the terms of the Agreement, which made clear that Quoine was merely providing a service to the users of the Platform, who would transact with one another in the exchange of cryptocurrencies on the Platform (at [50] and [51]).

 11 The CA did not accept that there were express or implied terms in the Agreement that allowed Quoine to cancel the Disputed Trades. With regard to Quoine’s reliance on the Aberrant Value Clause, the CA agreed with the Judge that the Aberrant Value Clause had not been incorporated into the Agreement. Sufficient notice of the incorporation of this clause had to be given to users of the Platform before the clause could be regarded as having been incorporated, and this had not been done (at [66]).

 12 As for the Proposed Implied Terms, the CA agreed with the Judge that these were inherently incompatible with the Irreversible Action Clause, given that they purported to allow Quoine to reverse trades which had been executed and had become irreversible (at [71]).

 13 Turning to unilateral mistake, which formed the central feature of Quoine’s defence, the CA first reaffirmed the following principles:

(a)        For both unilateral mistake at common law and in equity, one party must have transacted while operating under a mistake as to a fundamental term of the contract. It was not necessary in this case for the CA to determine whether unilateral mistake in equity could extend beyond a mistake as to a term of the contract (at [80] and [92]).

(b)        The type of knowledge required on the part of the non-mistaken party of the mistaken party’s mistake differed depending on whether a party was seeking to invoke the doctrine of unilateral mistake at common law or in equity. The former required proof that the non-mistaken party had actual knowledge of the mistake at the time of the contract, while the latter required constructive knowledge (coupled with an element of unconscionability) (at [105]).

14 The question of how unilateral mistake should apply to contracts made by computerised trading systems should be answered by first considering the more fundamental issue of how such contracts were formed. Because a deterministic algorithm was bound by the parameters set by the programmer, it was the programmer’s state of knowledge that was relevant and to be attributed to the parties. The relevant inquiry was whether, when programming the algorithm, the programmer was doing so with actual or constructive knowledge of the fact that the relevant offer would only ever be accepted by a party operating under a mistake and whether the programmer was acting to take advantage of such a mistake. The relevant time frame within which the knowledge of a programmer or the person running the algorithm should be assessed was from the point of programming up to the point that the relevant contract was formed: at [93], [98], [99] and [103].

 15 As for the final requirement of unconscionability for unilateral mistake in equity, the CA held that it was not necessary for it to decide the question as to whether the narrow conception of unconscionability discussed in BOM v BOK and another appeal [2019] 1 SLR 349 should apply. Further, it was relevant when considering unilateral mistake in equity to have regard to the degree of carelessness or negligence on the part of the mistaken party to determine where the equities fell, even if a mistaken party’s carelessness would not in and of itself disentitle it from relief (at [110] and [111]).

 16 The CA rejected Quoine’s defences of unilateral mistake at common law and in equity. The Counterparties’ mistaken belief that they were buying ETH for BTC at prices that did not deviate significantly from the market price was not a mistake as to a term of the Trading Contracts. Rather, this was a mistake as to the premise on which the buy orders were placed, or a mistaken assumption that the Platform would not fail. Even assuming there was an operative mistake, Mr Boonen did not have actual or constructive knowledge of the Counterparties’ mistaken belief (at [114], [115] and [126]).

 17 The CA also rejected Quoine’s defence of common mistake at common law. B2C2 and the Counterparties could not have entered into the Disputed Trades under a shared mistaken assumption that they were transacting at or around the going market rate for ETH, given that B2C2 had placed its sell orders for ETH at prices of 9.99999 BTC and 10 BTC to 1 ETH on the Platform because the intentionally pre-programmed deep price of 10 BTC to 1 ETH in the PureQuote strategy had taken effect (at [129]).

 18 In considering Quoine’s defence of unjust enrichment, the CA proceeded on the basis that this was properly raised as a defence. This defence nonetheless failed, because the unjust factors that Quoine had raised were premised on the same points that had been rejected in relation to the analysis on unilateral mistake. Further, given the conclusion that the Trading Contracts were not vitiated, B2C2’s enrichment would have been pursuant to valid contracts was not unjust (at [132], [134] and [135]).

 19 On the trust question, the CA held that it was not necessary in the present case for it to decide whether cryptocurrency, specifically BTC, was a species of property that was capable of being held on trust. This was because no express trust arose over the BTC in B2C2’s account given that there was no certainty of intention to create a trust. The mere fact that Quoine’s assets were segregated from its customers’ could not in and of itself lead to that conclusion (at [144] and [145]).

 20 The CA therefore dismissed Quoine’s appeal on the breach of contract claim, and allowed its appeal on the breach of trust claim. Given the decision that the Trading Contracts were valid and enforceable, B2C2 was contractually entitled to the proceeds of the Disputed Trades from Quoine.

Mance IJ's dissenting judgment 

21 Mance IJ dissented on the issue of unilateral mistake. He opined that the law of unilateral mistake should not be applied in a manner that left out of consideration elements which were normally central to its application, namely whether there was anything drastically unusual about the surrounding circumstances or the state of the market to explain on a rational basis why such abnormal prices could occur, or whether the only possible conclusion was that some fundamental error had taken place, giving rise to transactions which the other party could never rationally have contemplated or intended. The law had to be adapted to the new world of algorithmic programmes and artificial intelligence, in a way which gave rise to the results that reason and justice would lead one to expect. Relief should be available if it would at once have been perceived by an honest and reasonable trader that some fundamental error had occurred (at [192], [193], [194] and [198]).

22 In the case at hand, any reasonable trader would at once have identified, as B2C2 did identify, a fundamental computer system breakdown as the cause of the transactions, and such error could be rectified without any suggested detriment to B2C2 or any relevant third party. The considerations in favour of reversal of the transactions outweighed in the balance any errors or faults which had led to that breakdown (at [194] and [195]).

 23 Mance IJ also considered that unconscionability in bringing about the transactions could not and should not have a role in relation to this novel situation, which was closer to one of actual knowledge than of constructive notice. To the extent that unconscionability might be relevant, it was in any event clearly unconscionable for a trader to retain the benefit of transactions which he would and did at once recognise as due to some major error as soon as he came to learn of them (at [204] and [205]).

This summary is provided to assist in the understanding of the Court’s judgment. It is not intended to be a substitute for the reasons of the Court. All numbers in bold font and square brackets refer to the corresponding paragraph numbers in the Court’s judgment.

Back to Top

This judgment text has undergone conversion so that it is mobile and web-friendly. This may have created formatting or alignment issues. Please refer to the PDF copy for a print-friendly version.

Version No 4: 27 Oct 2020 (22:41 hrs)